IAM Engineer - Enterprise Active Directory

Mission

The mission of this role is to implement and maintain enterprise-level Active Directory (AD) environments ensuring secure, scalable, and compliant identity and access management across the organization.

About the role

This role ensures secure, scalable, and compliant identity and access management across the organization and blends deep engineering execution (automation, scripting, integration, troubleshooting) with architecture/design contributions and technical leadership including leading complex initiatives spanning multiple lines of business.

Responsibilities

• Deploy and manage Active Directory infrastructure, including domain controllers, group policies, and organizational units
• Deploy and manage 14 applications supporting Active Directory
• Update software and configurations to address vulnerabilities
• Lead troubleshooting and resolution of complex AD issues, including authentication, replication, and access control
• Develop, update, and enforce security standards for AD, including privileged access management and audit logging
• Collaborate with IT, cybersecurity, and application teams to integrate AD with enterprise systems and cloud platforms
• Maintain documentation and provide technical guidance for AD operations and best practices
• Participate in compliance reviews and risk assessments related to identity and access management
• Manage workload in Jira using Agile principles

Requirements

• 5+ years of extensive hands-on Active Directory Engineering experience with Microsoft Entra ID (Azure AD) in an enterprise environment
• Experience with Domain Controller Virtualization
• Experience with Domain Controller Management/Administration and building domain controllers
• Experience working in an Agile environment & hands on experience using JIRA
• 5+ years experience of strong scripting & automation capability (PowerShell and/or Python strongly preferred), with demonstrated ability to productionize scripts (logging, error handling, modularity, testing approach)
• 4+ years of Identity & Access Management experience including IAM frameworks, privileged access management, and compliance requirements
• Experience implementing identity security capabilities such as Conditional Access, privileged access workflows (e.g., PIM), and tenant/directory hardening
• Demonstrated ability to lead complex projects across multiple teams/lines of business, including planning, sequencing dependencies, and driving delivery

Qualifications

• Excellent written and verbal communication skills, including the ability to explain tradeoffs and influence outcomes

Skills

• access
• automation
• active directory
• security
• enterprise
• management
• architecture
• iam