IAM Entra ID specialist

About the role

Design, implement, and oversee identity and access management systems within the organization. Ensure secure access to resources, minimize risk exposure, and maintain compliance with security standards. This role focuses on improving Active Directory implementation and modernizing it with extension into Amazon Web Services (AWS) and broader cloud environments.

Responsibilities

• Design, engineer, operate, and secure Active Directory forests, domains, trusts, organizational units, Group Policy, and domain controllers.
• Partner with IAM and PAM teams to design and support privileged access controls, including administrative group structures and delegated administration models.
• Monitor, troubleshoot, and remediate Active Directory health issues, including authentication failures, replication, DNS dependencies, domain controller availability, and account state incidents.
• Support integrations between Active Directory and identity governance, access request, authentication, and certification platforms.
• Develop and maintain standards, runbooks, and operational documentation for Active Directory services and domain controller operations.
• Participate in change management, incident response, audits, and continuous improvement initiatives aligned to the IAM roadmap and security strategy.
• Develop integration patterns with AWS to facilitate authentication with AD using LDAP or Kerberos.
• Develop application development patterns encouraging app devs to leverage Kerberos over LDAP.
• Review deliverables defined as part of domain-led transformation initiatives to ensure successful execution.
• Conduct market research and benchmarking, including review of forecasting models and cost-benefit analysis.
• Plan and forecast strategies across enterprise engagements, ensuring consistency and scalability.
• Lead domain optimization and solution programs, ensuring governance, quality, and value creation.
• Conduct performance reviews, facilitate professional development, and mentor consultants.
• Review and approve technical documentation for functional accuracy, completeness, and alignment with standards.
• Provide guidance to teams on maintaining consistency, clarity, and quality across deliverables.
• Lead initiatives to articulate complex technical concepts into clear communication materials.
• Monitor project financials, optimize resource utilization, and ensure adherence to margin targets.
• Identify growth opportunities in existing accounts and participate in RFP discussions.
• Create whitepapers, reusable frameworks, and knowledge assets while guiding teams to adopt best practices.

Requirements

• Hands-on experience administering Microsoft Active Directory in large, complex enterprise environments.
• Strong understanding of Active Directory security principles, delegation models, and privileged group management.
• Experience operating Active Directory as part of an integrated Identity and Access Management (IAM) ecosystem.
• Proven troubleshooting skills across authentication, replication, DNS, account lifecycle, and access issues.
• Experience working with AWS and its Active Directory implementation options (e.g., Managed AD, self-hosted).
• Experience integrating Active Directory with identity governance or privileged access management platforms.
• Experience supporting global, multi-domain, or multi-region Active Directory environments.
• 8-10 years of relevant experience.

Skills

• Microsoft Entra ID

Pay

Expected compensation ranges from $80,000 to $158,000. Final compensation will depend on geographical location, minimum wage obligations, skills, and relevant experience.

Benefits

• Full range of medical and dental benefits options.
• Disability insurance.
• Paid time off (inclusive of sick leave).
• Other paid and unpaid leave options.