Identity & Access Management Professional

Key Responsibilities

• Design, engineer, administer, and secure Microsoft Active Directory forests, domains, trusts, organizational units (OUs), Group Policy Objects (GPOs), and domain controllers.
• Lead Active Directory modernization efforts across hybrid and cloud environments, including AWS integration initiatives.
• Design and implement authentication and authorization solutions leveraging LDAP, Kerberos, and hybrid identity architectures.
• Develop and maintain integration patterns between Active Directory, AWS Managed Microsoft AD, self-hosted AD environments, and enterprise applications.
• Partner with IAM and PAM teams to implement privileged access controls, delegated administration models, and security governance frameworks.
• Monitor, troubleshoot, and resolve Active Directory issues related to authentication, replication, DNS, domain controller health, and account lifecycle management.
• Support integrations between Active Directory and identity governance, access request, certification, authentication, and privileged access platforms.
• Contribute to cloud modernization efforts through Infrastructure as Code (IaC), automation, CI/CD practices, and DevOps methodologies.
• Develop operational standards, runbooks, architectural documentation, and technical procedures.
• Participate in incident response, audit activities, change management processes, and continuous improvement initiatives.

Core Qualifications

• 8+ years of hands-on experience administering and engineering Microsoft Active Directory in large-scale enterprise environments.
• Strong expertise with Active Directory forests, domains, trusts, domain controllers, OU management, and Group Policy administration.
• Proven experience designing, implementing, and securing enterprise Active Directory environments.
• Deep understanding of Active Directory security, delegation models, privileged group administration, and identity governance principles.
• Experience troubleshooting authentication, replication, DNS, domain controller, and access-related issues.
• Hands-on experience integrating Active Directory with AWS environments, including AWS Managed Microsoft AD and self-hosted AD solutions.
• Experience developing LDAP and Kerberos authentication solutions and enterprise integration patterns.
• Strong knowledge of hybrid identity architectures and Microsoft Entra ID integration.
• Experience supporting Active Directory within a broader IAM and PAM ecosystem.
• Experience working in global, multi-domain, and multi-region Active Directory environments.
• Ability to design architecture-level solutions while remaining actively involved in implementation and operational support.
• Strong communication, collaboration, documentation, and stakeholder management skills.