Security Engineer - Directory Services

About the role

This is a regular, full‑time position requiring English fluency and working 1st shift in the United States. The role is office‑centric (5 days a week) in one of the following locations: Atlanta, GA; Charlotte, NC; Raleigh, NC; or Wilson, NC. Truist will not sponsor work visas or provide immigration‑related support for this position.

Come join a growing team that is responsible for the design/engineering/operation of the following foundational infrastructure technology services:

• Microsoft Active Directory Domain Services
• Microsoft Active Directory Federation Services (ADFS)
• Microsoft Active Directory Certificate Services
• Microsoft DHCP
• Microsoft DNS
• Microsoft Entra Connect
• Microsoft Distributed File System (DFS)
• Microsoft Key Management Services (KMS)
• Microsoft Identity Manager (MIM)
• Microsoft Remote Desktop Licensing (RDL)
• Quest product suite
• Cisco Identity Services Engine (ISE)

Responsibilities

• Designs and implements cybersecurity solutions that protect critical assets within the job area, contributing to the technical design and implementation approach while following established strategies and patterns.
• Performs threat modeling, security testing, and penetration testing for the platforms and services in scope, using structured analysis to identify and remediate significant vulnerabilities.
• Integrates and configures information security technologies in production environments, implementing and refining configuration patterns, automation, and handoff steps for assigned systems or services.
• Serves as a technical escalation point within the team for challenging security issues, investigating root causes and developing practical, reusable fixes that improve team workflows.
• Evaluates relevant security threats, tools, and design options, and provides input that helps shape technical plans, priorities