Security Operations Domain Administrator (G31)

Job Functions/Responsibilities

• Designing and managing complex Microsoft Active Directory structures, including forests, domains, trusts, and replication topology.
• Oversees global cloud governance by managing the entire Microsoft 365 and Azure tenant with full Global Admin privileges over users, groups, licenses, and service settings.
• Implements advanced security and Identity and Access Management (IAM) policies such as MFA, Conditional Access, and Privileged Identity Management (PIM).
• Led infrastructure modernization through Security and Security Operations projects, domain restructuring, and PowerShell automation.
• Provides Tier 3 support, subject matter expertise, and team mentorship for complex authentication, synchronization, and group policy issues.
• Responsible for daily domain and tenant administration tasks, troubleshooting complex issues, and participates in an on-call rotation.

Qualifications

• 7+ years of experience as a Systems Engineer in a medium to large enterprise environment with primary duties in Windows domain administration and managing Active Directory infrastructure.
• Bachelor's degree in Computer Science, Information Systems, or closely related field.
• Deep expertise in installation, operation, and maintenance of highly complex, enterprise-level Active Directory Domain Services in a hybrid on-premises and Microsoft Entra (Azure AD) cloud environment.
• Strong proficiency in Advanced PowerShell scripting for automation.
• Expertise with IT infrastructure technologies including DNS, DHCP, PKI, and certificate management.
• Advanced skills in writing and maintaining PowerShell scripts for automating identity management, compliance reporting, and service configurations across the enterprise.
• Excellent problem-solving skills and the ability to troubleshoot complex technical issues.
• Strong communication skills and the ability to work effectively with cross-functional teams.
• Experience monitoring and working out of an ITSM ticketing system such as ServiceNow.
• Availability to work “on-call” 24 hours/day for emergencies, and flexibility in schedule.
• Familiarity with domain-related disaster recovery and business continuity planning.
• Deep functional understanding of Windows 10/11, Windows Server, Active Directory Domain Services, Group Policy, DNS, PKI, and Federation.
• CISSP, Microsoft role-based Expert certification, or equivalent industry certification strongly desired.

Company Information

PACCAR is a Fortune 500 company established in 1905. PACCAR Inc is recognized as a global leader in the commercial vehicle, financial, and customer service fields with internationally recognized brands such as Kenworth, Peterbilt, and DAF trucks. PACCAR is a global technology leader in the design, manufacture and customer support of premium light-, medium- and heavy-duty trucks under the Kenworth, Peterbilt and DAF nameplates and also provides customized financial services, information technology and truck parts related to its principal business.

Division Information

PACCAR’s Information Technology Division (ITD), located in Renton, WA utilizes cutting-edge technology to provide systems development, consulting, voice and data communications services to the entire Corporation, which has high visibility in the technology sector.

PACCAR Benefits

• 401k with up to a 5% company match
• Comprehensive paid time off – minimum of 10 paid vacation days (additional days are provided with additional seniority/years of service), 12 paid holidays, and sick time
• Tuition reimbursement for continued education
• Medical, dental, and vision plans for you and your family
• Flexible spending accounts (FSA) and health savings account (HSA)
• Paid short-and long-term disability programs
• Life and accidental death and dismemberment insurance
• EAP services including wellness plans, estate planning, financial counseling and more

Additional Job Board Information

PACCAR is an Equal Opportunity Employer/Protected Veteran/Disability. At PACCAR, we value talent and promote growth and development. We carefully consider numerous compensation factors, including your education, training, or experience. Applicants and employees for this position will not be sponsored for work authorization, including, but not limited to H-1B visas, now or in the future. The salary range for the Senior Domain Administrator is $100,100 - $156,600 annually. Additionally, this role is eligible for a full range of benefit options listed above. This position is also eligible for a holiday gift.