Senior Professional, Identity & Access Management

Responsibilities

• Design, configure, operate, and secure Active Directory forests, domains, trusts, organizational units, Group Policy, and domain controllers.
• Partner with IAM and PAM teams to support privileged access controls, delegated administration, and group structure design.
• Monitor and resolve Active Directory issues related to authentication, replication, DNS, domain controller availability, and account states.
• Create and maintain operational standards, runbooks, and documentation for Active Directory and domain controller services.
• Participate in incident response, change management, audits, and ongoing improvement efforts aligned to security and IAM objectives.
• Develop integration patterns with AWS to support authentication through LDAP or Kerberos.
• Encourage application teams to use Kerberos-based approaches where appropriate to improve authentication patterns.

Requirements

• Hands-on experience administering Microsoft Active Directory in large, complex enterprise environments.
• Strong understanding of Active Directory security, delegation models, and privileged group management.
• Experience operating Active Directory within a broader IAM ecosystem.
• Proven troubleshooting skills across authentication, replication, DNS, lifecycle, and access-related issues.
• Experience working with AWS and Active Directory implementation options such as Managed AD or self-hosted solutions.
• Experience integrating Active Directory with identity governance or privileged access management platforms.
• Experience supporting global, multi-domain, or multi-region Active Directory environments.

Skills

• Hands-on experience administering Microsoft Active Directory in large, complex enterprise environments.
• Strong understanding of Active Directory security, delegation models, and privileged group management.
• Experience operating Active Directory within a broader IAM ecosystem.
• Proven troubleshooting skills across authentication, replication, DNS, lifecycle, and access-related issues.
• Experience working with AWS and Active Directory implementation options such as Managed AD or self-hosted solutions.
• Experience integrating Active Directory with identity governance or privileged access management platforms.
• Experience supporting global, multi-domain, or multi-region Active Directory environments.

Preferred Skills

• Experience creating standards, procedures, and operational documentation for identity services.
• Familiarity with secure access design and modernization initiatives in hybrid environments.
• Ability to work collaboratively across IAM, PAM, infrastructure, security, and application teams.
• Strong communication, problem-solving, and continuous-improvement mindset.