Senior Professional, Identity & Access Management

Our client, a leading global food, agriculture, and supply chain provider, is seeking a Senior Professional, Identity & Access Management to join their Identity Security team. This contract opportunity is ideal for an experienced Active Directory engineer who combines deep enterprise AD expertise with AWS infrastructure, automation, and modern infrastructure engineering practices. The role is approximately 60% AWS/Infrastructure Engineering and 40% Active Directory Engineering, with a strong focus on modernizing and transforming enterprise identity infrastructure.

Responsibilities

• Design, engineer, operate, and secure complex Active Directory forests, domains, trusts, organizational units, Group Policy, and domain controllers across large, distributed environments
• Troubleshoot and remediate Active Directory health issues, including authentication failures, replication, DNS dependencies, domain controller availability, and account-related incidents
• Design and support privileged access controls, delegated administration models, and administrative group structures in partnership with IAM and PAM teams
• Develop and maintain AWS and hybrid-cloud integration patterns that enable secure Active Directory authentication using LDAP and Kerberos
• Automate infrastructure provisioning, deployment, maintenance, and operational processes using Infrastructure as Code and modern DevOps practices
• Participate in disaster recovery planning, recovery testing, incident response, audits, security remediation, and continuous improvement initiatives
• Lead or significantly contribute to Active Directory modernization, migration, hardening, and infrastructure transformation initiatives

Requirements

Must-Haves

• Extensive hands-on experience administering and engineering Microsoft Active Directory in large, complex enterprise environments
• Strong understanding of AD forests, domains, trusts, domain controllers, Sites & Services, Group Policy, DNS, replication, authentication protocols, and delegated administration
• Experience supporting global, multi-domain, multi-forest, or multi-region Active Directory environments
• Proven AWS and cloud infrastructure experience, including experience with Active Directory deployed or integrated within AWS or hybrid-cloud environments
• Experience with Infrastructure as Code and automation tools such as Terraform, Ansible, Chef, or comparable technologies
• Experience with CI/CD, DevOps, SRE, platform engineering, or modern software/infrastructure engineering practices
• Strong experience with Active Directory security, hardening, audit remediation, privileged access, disaster recovery, and operational resiliency

Nice-to-Haves

• Experience with AWS Active Directory environments, including Managed Microsoft AD and self-hosted domain controllers
• Knowledge of Active Directory integrations with IAM, PAM, authentication, and identity governance platforms
• Experience implementing authentication solutions using Kerberos and LDAP
• Proficiency in Active Directory automation, provisioning, configuration management, and security remediation
• Experience conducting disaster recovery testing and operational readiness exercises
• Exposure to cloud migrations, authentication modernization, and infrastructure transformation initiatives
• Familiarity with enterprise identity management strategies and modern security architectures

Key Competencies & Behaviors

• Scalable Infrastructure Design
• Cloud Automation Focus
• Security Risk Management
• Advanced Problem Solving
• Collaborative Team Ownership

Work Environment

Location: Wayzata, MN
Work arrangement: Onsite

Pay

The approximate pay range for this position is between $58.00 and $83.00 per hour. Final compensation may vary based on factors including but not limited to background, knowledge, skills, and location.

Benefits

• Medical, Dental, & Vision Insurance Plans
• Employee-Owned Profit Sharing (ESOP)
• 401K offered

This is a contract position.