The Senior Professional, Identity & Access Management

6-month contract role in Wayzata, MN (onsite) with a pay rate range of $75/hr – $89.62/hr on W2, depending on experience.

Responsibilities

• Design, engineer, operate, and secure Active Directory forests, domains, trusts, organizational units, Group Policy, and domain controllers.
• Partner with IAM and PAM teams to design and support privileged access controls, including administrative group structures and delegated administration models.
• Monitor, troubleshoot, and remediate Active Directory health issues, including authentication failures, replication, DNS dependencies, domain controller availability, and account state incidents.
• Support integrations between Active Directory and identity governance, access request, authentication, and certification platforms.
• Develop and maintain standards, runbooks, and operational documentation for Active Directory services and domain controller operations.
• Participate in change management, incident response, audits, and continuous improvement initiatives aligned to the IAM roadmap and security strategy.
• Develop integration patterns with AWS to facilitate authentication with AD using LDAP or Kerberos.
• Develop application development patterns encouraging app devs to leverage Kerberos over LDAP.

Requirements

• Hands-on experience administering Microsoft Active Directory in large, complex enterprise environments.
• Strong understanding of Active Directory security principles, delegation models, and privileged group management.
• Experience operating Active Directory as part of an integrated Identity and Access Management (IAM) ecosystem.
• Proven troubleshooting skills across authentication, replication, DNS, account lifecycle, and access issues.
• Experience working with AWS and any of its Active Directory implementation options (e.g., Managed AD, self-hosted, etc.).
• Experience integrating Active Directory with identity governance or privileged access management platforms.
• Experience supporting global, multi-domain, or multi-region Active Directory environments.

Benefits

• Comprehensive healthcare coverage (medical, dental, and vision plans).
• Supplemental coverage (accident insurance, critical illness insurance, and hospital indemnity).
• 401(k) retirement savings plan.
• Life and disability insurance.
• Employee assistance program and legal support.
• Pet insurance.
• Employee discounts with preferred vendors.