Enterprise Active Directory & Identity Engineer

We are seeking an experienced Enterprise Active Directory & Identity Engineer who understands that enterprise identity involves much more than managing users and computers. This role requires deep knowledge of how domains, forests, organizational units, Group Policy, trusts, authentication, DNS, and replication work together in a complex environment.

You will engineer, troubleshoot, maintain, and modernize identity services across a large enterprise infrastructure. The position supports established on-premises Active Directory environments while advancing the adoption of Microsoft Entra ID and Azure-based identity capabilities.

Responsibilities

• Engineer and improve complex Active Directory environments spanning multiple domains, forests, organizational units, and interconnected systems.
• Analyze and manage Group Policy design, inheritance, precedence, filtering, enforcement, and enterprise-wide impact.
• Troubleshoot Windows authentication, domain connectivity, replication, DNS integration, policy application, and directory-related issues.
• Investigate how identity configurations affect operating systems, applications, infrastructure services, security controls, and other enterprise capabilities.
• Support domain trusts, forest relationships, cross-domain authentication, and directory dependencies.
• Help integrate and evolve traditional Active Directory services with Microsoft Entra ID and Azure identity capabilities.
• Identify configuration weaknesses, policy inconsistencies, security gaps, and opportunities to improve identity administration.
• Use PowerShell and related tools to analyze configurations, automate administrative tasks, validate policy enforcement, and improve operational efficiency.
• Collaborate with engineering teams across systems, applications, virtualization, networking, cloud, and cybersecurity.

What Success Looks Like You understand how identity operates across the enterprise,not just how to administer individual components. You can trace Group Policy behavior through organizational units, inheritance, filtering, and domain configuration. You can investigate authentication failures, replication issues, trust relationships, and directory dependencies using evidence rather than guesswork.

Requirements

• Bachelor of Arts/Bachelor of Science
• 8+ years of related experience
• Experience engineering or supporting enterprise Microsoft Active Directory environments
• Strong knowledge of Active Directory domains, forests, organizational units, and trust relationships
• Practical experience designing, configuring, and troubleshooting Group Policy
• Understanding of Active Directory replication, authentication, DNS integration, and directory services
• Strong Windows Server and Windows operating system troubleshooting skills
• Experience using PowerShell to manage, automate, investigate, or troubleshoot Active Directory

Preferred Qualifications

• Microsoft Entra ID administration or engineering
• Hybrid identity architecture and synchronization between on-premises Active Directory and Entra ID
• Microsoft Entra Connect or Cloud Sync
• Azure identity and access management
• Active Directory Federation Services (AD FS)
• Active Directory Certificate Services (AD CS) and public key infrastructure

Benefits

• Comprehensive benefits and wellness packages
• 401K with company match
• Competitive pay and paid time off
• Full flex work weeks where possible
• Paid parental, military, bereavement, and jury duty leave
• Short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance