Senior Directory Infrastructure engineer.

Accountabilities:

• Design, implement, maintain, and optimize enterprise directory services infrastructure across Active Directory, Microsoft Entra ID, Okta Universal Directory, and LDAP environments.

• Manage the complete lifecycle of Active Directory domains, including planning, creation, deployment, maintenance, upgrades, and decommissioning.

• Lead complex domain consolidation, migration, and Active Directory forest restructuring initiatives.

• Design and manage trust relationships between domains and forests to ensure secure and reliable identity operations.

• Develop domain health monitoring strategies and proactive maintenance procedures to maintain infrastructure availability and performance.

• Create, implement, and maintain disaster recovery plans for directory services and ensure operational resilience.

• Develop and maintain advanced PowerShell scripts to automate directory administration, maintenance, and management activities.

• Integrate directory services with external platforms and applications using Microsoft Graph API and REST APIs.

• Implement identity security best practices, access management controls, and compliance requirements across enterprise environments.

• Manage directory synchronization technologies, including Azure AD Connect and Okta integration agents.

• Support modern identity security approaches, including Just-In-Time access, Privileged Identity Management, continuous validation, and Zero Trust principles.

• Develop and maintain comprehensive technical documentation covering directory architecture, configurations, and operational procedures.

• Provide advanced troubleshooting and escalation support for critical directory infrastructure incidents.

• Collaborate with security, infrastructure, and engineering teams to deliver complex identity solutions and continuously improve enterprise directory services.

Requirements:

• Bachelor's degree in a relevant technical discipline or equivalent qualifications.

• At least 6 years of hands-on experience with enterprise directory services, including Active Directory, Microsoft Entra ID, Okta Universal Directory, and LDAP.

• Minimum 5 years of experience managing the Active Directory domain lifecycle, including domain creation, upgrades, maintenance, and decommissioning.

• At least 5 years of advanced PowerShell scripting experience, particularly in automating directory management and infrastructure operations.

• Minimum 5 years of experience integrating directory management solutions through Microsoft Graph API and REST APIs.

• Strong understanding of identity security best practices, enterprise access management, and regulatory compliance requirements.

• At least 5 years of experience with directory synchronization technologies, such as Azure AD Connect and Okta integration agents.

• Minimum 5 years of experience working with multi-forest and hybrid identity environments.

• At least 5 years of experience designing and implementing complex enterprise directory architecture solutions.

• Strong knowledge of identity infrastructure administration, domain architecture, and enterprise authentication environments.

• Ability to troubleshoot complex technical issues and deliver scalable, secure, and reliable infrastructure solutions.

• Excellent analytical, problem-solving, and technical documentation skills.

• Strong communication and collaboration abilities, with the capacity to work effectively across security and engineering teams.

Preferred qualifications:

• Relevant industry certifications, such as Microsoft 365 Certified: Identity and Access Administrator or Okta Professional.

• Experience with Infrastructure as Code (IaC) tools such as Terraform and Ansible.

• Knowledge of modern authentication protocols, including SAML, OAuth, and OpenID Connect (OIDC).

• Experience designing, implementing, and managing Group Policy environments.

• Expertise in domain controller sizing, placement, capacity planning, and performance optimization.

• Experience with domain functional level upgrades and cross-domain migrations.

• Familiarity with CI/CD pipelines for infrastructure automation.

• Practical experience implementing Zero Trust architecture and modern identity security frameworks.

Benefits:

• Competitive hourly compensation ranging from $94 to $105 per hour.

• Fully remote work arrangement within the United States.

• Opportunity to work on complex enterprise identity and directory infrastructure projects.

• Exposure to modern technologies, including Microsoft Entra ID, Okta, Active Directory, and cloud-based identity solutions.

• Opportunity to contribute to enterprise security initiatives and infrastructure modernization.

• Professional growth through challenging technical projects and advanced identity architecture responsibilities.