Job Description:
• Architect and maintain an Identity-as-Code ecosystem using CI/CD pipelines to automate directory changes, security policy updates, and infrastructure provisioning for global Active Directory
• Lead the design, implementation, and management of global, resilient identity infrastructure across public cloud and on-premise environments
• Serve as the final escalation point for complex and critical Active Directory incidents
• Perform advanced troubleshooting and root cause analysis
• Implement observability and alerting in New Relic and other tools for directory health, performance, and reliability monitoring
• Define and govern the AD Delegation and Tiered Administration model based on least privilege
• Lead onboarding and integration of applications and services with identity platforms such as Okta
• Mentor teams on security best practices and improve identity reliability and lifecycle management
• Own and publish standards and best-practice documentation for identity architecture, administration, and security
Requirements:
• Deep expertise in Active Directory Domain Services, including DNS, DHCP, Certificate Services, and Group Policy Object management
• Experience with AWS Directory Service and Azure Active Directory/Entra ID preferred
• Deep understanding of Identity Governance and Administration processes, automated user lifecycle management, RBAC/ABAC, and compliance reporting
• Proven experience implementing GitOps workflows for infrastructure configuration
• Proficiency with Terraform, Chef, Ansible, or PowerShell DSC
• Familiarity with directory log analysis using SIEM tools such as Azure Sentinel
• 10+ years of progressive experience in IT, Systems Engineering, DevOps, or Identity Engineering
• Minimum 2+ years in a technical leadership role
• Proven track record defining and driving technical roadmaps for identity and access management platforms
• Competency in PowerShell, Python, or equivalent scripting languages
• Experience building and running modern identity solutions using AWS, Azure, or GCP
• Solid understanding of networking systems and protocols, including TCP/IP, DNS, and DHCP
• Bachelor’s degree in Computer Science, Computer Engineering, or equivalent professional experience
• US Citizenship required due to Gov cloud and FedRamp requirements
Benefits:
• Two company-wide paid wellness days off each year
• Paid day off on your birthday or another day within your birthday month
• 40 hours of paid volunteer time off annually
• Free, confidential, 24/7/365 Employee Assistance Program with counseling and work-life, financial, legal, and new-parent resources
• Zurich Travel Assist business travel medical, safety, pre-trip planning, and emergency support
• Monetary referral bonuses for successful employee referrals
• Location-specific comprehensive medical/dental insurance
• Retirement/pension plans
• Life or accident protection