Note: The job is a remote job and is open to candidates in USA. Cardinal Health is hiring an Active Directory Engineer to engineer, administer, modernize, and maintain its enterprise Active Directory and Microsoft identity infrastructure. The role supports reliable, secure directory services, identity automation, cloud identity integration, and Zero Trust initiatives in partnership with infrastructure, security, IAM, and application teams.
Responsibilities
- Install, configure, administer, and maintain: - Active Directory Domain Services (AD DS) - Active Directory Lightweight Directory Services (AD LDS) - Microsoft Entra ID integration - Active Directory Certificate Services (AD CS) - Group Policy infrastructure - DNS and DHCP services supporting AD - Hybrid identity synchronization services
- Perform platform upgrades, migrations, patch management, and lifecycle management
- Monitor AD health, replication, authentication services, and directory performance
- Manage domain controllers, forests, domains, trusts, sites, and services
- Support directory consolidation, modernization, and cloud identity initiatives
- Develop standards for directory services architecture and operational support
- Administer users, groups, organizational units (OUs), and directory permissions
- Design and implement Group Policy Objects (GPOs)
- Maintain Active Directory delegation models
- Support enterprise authentication services relying on LDAP, Kerberos, NTLM, and SAML
- Administer service accounts and managed service accounts
- Support certificate-based authentication and PKI integrations
- Maintain naming standards, OU structures, and directory governance
- Develop PowerShell-based automation solutions
- Create and maintain automation for: - User lifecycle management - Group management - Service account governance - GPO deployment - AD health monitoring - Certificate lifecycle management
- Develop integrations using: - PowerShell, REST APIs, LDAP and Microsoft Graph APIs
- Support Infrastructure-as-Code and platform automation initiatives where applicable
- Support SOX, HIPAA, PCI, NIST, and internal security controls
- Assist with audit evidence collection and compliance reviews
- Maintain technical documentation, standards, and operational procedures
- Participate in risk assessments and remediation efforts
- Support policy enforcement through Group Policy and directory controls
- Support Zero Trust identity initiatives
- Enable passwordless authentication
- Support Entra ID modernization and cloud identity transformation
- Enhance automation of directory services operations
- Support identity telemetry, security analytics, and operational reporting
- Participate in Non-Human Identity (NHI) governance initiatives where directory services are involved
Skills
- 4-8 years of experience, preferred
- Bachelor's degree in related field, or equivalent work experience, preferred
Benefits
- Country-wide remote work
- Medical, dental and vision coverage
- Paid time off plan
- Health savings account (HSA)
- 401k savings plan
- Access to wages before pay day with myFlexPay
- Flexible spending accounts (FSAs)
- Short- and long-term disability coverage
- Work-Life resources
- Paid parental leave
- Healthy lifestyle programs
Company Overview
Company H1B Sponsorship