Active Directory Specialist

We are seeking an experienced Identity & Access Management (IAM) Professional with deep expertise in Microsoft Active Directory and cloud integrations to support and modernize enterprise identity infrastructure. This role will focus on designing, securing, and operating Active Directory environments while extending identity services into AWS and other cloud platforms.

• Design, engineer, administer, and secure Active Directory forests, domains, trusts, organizational units (OUs), Group Policy Objects (GPOs), and domain controllers.
• Develop and maintain Active Directory security standards, delegation models, and privileged access controls.
• Partner with IAM and PAM teams to implement and support privileged access management solutions.
• Monitor and troubleshoot Active Directory health, including authentication issues, replication failures, DNS dependencies, account lifecycle incidents, and domain controller availability.
• Support integrations between Active Directory and identity governance, authentication, access request, and certification platforms.
• Design and implement Active Directory integration patterns within AWS environments, including Managed Microsoft AD and self-managed solutions.
• Develop authentication frameworks leveraging Kerberos and LDAP, with a strong focus on promoting secure, scalable application integration patterns.
• Create and maintain operational documentation, standards, runbooks, and procedures.
• Participate in change management, incident response, audit support, compliance activities, and continuous improvement initiatives.

• Hands-on experience administering Microsoft Active Directory in large-scale enterprise environments.
• Strong expertise in AD security, delegation models, group management, and identity administration.
• Experience supporting Active Directory as part of a broader Identity and Access Management (IAM) ecosystem.
• Advanced troubleshooting skills involving authentication, replication, DNS, account management, and access-related issues.
• Experience working with AWS and Active Directory integration solutions such as AWS Managed Microsoft AD, AWS Directory Services, or self-hosted deployments.
• Experience integrating Active Directory with Identity Governance (IGA) and Privileged Access Management (PAM) platforms.
• Experience supporting global, multi-domain, and multi-region Active Directory environments.

• IAM, IGA, and PAM technologies (SailPoint, Saviynt, Cyber Ark, Delinea, Beyond Trust, etc.)
• Kerberos and LDAP authentication protocols
• AWS Directory Services and cloud identity integration
• Enterprise directory services architecture