More jobs:
Active Directory/Identity Specialist
Job in
Bakersfield, Kern County, California, 93301, USA
Listed on 2026-11-01
Listing for:
Tekaccel Inc.
Full Time
position Listed on 2026-11-01
Job specializations:
-
IT/Tech
Cybersecurity, Systems Administrator, Information Security & Data Protection, Cloud Computing: Infrastructure & Operations
Job Description & How to Apply Below
Role:
Active Directory / Identity Specialist
Location:
San Jose, CA (Onsite)
Jd:
Key Responsibilities Active Directory & Hybrid Identity
- Design, deploy, and maintain AD DS forests, domains, trusts, sites, and replication topologies
- Administer Group Policy, DNS, DHCP, DFS, and AD Certificate Services (PKI)
- Implement and support Microsoft Entra , Entra Connect / Cloud Sync, and hybrid join
- Lead AD consolidation, domain migrations, and cloud identity modernization projects
- Configure SSO, federation (ADFS, SAML, OIDC, OAuth 2.0), and MFA across enterprise applications
- Implement Conditional Access, Privileged Identity Management (PIM), and least-privilege role models
- Automate joiner / mover / leaver lifecycle processes and access reviews
- Integrate identity platforms (Okta, Ping, SailPoint, Cyber Ark) with HR and ITSM systems
- Harden AD against attack paths (tiered administration, LAPS, Kerberos, NTLM reduction)
- Monitor and remediate identity threats using Defender for Identity, Entra , and SIEM tooling
- Support audit and compliance requirements (SOX, SOC 2, NIST, ISO 27001)
- Perform health checks, risk assessments, and remediation planning
- Troubleshoot complex authentication, replication, and directory issues (Tier 3 escalation)
- Automate administration with Power Shell and infrastructure-as-code
- Produce architecture diagrams, runbooks, and knowledge transfer for client teams
- Partner with clients, security, and application teams on requirements and delivery
- 5+ years of hands‑on experience administering Active Directory in enterprise environments
- Strong knowledge of AD DS, DNS, Group Policy, Kerberos, LDAP, and PKI
- Experience with Microsoft Entra hybrid identity (Entra Connect, SSO, MFA, Conditional Access)
- Proficiency in Power Shell scripting and automation
- Working knowledge of identity security concepts: least privilege, RBAC, privileged access, and zero trust
- Experience with Windows Server 2016/2019/2022 and supporting large, multi‑site environments
- Ability to troubleshoot replication, authentication, and directory performance issues
- Bachelor's degree in Computer Science, Information Technology, or equivalent practical experience
- Experience leading AD migrations, forest/domain restructures, or M&A identity integrations
- Exposure to IGA / PAM platforms such as SailPoint, Cyber Ark, Beyond Trust, or Saviynt
- Familiarity with Okta, Ping Identity, or other third‑party Id Ps
- Experience with Microsoft Defender for Identity, Sentinel, or Splunk for identity monitoring
- Knowledge of Azure / AWS identity services and infrastructure-as-code (Terraform, Bicep)
- Prior consulting or client‑facing delivery experience
- Microsoft Identity and Access Administrator (SC-300)
- Microsoft Identity and Access Administrator (SC-300)
- Microsoft Azure Administrator (AZ-104)
- Microsoft Certified:
Cybersecurity Architect Expert (SC-100)
- CISSP or Security+
- Okta Certified Professional / Administrator
- Clear written and verbal communication with technical and executive audiences
- Structured problem solving under pressure, especially during outages and incidents
- Ownership mindset and the ability to work independently across multiple client engagements
- Strong documentation habits and a commitment to knowledge transfer
- Security-first judgment and attention to detail when changing production identity systems
To View & Apply for jobs on this site that accept applications from your location or country, tap the button below to make a Search.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
Search for further Jobs Here:
×