IT Systems Directory Services and Cloud Identity Specialist Senior

Job Posting

Location:

Remote, USA. Posting

Start Date:

9/25/26. Req . Required Travel: 0 - 10%. Remote, Onsite or Hybrid?:
Onsite.

For more than 100 years, Modine has solved the toughest thermal management challenges for mission-critical applications. Our purpose of Engineering a Cleaner, Healthier World means we are always evolving our portfolio of technologies to provide the latest heating, cooling, and ventilation solutions. Through the hard work of more than 11,000 employees worldwide, our Climate Solutions and Performance Technologies segments advance our purpose with systems that improve air quality, reduce energy and water consumption, lower harmful emissions, enable cleaner running vehicles, and use environmentally friendly refrigerants.

Modine is a global company headquartered in Racine, Wisconsin (U.S.), with operations in North America, South America, Europe, and Asia. For more information about Modine, visit

The Senior Directory Services & Cloud Identity Specialist serves as a senior-level technical authority and hands-on subject matter expert responsible for the architecture, security, lifecycle governance, and operational resilience of enterprise identity ecosystems and cloud infrastructure.

This role requires a proactive, highly autonomous go-getter who thrives in dynamic environments, takes immediate ownership of complex challenges, and actively identifies architectural gaps before they impact the business. Bridging hybrid Active Directory Domain Services (AD DS) and Microsoft Entra , this engineer will lead identity modernization, automate critical operational workflows via Power Shell and Dev Ops practices, manage Azure subscriptions and core SaaS platforms, and serve as the tier-3/4 escalation authority across enterprise collaboration and infrastructure services.

• Hybrid Identity Architecture:
  Design, implement, optimize, and maintain enterprise Active Directory (AD DS), Azure AD Connect / Entra Cloud Sync, and Microsoft Entra s hybrid multi-domain and multi-tenant environments.
• Access Federation & SSO:
  Architect and administer Single Sign-On (SSO), SAML 2.0 / OIDC integrations, Entra Application Proxy, and enterprise federation with third-party SaaS and line-of-business applications.
• Identity Governance & Lifecycle:
  Implement and maintain automated user lifecycle provisioning (JML: Joiner/Mover/Leaver workflows), Entra , Access Reviews, Privileged Identity Management (PIM), and dynamic role-based access control (RBAC).
• Zero Trust & Security Posture:
  Define and enforce Conditional Access Policies, Multi-Factor Authentication (MFA), passwordless authentication mechanisms, and Active Directory Fine-Grained Password Policies to maintain a robust Zero Trust security posture.
• Azure Subscription & Resource Governance:
  Administer enterprise Azure subscriptions, management groups, Resource Groups, Azure Policy, cost optimisation, and virtual networking (VNets, NSGs, private endpoints).
• SaaS Administration & Collaboration Support:
  Oversee tenant-level configurations, cross-tenant synchronization, security baselines, and escalated troubleshooting for Microsoft 365 services—with deep administrative focus on Microsoft Teams and SharePoint (Online & Hybrid/On-Premises).
• Public Key Infrastructure (PKI):
  Oversee Microsoft Certificate Authority (AD CS), certificate lifecycle management, and secure enrollment services (NDES/SCEP).
• Advanced Power Shell Automation:
  Build, maintain, and document production-grade Power Shell modules, automation runbooks, and API-driven scripts (Graph API, Azure CLI) to eliminate manual administration tasks and automate cross-platform syncs.
• Continuous…