Cyber Security Principal

We are seeking a seasoned and strategic Cyber Security Principal to serve as the enterprise technical authority for our Enterprise Directory and Certificate Services ecosystem. In this role, you will lead the strategic architecture, security hardening, governance, and operational resilience of our mission-critical identity tier—focusing exclusively on Active Directory Domain Services (AD DS), Oracle Unified Directory (OUD) LDAP, and Microsoft Entra  (Azure AD), along with enterprise Public Key Infrastructure (PKI) / Certificate Services.

• Enterprise Directory Architecture & Governance:
  Define, maintain, and enforce target-state architecture, security baselines, and configuration standards across on-premises and cloud directory environments (AD DS, OUD LDAP, and Microsoft Entra ).
• Active Directory & Protocol Hardening:
  Lead security engineering for domain controllers, schema governance, trust relationships, Group Policy, and authentication protocol security.
• Enterprise OUD LDAP Engineering:
  Architect, tune, and secure enterprise Oracle Unified Directory deployments, including multi-master replication topologies, access control instructions (ACIs), schema extensions, and high-throughput LDAP integrations.
• Hybrid Identity & Entra :
  Design and govern Entra t configurations, Conditional Access policies, hybrid directory synchronization (Entra Connect), and Privileged Identity Management (PIM).
• Identity Resilience & Cyber Disaster Recovery:
  Architect, document, and routinely validate comprehensive forest recovery and disaster recovery runbooks for AD and OUD, ensuring rapid recovery against ransomware and catastrophic failure.
• Technical Leadership & Strategy:
  Provide SME guidance on identity security architecture across enterprise projects, mentor directory engineering staff, and establish security posture KPIs/KRIs for leadership.

• Active Directory Domain Services (AD DS):
• Expert-level knowledge of multi-forest/multi-domain topologies, trusts, Kerberos (constrained/unconstrained delegation, PKINIT), DNS, and replication mechanics.
• In-depth expertise in AD hardening/security techniques and attack path reduction.
• Oracle Unified Directory (OUD):
• Advanced design, administration, performance tuning, and replication architecture of OUD LDAP services.
• Deep understanding of LDAP RFCs, search filter indexing, backend database partitions, and directory proxy architectures.
• Microsoft Entra  (Azure AD):
• Comprehensive expertise in Entra , App Registrations, Service Principals, Entra Connect/Cloud Sync, Conditional Access, and hybrid tenant security.

• Automation & Infrastructure-as-Code (Strongly Preferred):
• Power Shell:
  Advanced scripting and module development for Active Directory administration, reporting, remediation, and API interactions (Microsoft.Graph, Active Directory module).
• Ansible:
  Proven experience developing and maintaining Ansible playbooks for automated provisioning, configuration management, security baseline enforcement, and deployment of directory infrastructure.
• Identity Governance & Administration (IGA):
  Familiarity with directory integrations into enterprise IGA platforms (e.g., SailPoint Identity IQ / Identity Security Cloud).
• Identity Providers and Security:
  Familiarity with Identity Providers (e.g. Okta) and Identity Protection modules (e.g Crowdstrike IDP).

• Proven ability to drive consensus and influence architectural standards across security, infrastructure, and application engineering teams.
• Strong communication skills with the ability to convey identity risks and cryptographic concepts clearly to executive stakeholders.
• Experience…