IT - DTD - Senior Professional, Identity & Access Management

Job Summary

The Senior Professional, Identity & Access Management designs, implements, and oversees identity and access management systems across the organization. Working with minimal supervision, this role ensures secure access to enterprise resources, minimizes security risks, and maintains compliance with organizational security standards.

The Client Identity Security team is seeking an IAM professional with extensive Microsoft Active Directory experience to enhance and modernize the organization's Active Directory environment, extending identity services into Amazon Web Services (AWS) and the broader cloud ecosystem.

Responsibilities include, but are not limited to:

• Design, engineer, operate, and secure Active Directory forests, domains, trusts, organizational units (OUs), Group Policy Objects (GPOs), and domain controllers.
• Partner with Identity & Access Management (IAM) and Privileged Access Management (PAM) teams to design and support privileged access controls, administrative group structures, and delegated administration models.
• Monitor, troubleshoot, and remediate Active Directory health issues, including authentication failures, replication, DNS dependencies, domain controller availability, and account state incidents.
• Support integrations between Active Directory and identity governance, access request, authentication, and certification platforms.
• Develop and maintain standards, operational procedures, runbooks, and technical documentation for Active Directory services.
• Participate in change management, incident response, audits, and continuous improvement initiatives aligned with the IAM roadmap and enterprise security strategy.
• Develop integration patterns with AWS to facilitate Active Directory authentication using LDAP and Kerberos.
• Create application authentication patterns that encourage development teams to leverage Kerberos instead of LDAP where appropriate.

• Hands‑on experience administering Microsoft Active Directory in large, complex enterprise environments.
• Strong understanding of Active Directory security principles, delegation models, and privileged group management.
• Experience operating Active Directory as part of an enterprise Identity & Access Management (IAM) ecosystem.
• Proven troubleshooting skills across authentication, replication, DNS, account lifecycle, and access‑related issues.
• Experience working with AWS and Active Directory deployment options, including AWS Managed Microsoft AD and self‑hosted environments.
• Experience integrating Active Directory with Identity Governance and Administration (IGA) and Privileged Access Management (PAM) platforms.
• Experience supporting global, multi‑domain, or multi‑region Active Directory environments.

• Experience with hybrid identity and cloud authentication architectures.
• Knowledge of Active Directory security hardening and privileged access best practices.
• Experience automating administrative tasks using Power Shell or similar scripting languages.
• Familiarity with enterprise identity governance, authentication, and access certification solutions.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related technical discipline.
• Equivalent combination of education and relevant professional experience will be considered.
• Microsoft, AWS, or cybersecurity certifications are preferred.

• Microsoft Active Directory Administration
• Active Directory Forests, Domains, Trusts, and Organizational Units
• Group Policy (GPO), LDAP, Kerberos, DNS, and Active Directory Replication
• Identity & Access Management (IAM)
• Privileged Access Management (PAM)
• AWS Managed Microsoft AD and Hybrid Cloud Identity
• Active Directory Security and Delegated Administration
• Identity Governance & Administration (IGA)
• Power Shell Scripting and Automation
• Authentication and Access Management
• Windows Server Administration
• Incident Management and Root Cause Analysis
• Technical Documentation and Operational Runbooks
• Strong analytical, communication, and collaboration skills