Senior Engineer, Directory Services

Location Details:

At GoDaddy the future of work looks different for each team. Some teams work in the office full-time, others have a hybrid arrangement (they work remotely some days and in the office some days) and some work entirely remotely.

This is a remote position, so you’ll be working remotely from your home. You may occasionally visit a GoDaddy office to meet with your team for events or meetings.

This position is not eligible to be performed in Alaska, Mississippi, North Dakota, or the Virgin Islands.

GoDaddy is not currently considering candidates for this role in California, Seattle, or NYC.

Come join GoDaddy’s Identity and Access Management team as a Senior Systems Engineer, Directory Services and play a key role in powering the systems that keep our people, platforms, and customers connected and secure!

You’ll tackle complex challenges across Active Directory, Certificate Services, DNS, replication, and Linux integration while operating critical infrastructure at enterprise scale. This is an opportunity to make a real impact, drive modernization efforts, strengthen security, and help shape the future of identity services while expanding your expertise across both Windows and Linux environments.

• Secure, operate, and improve enterprise Active Directory services, including domain controllers, sites and services, Group Policy, authentication flows, and directory-integrated services
• Harden supporting directory services, including Windows Enterprise Certificate Authority, Windows Domain Name System, and Active Directory replication, to reduce identity infrastructure risk
• Investigate and resolve complex identity, authentication, Kerberos, Lightweight Directory Access Protocol, Domain Name System, certificate, and replication issues across Windows and Linux environments
• Support, maintain, and optimize secure Linux integrations with Active Directory using technologies such as System Security Services Daemon, realmd, Samba, Kerberos, Lightweight Directory Access Protocol, and Pluggable Authentication Modules
• Partner with security, infrastructure, cloud, and application teams to strengthen monitoring, privileged access controls, operational resilience, and audit readiness for directory services
• Develop standards, runbooks, automation, and security controls that reduce operational risk and improve directory services supportability at enterprise scale

• Deep expertise securing and managing Microsoft Active Directory in large-scale enterprise environments, including domain controllers, Group Policy, trusts, authentication, and directory-integrated services
• Strong knowledge of Active Directory hardening, authentication protocols, DNS, Kerberos, LDAP, replication, and secure configuration baselines
• Experience securing and administering Windows Server environments, including DNS, Enterprise Certificate Services, certificate lifecycle management, and operational risk reduction
• Proficiency integrating Linux systems with Active Directory using technologies such as SSSD, realmd, Samba, Kerberos, LDAP, and PAM
• Hands-on experience with automation, scripting, and security operations using Power Shell, Python, Bash, Puppet/Open Vox, incident response processes, monitoring, change management, and privileged access controls

• Experience with hybrid identity or adjacent identity platforms, such as Microsoft Entra , Okta, privileged access management, or identity governance and administration
• Experience securing Windows Enterprise Certificate Authority environments, including certificate templates, enrollment controls, lifecycle management, and certificate services risk reduction

We encourage you to apply even if your experience or…