Consultant, IT Infrastructure

Travel + Leisure Co. is the world’s leading vacation ownership and travel membership company, with a dynamic and growing portfolio of resort, travel club, and lifestyle travel brands. Our dedicated associates help the company achieve its mission to put the world on vacation. Innovation and growth keep our work interesting and fun. Every day is a chance to learn something new and turn vacation inspiration into exceptional experiences for millions of travelers worldwide.

The incumbent carries deep, expert-level expertise across these domains, from multi-forest and multi-domain Active Directory design to DNS, DHCP, and IPAM administration to certificate authority and certificate lifecycle management, and is the hands‑on technical authority the Technical Architect and Sr. Manager rely on for that expertise.

This position partners with the Technical Architect, Infrastructure, Security, Network, Application, and Project Management teams to engineer and operate an Active Directory, DDI, and Certificate Services environment that is secure, highly available, and aligned with enterprise architecture and standards. This role also drives automation of Active Directory, DDI, and PKI operations to reduce manual effort and improve consistency across the environment.

The role may also be assigned other WINTEL infrastructure work, such as Windows Server, virtualization, storage, or endpoint platform support, on an as‑needed basis outside of its core Active Directory, DDI, and PKI focus.

This role does not carry direct people management responsibility but is expected to set technical direction, define standards, mentor engineers, and serve as the final internal escalation point for complex Active Directory, DDI, and Certificate Services issues.

• AD Engineering: Own day‑to‑day engineering, administration, and support of the enterprise Active Directory environment, including multi-forest and multi-domain topology, trust relationships, Group Policy, and directory security. Drive innovation and automation of routine Active Directory administration, such as account and group lifecycle management, Group Policy deployment, and health checks, to reduce manual effort and improve consistency. Serve as the hands‑on technical advisor the Technical Architect and Sr.
  
  Manager rely on for Active Directory, providing expert input on domain controller placement, replication, authentication, and access control. Lead the planning and technical execution of Active Directory projects, including domain upgrades, migrations, and consolidations.
• DDI Engineering: Own day‑to‑day engineering, administration, and support of the enterprise DNS, DHCP, and IP address management (IPAM) environment. Drive innovation and automation for DNS record management, DHCP scope provisioning, and IPAM workflows using scripting, APIs, or orchestration tools to reduce manual effort, improve accuracy, and speed up delivery of DDI changes. Serve as the hands‑on technical advisor the Technical Architect and Sr.
  
  Manager rely on for DDI, providing expert input on zone design, scope management, and address allocation. Lead the planning and technical execution of DDI projects, including DNS/DHCP/IPAM modernization initiatives.
• PKI Engineering: Own day‑to‑day engineering, administration, and support of the enterprise Public Key Infrastructure (PKI), including certificate authority (CA) hierarchy, certificate templates, and certificate lifecycle management. Drive innovation and automation of certificate issuance, renewal, and expiration monitoring to reduce manual effort and prevent outages caused by expired certificates. Serve as the…