Active Directory Tier 0 Engineer PKI

Active Directory Tier 0 Engineer :: PKI

Title:

Active Directory Tier 0 Engineer :: PKI

:

Ben explicitly stated he is looking for candidates who can "hit the ground running" and suggested ~5 years as a practical minimum to demonstrate true proficiency in:
Active Directory (enterprise scale) Active Directory Certificate Services (ADCS) Public Key Infrastructure (PKI) Active Directory Federation Services (ADFS) These technologies are described as the team's "bread and butter" and are mandatory due to Tier 0 access.

Why this matters:
This is not a learning role. Exxon expects deep operational judgment developed over multiple production environments.

2. Power Shell Automation & Infrastructure as Code (Terraform)

3–5+ years Power Shell | 2–3+ years Terraform

Power Shell:
Heavy daily usage for automation and operational efficiency Candidates should be independently building and maintaining scripts

Terraform / IaC:
Ben specified 2–3 years as sufficient, provided the candidate can:
Manage pipelines Deploy infrastructure via code

The role is approximately 50% automation/engineering and 50% operations. Why this matters:
Candidates who are "GUI-only AD admins" will not succeed. Exxon is modernizing identity through automation.

3. Tier 0 Security Experience in Large Enterprise Environments

5+ years in high‑security / regulated enterprise environments This role includes Tier 0 / Enterprise Administrator access Requires:
Experience operating under strict security controls Comfort with audit, compliance, and privileged access models Ability to pass an enhanced background check (financial, criminal, global, dark web) Large enterprise experience is strongly preferred, especially environments at Exxon's scale.