Active Directory Tier 0 Engineer : PKI

Key Experience Requirements

Ben explicitly stated he is looking for candidates who can “hit the ground running” and suggested ~5 years as a practical minimum to demonstrate true proficiency in:

• Active Directory (enterprise scale)
• Active Directory Certificate Services (ADCS)
• Public Key Infrastructure (PKI)
• Active Directory Federation Services (ADFS)

These technologies are described as the team’s “bread and butter” and are mandatory due to Tier 0 access.

Why this matters:
This is not a learning role. Exxon expects deep operational judgment developed over multiple production environments.

3–5+ years Power Shell | 2–3+ years Terraform

Power Shell:
Heavy daily usage for automation and operational efficiency. Candidates should be independently building and maintaining scripts.

Terraform / IaC:
Ben specified 2–3 years as sufficient, provided the candidate can manage pipelines and deploy infrastructure via code.

The role is approximately 50% automation/engineering and 50% operations.

Why this matters:
Candidates who are “GUI‑only AD admins” will not succeed. Exxon is modernizing identity through automation.

5+ years in high‑security / regulated enterprise environments.

This role includes Tier 0 / Enterprise Administrator access. Requires:

• Experience operating under strict security controls
• Comfort with audit, compliance, and privileged access models
• Ability to pass an enhanced background check (financial, criminal, global, dark web)

Large enterprise experience is strongly preferred, especially environments at Exxon’s scale.