Staff Platform Engineer - Active Directory - Identity Services

Job summary

Design, build, and improve secure enterprise identity services across on-premises infrastructure and AWS, providing technical direction for Active Directory and contributing expertise in Microsoft Entra ID. The role engineers hybrid directory architectures, strengthens identity security, and leads modernization, cloud migration, automation, and reusable engineering practices while mentoring engineers and improving service reliability, supportability, and cost effectiveness.

Qualifications

• Extensive practical Active Directory experience across forest and domain design, Group Policy, DNS, DFS, replication, trusts, delegation, schema, and object lifecycle management.
• Experience operating hybrid Active Directory environments across on-premises infrastructure and AWS, including EC2-hosted domain controllers and AWS Directory Service or AWS Managed Microsoft AD.
• Strong identity security knowledge, including least privilege, tiered administration, credential hygiene, Kerberos and NTLM hardening, LDAP security, and identity threat detection.
• Working knowledge of Microsoft Entra ID, hybrid identity, directory synchronization, Conditional Access, and modern authentication and authorization.
• Strong scripting and automation skills for identity operations and repeatable engineering delivery.
• Experience with infrastructure as code and CI/CD technologies such as Terraform, AWS CDK, CloudFormation, Ansible, GitHub, or GitHub Actions.
• Exposure to AWS services for directory workloads and automation, and observability technologies such as Grafana and Prometheus.
• Strong technical communication and influencing skills, including the ability to mentor engineers and explain complex identity and security concepts.

Responsibilities

• Provide technical direction for Active Directory across on-premises and AWS-hosted and managed environments.
• Design hybrid directory topologies, including domain controller placement, replication, DNS, connectivity, and trusts.
• Strengthen identity security through privileged access controls, hardening, credential protection, and attack-path reduction.
• Lead Active Directory modernization, cloud migration, hybrid identity integration, and retirement of legacy authentication.
• Shape identity product roadmaps and translate priorities into engineering plans.
• Promote automation, infrastructure as code, secure engineering standards, and reusable patterns.
• Mentor engineers and align technical teams on identity designs and standards.
• Use metrics, feedback, and emerging technologies to improve security, reliability, supportability, and cost effectiveness.

Skills

Industry

Relocation