Cloud Engineer

Job summary

The Active Directory Engineer designs, administers, and modernizes enterprise directory and Microsoft identity infrastructure to provide secure, resilient authentication, authorization, privileged access, and identity lifecycle services. The role manages AD DS, AD LDS, Entra ID integration, Group Policy, AD CS, and supporting DNS and DHCP; automates operations with PowerShell and APIs; and advances compliance, Zero Trust, passwordless authentication, and cloud identity initiatives.

Qualifications

• Four to eight years of experience preferred.
• Bachelor's degree in a related field or equivalent work experience preferred.

Responsibilities

• Administer and maintain AD DS, AD LDS, Entra ID integration, AD CS, Group Policy, DNS, DHCP, and hybrid identity synchronization.
• Perform platform upgrades, migrations, patching, and lifecycle management.
• Monitor directory health, replication, authentication services, and performance.
• Manage domain controllers, forests, domains, trusts, sites, users, groups, organizational units, and permissions.
• Design and maintain Group Policy Objects, delegation models, naming standards, and directory governance.
• Automate user and group lifecycle management, service account governance, Group Policy deployment, health monitoring, and certificate lifecycle management.
• Support authentication integrations, certificate-based authentication, and PKI.
• Support SOX, HIPAA, PCI, NIST, and internal security controls; assist with audits, risk assessments, and remediation.
• Support Zero Trust, passwordless authentication, Entra ID modernization, identity telemetry, and non-human identity governance.

Skills

Degrees

Relocation