Lead Active Directory Engineer
Core
Design, secure, and operate Microsoft Active Directory Domain Services (AD DS) in regulated, high-availability financial environments.
Role type
Senior IC Active Directory Engineer
Builds
Tier-1 identity infrastructures with strict uptime and change-control requirements
Domain
Financial Services / Identity Infrastructure
Required skills
Active Directory Domain Services (AD DS), Microsoft Entra ID (Azure AD), PowerShell, DNS (split-brain), Identity Lifecycle Management, Privileged Access Workstations (PAWs), AD Replication Topology, Disaster Recovery (RTO/RPO), SOX/GLBA/PCI DSS/SOC 2 Compliance, Zero Trust Architecture
Preferred skills
Cybersecurity tool development, Architecture translation to technical requirements, Data analysis
Technologies
Microsoft Active Directory, Microsoft Entra Connect, PowerShell, DFSR, PIM
Responsibilities
Design multi-domain/multi-forest AD architectures; Implement hybrid identity solutions (Entra Connect, Password Hash Sync); Enforce security hardening and least privilege models; Automate administrative changes and provisioning; Manage AD replication and recovery procedures; Mentor engineers and define enterprise identity standards.
Seniority
Senior, hands-on IC
