Full-Time Sr. Lead Directory Services Engineer

• Ensuring global uptime, monitoring, and failover of directory services.
• Connecting directory services with identity and business systems.
• Enforcing secure protocols, admin separation, and access tiering.

Responsibilities:

• Design, secure, and maintain Active Directory, Entra ID/Azure AD, LDAP, Ping Directory, and RadiantOne VDS.
• Manage domain controllers, server builds, storage integration, replication roles, and monitoring.
• Oversee DNS/DHCP integration, site topology, failover, and global uptime.
• Partner with network teams to manage VLANs, firewalls, subnets, VPN/site links, and isolated environments.
• Coordinate directory services across Windows, Linux, Unix (AIX/Solaris), and macOS platforms.
• Implement forest/domain architecture, OU models, replication topology, and delegated access.
• Apply Tier 0 protections, MFA integration, privileged access separation, and credential hardening.
• Enforce CIS, DISA STIG, and Microsoft baselines for directory services and supporting systems.
• Lead Group Policy design and enforcement for security baselines, login policies, TLS/LDAPS, firewall controls, encryption, and device posture.
• Conduct policy audits, conflict resolution, and impact assessments.
• Oversee provisioning and synchronization of users, groups, service accounts, and privileged identities.
• Manage schema extensions, object standards, and directory hygiene across hybrid ecosystems.
• Harden servers and VMs with patch baselines, encryption, EDR/XDR, LSASS protection, PAWs, and conditional access.
• Implement secure communications over Kerberos, LDAPS, and certificate-based trust.
• Integrate directory services with IT, IAM/PAM platforms, PKI, authentication systems, and enterprise applications.
• Partner with Cloud, Security Engineering, and Infrastructure teams on modernization and resiliency efforts.
• Lead cloud-native directory strategies, domain consolidation, and migration initiatives.
• Provide architectural guidance for enterprise security programs and automation.

Requirements:

• 5+ years in IAM, directory services, security engineering, or infrastructure security.
• Expert-level experience with AD domain controllers, replication, DNS/DHCP, FSMO roles, and site topology.
• Advanced proficiency with Entra ID/Azure AD, Azure AD Connect, federation, and synchronization.
• Strong LDAP knowledge, including schema modifications, Ping Directory, and RadiantOne VDS.
• OS security hardening across Windows Server, Linux/Unix, and mixed enterprise platforms.
• Strong networking fundamentals (VLANs, segmentation, firewalls, routing, VPN/site links).
• Experience designing and managing Group Policies at scale.
• Demonstrated leadership in strategic programs or enterprise-scale transformations.
• Bachelor’s degree in IT, Computer Science, Cybersecurity, or equivalent experience.

What is the last date for applying to the job?

Which countries are accepted for this remote job?