> Markdown version of [/jobs/ext/170015-directory-services-associates](https://www.wearedevelopers.com/jobs/ext/170015-directory-services-associates). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Directory Services Associates - **Company:** Alight, Inc. - **Location:** United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Active Directory, Agile Methodology, Amazon Web Services, Apache Tomcat, Systems Engineering, User Authentication, Authentication Protocols, Microsoft Azure, Bash Shell, Software as a Service, Cloud Computing, Continuous Integration, Dynamic Host Configuration Protocol, Domain Name System (DNS), Failover Clustering, Hyper-V, Infrastructure as a Service (IaaS), Identity and Access Management, Internet Information Services (IIS), Python (Programming Language), Lightweight Directory Access Protocols (LDAP), OAuth, OpenID, Platform as a Service (PAAS), Performance Tuning, Public Key Infrastructure, Windows PowerShell, Scrum Methodology, Query Optimization, Role-Based Access Control, Azure Active Directory, Cloud Services, Ansible, Security Assertion Markup Language (SAML), Security Information and Event Management, Software Engineering, Systems Integration, TCP/IP, Virtualization Technology, Software Repository, Scripting, Load Balancing, Okta, System Availability, Pingfederate, SailPoint, Terraform, Vmware - **Published:** May 16, 2026 - **Apply:** https://www.juju.com/job/00000000fzwubw ## About the Role + 3+ years of professional experience in Directory Services and/or Identity and Access Management. + Understanding of AD DS architecture, including forests, domains, trusts, FSMO roles, replication, and multi-site topology. + Experience integrating with IAM platforms such as Saviynt, Entra ID, SailPoint, Okta, and PingFederate. + Understanding of LDAP concepts, schema extensions, and directory query optimization. + Experience with PKI, certificate lifecycle management, CRL distribution, NDES/SCEP, and AD-integrated certificate services. + Scripting and automation experience (Bash, PowerShell, Python, or Ansible). + Proficiency with Group Policy (GPO) design and implementation. + Experience with Cloud service providers (ex: AWS/Azure/etc.) and cloud service models (IaaS/PaaS/SaaS), and cloud networking constructs. + Excellent verbal and written communication skills. Preferred Qualifications + Managing directories such as Active Directory, eDirectory, and Radiant Logic (FID/SaaS). + Familiarity and experience with CI/CD and Infrastructure-as-Code (ex: Terraform). + Experience with Azure AD/Entra conditional access policies and Entra Connect. + Privileged Access Management (PAM). + In-depth knowledge of authentication (Authn) and authorization (Authz) concepts. + Experience with ITSM platforms (ex: SNOW/BMC Remedy). + Knowledge of SSO and federation standards (SAML 2.0, OAuth 2.0, OIDC). + Technical troubleshooting skills that follow engineering principles. + Understanding of Agile process and concepts (ex: SCRUM/SAFe/Kanban). + Monitoring platform experience and tuning (ex: performance thresholds/connectivity/availability/alert conditions/etc.). + Systems Engineering proficiency with DNS, DHCP, TCP/IP, UDP, Failover Clustering, SIEM, IIS/Tomcat, Virtualization (VMWare/Hyper-V), Load Balancing (ex: F5/NLB/ALB/etc.) ## Description The Directory Services Associates within the Alight Identity Security team is responsible for securing, maintaining, and ensuring high availability of enterprise directory and identity platforms. They will support Tier 0/1 systems, protect privileged access, integrate identity/security technologies, and provide operational and incident-response support. Ideal candidates bring strong experience with directory services, scripting, cloud platforms, IAM technologies, and modern authentication protocols., + Ensure Directory Services platforms are secure, compliant, and highly available. + Prioritize and protect privileged identities - leverage RBAC, ACLs, etc. to uphold least privilege and Just-In-Time access. + Support performance, resilience, and availability of Tier 0/Tier 1 systems. + Provide technical assistance to support team members. + Proactively monitor systems for performance and reliability. + Assist security and compliance audits. + Help with maintaining and developing technical documentation, code repositories, and training materials. + Coordinate maintenance and support activities. + Communicate with application development groups and end-users to resolve issues and complete requests. + Integration of Identity/Security platforms and associated lifecycles (ex: implementation/maintenance/upgrades/etc.). + Incident response - may require off-hours support. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [The Best Job Search Websites of 2025](https://www.wearedevelopers.com/magazine/368-the-best-job-search-websites-of-2025) - [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers)