> Markdown version of [/jobs/ext/3093407-it-systems-directory-services-and-cloud-identity-specialist-senior](https://www.wearedevelopers.com/jobs/ext/3093407-it-systems-directory-services-and-cloud-identity-specialist-senior). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Systems Directory Services and Cloud Identity Specialist Senior - **Company:** Modine Manufacturing Company - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $93,000.0 - $163,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, Active Directory, Microsoft Azure, Microsoft Online Services, Business Software, Software as a Service, Cloud Computing, Cyber Security, Computer Engineering, Dynamic Host Configuration Protocol, DevOps, Integrated Windows Authentication, Domain Name System (DNS), Multi-Factor Authentication, Microsoft Exchange Server, Federated Identity Management, Identity and Access Management, Kerberos (Protocol), Log Analysis, Windows Servers, Network Virtualization, OAuth, OpenID, Public Key Infrastructure, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Cloud Services, Migration Manager, Zero Trust Network Access, Security Assertion Markup Language (SAML), Microsoft SharePoint, Single Sign-On, Scripting, Google Cloud, Cloud Platform System, Multi-Cloud, Azure Powershell, Technical Debt, Infrastructure as Code (IaC), Information Technology, Deployment Automation, Bicep, Graphql, CIS Benchmarks, Api Design, Restful APIs, Terraform - **Published:** September 26, 2026 - **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/18449649?backUrl=%2Fcareer%2F18449649%2FIt-Systems-Directory-Services-Cloud-Identity-Specialist-Senior ## About the Role * Experience: 8+ years of progressive engineering experience in enterprise Windows Server, Active Directory, and Microsoft Cloud / Identity ecosystems. * Directory & Cloud Identity: Deep, proven expertise in Active Directory Domain Services (AD DS), Group Policy (GPO), DNS/DHCP, Kerberos/NTLM authentication, and Microsoft Entra ID (Azure AD). * Scripting & Automation: Advanced proficiency in PowerShell scripting (including Graph PowerShell SDK, REST APIs, and background job handling) for large-scale enterprise administration. * Federation & IAM: Extensive hands-on experience configuring SSO, SAML, OAuth, Conditional Access, PIM, and SCIM-based identity provisioning. * Cloud Platform Governance: Practical administration experience with Microsoft Azure (Subscriptions, IAM/RBAC, Resource Governance, Networking, and Log Analytics/Sentinel). * Mindset & Initiative: Self-directed problem solver with a proven track record of wearing multiple hats, driving unassigned initiatives to completion, and navigating ambiguity in fast-paced enterprise environments. * Communication & Interpersonal Skills: Excellent written and verbal communication skills with the ability to articulate complex technical architectures to leadership and mentor operational support teams. Preferred / "Nice to Have" Qualifications * Multi-Cloud & GCP Experience: * + Hands-on administration or foundational experience with Google Cloud Platform (GCP), including Google Cloud IAM, Cloud Identity, and Workload Identity Federation with Microsoft Entra ID / Active Directory. + Familiarity with GCP Zero Trust access controls, Cloud Identity-Aware Proxy (IAP), and hybrid multi-cloud networking. * Enterprise Collaboration: Strong operational administration and migration experience with Microsoft Teams and SharePoint Online / Server (permissions, site architectures, and external sharing policies). * Migration & Coexistence Tools: Experience utilizing enterprise identity/mailbox migration platforms (e.g., Quest On Demand Migration / Migration Manager, BitTitan, or native cross-tenant sync). * Hybrid Messaging: Experience supporting hybrid Microsoft Exchange environments (Exchange Online and Exchange Server). * Industry Certifications (Highly Desirable), * Bachelor's degree in Information Technology, Computer Science, Computer Engineering, or a related technical discipline (or equivalent relevant professional experience). ## Description The Senior Directory Services & Cloud Identity Specialist serves as a senior-level technical authority and hands-on subject matter expert responsible for the architecture, security, lifecycle governance, and operational resilience of enterprise identity ecosystems and cloud infrastructure. This role requires a proactive, highly autonomous go-getter who thrives in dynamic environments, takes immediate ownership of complex challenges, and actively identifies architectural gaps before they impact the business. Bridging hybrid Active Directory Domain Services (AD DS) and Microsoft Entra ID, this engineer will lead identity modernization, automate critical operational workflows via PowerShell and DevOps practices, manage Azure subscriptions and core SaaS platforms, and serve as the tier-3/4 escalation authority across enterprise collaboration and infrastructure services., + Hybrid Identity Architecture: Design, implement, optimize, and maintain enterprise Active Directory (AD DS), Azure AD Connect / Entra Cloud Sync, and Microsoft Entra ID across hybrid multi-domain and multi-tenant environments. + Access Federation & SSO: Architect and administer Single Sign-On (SSO), SAML 2.0 / OIDC integrations, Entra Application Proxy, and enterprise federation with third-party SaaS and line-of-business applications. + Identity Governance & Lifecycle: Implement and maintain automated user lifecycle provisioning (JML: Joiner/Mover/Leaver workflows), Entra ID Governance, Access Reviews, Privileged Identity Management (PIM), and dynamic role-based access control (RBAC). + Zero Trust & Security Posture: Define and enforce Conditional Access Policies, Multi-Factor Authentication (MFA), passwordless authentication mechanisms, and Active Directory Fine-Grained Password Policies to maintain a robust Zero Trust security posture. * Cloud Infrastructure & SaaS Management * + Azure Subscription & Resource Governance: Administer enterprise Azure subscriptions, management groups, Resource Groups, Azure Policy, cost optimization, and virtual networking (VNets, NSGs, private endpoints). + SaaS Administration & Collaboration Support: Oversee tenant-level configurations, cross-tenant synchronization, security baselines, and escalated troubleshooting for Microsoft 365 services-with deep administrative focus on Microsoft Teams and SharePoint (Online & Hybrid/On-Premises). + Public Key Infrastructure (PKI): Oversee Microsoft Certificate Authority (AD CS), certificate lifecycle management, and secure enrollment services (NDES/SCEP). * DevOps Automation, Scripting & Initiative * + Advanced PowerShell Automation: Build, maintain, and document production-grade PowerShell modules, automation runbooks, and API-driven scripts (Graph API, Azure CLI) to eliminate manual administration tasks and automate cross-platform syncs. + Continuous Improvement & Problem Discovery: Proactively identify legacy technical debt, performance bottlenecks, and security vulnerabilities across directory and cloud services without waiting for task assignment. + Infrastructure as Code (IaC): Drive modern automation practices utilizing ARM/Bicep templates or Terraform for repeatable Azure resource deployments. * Escalations, Collaboration & Mentorship * + Tier 3/4 Escalation Authority: Serve as the definitive escalation tier for complex directory, authentication, sync, and M365 infrastructure issues, interfacing directly with Helpdesk, Local Tech Support, Infosec, and engineering teams. + Vendor & Project Leadership: Partner with external technology vendors, lead enterprise migration and divestiture initiatives, and author detailed technical documentation, architectural diagrams, and standard operating procedures (SOPs). + Technical Mentorship: Guide and upskill junior system administrators, desktop engineers, and support personnel., + Microsoft Certified: Identity and Access Administrator Associate (SC-300) + Microsoft Certified: Azure Administrator Associate (AZ-104) + Microsoft Certified: Cybersecurity Architect Expert (SC-100) or Azure Solutions Architect Expert (AZ-305) ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Back(end) to the Future: Embracing the continuous Evolution of Infrastructure and Code](https://www.wearedevelopers.com/videos/440-back-end-to-the-future-embracing-the-continuous-evolution-of-infrastructure-and-code) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [My journey into DevOps world - How it all started!](https://www.wearedevelopers.com/videos/545-my-journey-into-devops-world-how-it-all-started) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)