> Markdown version of [/jobs/ext/3609116-platform-engineer](https://www.wearedevelopers.com/jobs/ext/3609116-platform-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Platform Engineer

- **Company:** Eliassen Group
- **Location:** Seattle, WA, United States
- **Experience:** Expert
- **Salary:** $183,040.0 - $201,739.0
- **Contract:** Permanent contract
- **Skills:** Active Directory, Active Directory Federation Services, Identity and Access Management, Lightweight Directory Access Protocols (LDAP), Public Key Infrastructure, Role-Based Access Control, Azure Active Directory, SSL Certificate Management, Cyberark, Deployment Automation
- **Published:** October 7, 2026
- **Apply:** https://www.dice.com/job-detail/b554caa5-fb38-41af-a9c4-d9788cacf72f

## About the Role

Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance., * 8+ years of IAM engineering experience.

 * Expertise in Active Directory architecture, administration, and engineering.
 * Entra ID / Azure AD and Microsoft Identity Manager (MIM).
 * Active Directory Federation Services (ADFS) and LDAP integrations.
 * CyberArk or other enterprise PAM platforms.
 * RBAC and PIM implementation.
 * PKI architecture and certificate management.
 * AD domain migrations and legacy domain decommissioning.
 * Identity governance and compliance remediation.
 * Vendor and supplier management in outsourced environments.
 * Preferred: CyberArk expertise, Idira experience, cross-tenant Entra ID governance, security baseline assessments, and enterprise-scale identity modernization.

## Description

* Analyze and modernize identity lifecycle management across Active Directory and Entra ID.
 * Automate provisioning, ownership enforcement, and deprovisioning for service and non-human accounts.
 * Design and implement enterprise IAM solutions and integrations.
 * Lead Active Directory consolidation and decommissioning of legacy domains.
 * Support PAM onboarding including privileged account vaulting and credential management.
 * Implement RBAC and PIM strategies.
 * Conduct AD and Entra security assessments and drive remediation.
 * Design and support PKI modernization, certificate lifecycle management, and certificate authority rationalization.
 * Develop technical designs, architecture documentation, and operational procedures.
 * Collaborate with security, infrastructure, and operations teams to improve identity governance and compliance.
 * Onboard Tier 0, Tier 1, and Tier 2 privileged accounts into CyberArk or equivalent PAM platforms.
 * Enforce Zero Standing Privilege principles and deploy Privileged Access Workstations.
 * Consolidate and decommission legacy MGMT and iDMZ AD domains and standardize AD baselines.
 * Automate service account lifecycle, improve ownership controls, and enhance cross-tenant governance in Entra ID.