> Markdown version of [/jobs/ext/3674564-sr-platform-engineer-ad-pam](https://www.wearedevelopers.com/jobs/ext/3674564-sr-platform-engineer-ad-pam). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr Platform Engineer (AD/PAM) - **Company:** TEKSYSTEMS INC. - **Location:** Burbank, CA, United States - **Experience:** Expert - **Salary:** $197,600.0 - $208,000.0 - **Contract:** Temporary contract - **Skills:** Active Directory, Domain Controllers, Identity and Access Management, Windows Domain, Public Key Infrastructure, Role-Based Access Control, Azure Active Directory, Systems Integration, Cyberark, Deployment Automation - **Published:** October 10, 2026 - **Apply:** https://dejobs.org/x/x/BACFFC2C04F34EB18D42229E9C86104C/job/ ## About the Role Minimum of 8 years of work experience in Identity & Access Management Demonstrated experience designing, implementing, and integrating enterprise-level highly connected hybrid IAM solutions including: o Active Directory o Azure Active Directory / Entra ID o Microsoft Identity Manager, Experience with Cyber Ark / Idira will be a huge plus. Experience in engineering, designing, and integrating both infrastructure components (domain controllers, sites and services, connectivity, etc.) and logical aspects (GPO management, directory structure, and management toolsets) Experience working with and directing suppliers in an outsourced environment infrastructure Hands-on experience with PAM platforms (e.g., CyberArk), including privileged account vaulting, Tier 0/1/2 credential management, and privileged access workstation (PAW) deployment Experience designing and enforcing role-based access controls (RBAC) and privileged identity management (PIM) across Active Directory and Entra ID Experience with PKI architecture, certificate lifecycle management, and certificate authority rationalization or migration Experience with Active Directory domain consolidation, migration, and legacy domain decommissioning Familiarity with Entra ID governance, including cross-tenant identity governance models Experience automating non-human (service) account lifecycle management, including provisioning, ownership enforcement, and deprovisioning Experience conducting AD/Entra security baseline assessments and remediating identified findings ## Description Analyze the existing life cycle management of Identities created in Active Directory and Entra and help automate and modernize the process. Document and guide the operations team with the decommissioning of legacy instances of Active Directory. Evaluate capabilities of services/products and design solutions to deliver future service offerings through detailed technical analysis. Help with compliance and remediation activities of AD, Entra and related technology platforms. Define engineered designs, including full documentation Follow structured methodologies for technical analysis of products and solutions, Lead consolidation and decommissioning of the legacy MGMT and iDMZ Active Directory domains and their associated PKI infrastructure Onboard privileged accounts into the PAM platform, vaulting Tier 0/1/2 credentials and enforcing zero standing privileged access across AD domains Implement role-based access controls (RBAC) and privileged identity management (PIM) across Active Directory and Entra ID, replacing legacy, overly broad permissions Automate provisioning and deprovisioning of non-human (service) accounts, including ownership enforcement and lifecycle management Standardize AD architecture and governance across Enterprise Tech and business unit/segment-managed domains, including baseline security assessments Design and pilot cross-tenant Entra ID governance to extend identity controls across business segments and partners Deploy Privileged Access Workstations (PAW) and restrict Tier 0 administrative activity to hardened, isolated devices Remediate high-priority security findings across AD and Entra/M365 tenants to reduce the attack surface ahead of migration Troubleshooting & Support: Work with security and infrastructure teams to remediate vulnerabilities. Document configurations, policies, and procedures for future reference.