Platform Engineer

Help with compliance and remediation activities of AD, Entra and related technology platforms. Define engineered designs, including full documentation Follow structured methodologies for technical analysis of products and solutions Required Qualifications & Skills Minimum of 8 years of work experience in Identity & Access Management Demonstrated experience designing, implementing, and integrating enterprise-level highly connected hybrid IAM solutions including: o Active Directory o Azure Active Directory / Entra ID o Microsoft Identity Manager o Active Directory Federation o PAM Solutions o Integrations between key services and various LDAP providers. Experience with Cyber Ark / Idira will be a huge plus. Experience in engineering, designing, and integrating both infrastructure components (domain controllers, sites and services, connectivity, etc.) and logical aspects (GPO management, directory structure, and management toolsets) Experience working with and directing suppliers in an outsourced environment infrastructure Hands-on experience with PAM platforms (e.g., CyberArk), including privileged account vaulting, Tier 0/1/2 credential management, and privileged access workstation (PAW) deployment Experience designing and enforcing role-based access controls (RBAC) and privileged identity management (PIM) across Active Directory and Entra ID Experience with PKI architecture, certificate lifecycle management, and certificate authority rationalization or migration Experience with Active Directory domain consolidation, migration, and legacy domain decommissioning Familiarity with Entra ID governance, including cross-tenant identity governance models Experience automating non-human (service) account lifecycle management, including provisioning, ownership enforcement, and deprovisioning Experience conducting AD/Entra security baseline assessments and remediating identified findings Project Work: PAM Onboarding, AD Standardization, Lifecycle Management Lead consolidation and decommissioning of the legacy MGMT and iDMZ Active Directory domains and their associated PKI infrastructure Onboard privileged accounts into the PAM platform, vaulting Tier 0/1/2 credentials and enforcing zero standing privileged access across AD domains Implement role-based access controls (RBAC) and privileged identity management (PIM) across Active Directory and Entra ID, replacing legacy, overly broad permissions Automate provisioning and deprovisioning of non-human (service) accounts, including ownership enforcement and lifecycle management Standardize AD architecture and governance across Enterprise Tech and business unit/segment-managed domains, including baseline security assessments Design and pilot cross-tenant Entra ID governance to extend identity controls across business segments and partners Deploy Privileged Access Workstations (PAW) and restrict Tier 0 administrative activity to hardened, isolated devices Remediate high-priority security findings across AD and Entra/M365 tenants to reduce the attack surface ahead of migration Troubleshooting & Support: Work with security and infrastructure teams to remediate vulnerabilities. Document configurations, policies, and procedures for future reference. Skills active directory, IAM, Entra ID, automation Top Skills Details active directory,IAM,Entra ID,automation Experience Level Expert Level Job Type & Location This is a Contract position based out of Burbank, CA. Pay and Benefits The pay range for this position is $95.00 - $100.00/hr. Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.

TEKsystems is looking to hire a Senior Platform Engineer (Active Directory & PAM) for one of our media & entertainment clients. Candidates can sit out of the following locations: Burbank/Orlando/Seattle Job Description: Analyze the existing life cycle management of Identities created in Active Directory and Entra and help automate and modernize the process. Document and guide the operations team with the decommissioning of legacy instances of Active Directory. Evaluate capabilities of services/products and design solutions to deliver future service offerings through detailed technical analysis., Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: Medical, dental & vision Critical Illness, Accident, and Hospital 401(k) Retirement Plan Pre-tax and Roth post-tax contributions available Life Insurance (Voluntary Life & AD&D for the employee and dependents) Short and long-term disability Health Spending Account (HSA) Transportation benefits Employee Assistance Program Time Off/Leave (PTO, Vacation or Sick Leave) Workplace Type This is a hybrid position in Burbank,CA. Application Deadline This position is anticipated to close on Oct 13, 2026. About TEKsystems We’re partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That’s the power of true partnership. TEKsystems is an Allegis Group company. The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law. About TEKsystems and TEKsystems Global Services Were a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. Were a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. Were strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. Were building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com. The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law. San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records. Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.