> Markdown version of [/jobs/ext/4620486-identity-engineer-identity-management](https://www.wearedevelopers.com/jobs/ext/4620486-identity-engineer-identity-management). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Identity Engineer Identity Management - **Company:** Astellas Pharma - **Location:** Northbrook, IL, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Active Directory, Domain Controllers, User Authentication, Authentication Protocols, Cloud Computing, Dynamic Host Configuration Protocol, Disaster Recovery, Domain Name System (DNS), Multi-Factor Authentication, Identity and Access Management, Kerberos (Protocol), Lightweight Directory Access Protocols (LDAP), Windows Servers, Windows PowerShell, Azure Active Directory, Zero Trust Network Access, Systems Integration, Software Troubleshooting, Data Management - **Published:** November 7, 2026 - **Apply:** https://www.careerbuilder.com/job-details/identity-engineer-identity-management-northbrook-il--50ed6cb2-9440-48b6-bdc4-40dbe459772f ## About the Role * 8 to 12+ years of hands-on experience managing Microsoft Active Directory and enterprise identity infrastructure. * Strong practical experience with AD DS, Domain Controllers, DNS, Group Policy (GPO), LDAP, Active Directory replication, and Microsoft Entra ID. * Demonstrated hands-on expertise in: Active Directory Domains, Forests, Trusts, Sites & Services, FSMO roles, and OU management. * DNS, Kerberos, LDAP, Group Policy administration, and security hardening. * Hybrid identity environments using Microsoft Entra Connect and Microsoft Entra ID. * PowerShell scripting and automation for Active Directory administration and reporting. * Identity security controls including MFA, Conditional Access, PAM, and Zero Trust. * Experience supporting Active Directory modernization, migration, consolidation, and security improvement initiatives. * Strong troubleshooting, analytical, and problem-solving skills within complex enterprise environments. * Effective verbal and written communication skills, capable of working with technical and non-technical stakeholders., * Experience with large-scale, multi-domain and multi-forest Active Directory environments, including directory consolidation, migration, and modernization initiatives. * Experience with Microsoft Entra ID, Entra Connect, Conditional Access, Privileged Identity Management (PIM), and hybrid identity architectures. * Experience implementing Active Directory security best practices, including Tier-0 administration, Microsoft Defender for Identity (MDI), Privileged Access Management (PAM), and Zero Trust principles. * Experience with PowerShell automation, Active Directory health assessments, disaster recovery, Forest Recovery, and security hardening activities. * Microsoft certifications such as SC-300, AZ-104, AZ-500, Windows Server Hybrid Administrator Associate, or equivalent Microsoft infrastructure/security certifications. Legacy certifications such as MCSE are also valued. Experience in healthcare or other regulated industries is a plus. ## Description As an Identity Engineer, you will be responsible for the architecture, administration, security, and modernization of enterprise Active Directory services, including hybrid identity integration with Microsoft Entra ID. The role focuses on strengthening identity security, improving directory service reliability, driving automation, and supporting Active Directory transformation initiatives across global on-premises and cloud environments., * Administer, maintain, and support enterprise Microsoft Active Directory services, including Domain Controllers, Forests, Domains, DNS, Sites & Services, Organizational Units (OUs), and Group Policy Objects (GPOs). * Monitor, troubleshoot, and optimize Active Directory health, availability, replication, authentication services, and performance to ensure stable and secure identity operations. * Manage Active Directory security controls, including privileged groups, delegated administration, password policies, account policies, authentication protocols, and directory hardening. * Perform Active Directory assessments, health checks, security reviews, remediation activities, and operational improvements aligned with Microsoft and industry best practices. * Support hybrid identity environments integrating Active Directory with Microsoft Entra ID, identity synchronization, authentication services, and cloud identity platforms. * Administer and maintain core Active Directory services, including DNS, DHCP integration, Sites & Services, trusts, schema updates, FSMO roles, and SYSVOL replication. * Implement and support identity security initiatives, including Tier-0 protection, Privileged Access Management (PAM), Multi-Factor Authentication (MFA), Conditional Access, and Zero Trust controls. * Troubleshoot and resolve complex Active Directory issues related to replication, authentication, DNS, Kerberos, LDAP, Group Policy, and domain controller operations. * Develop and maintain automation solutions using PowerShell and related scripting technologies to improve operational efficiency and reduce manual effort. * Support backup, recovery, disaster recovery testing, and Active Directory Forest Recovery readiness to ensure business continuity. * Partner with Infrastructure, Security, Application, and Cloud teams to support enterprise identity integrations, modernization initiatives, and transformation programs. * Maintain operational documentation, technical standards, governance procedures, audit evidence, and compliance requirements related to Active Directory services.