Senior Active Directory Engineer

Our client, a large enterprise in the energy and utilities sector, is looking for a Senior Active Directory Engineer to join its Authentication Services team on a 6-month contract-to-hire. This person should be able to grow into an architect-level role.

The team owns architecture, engineering, standards, projects and automation for the company’s identity infrastructure, while day-to-day operations are handled by an on-prem support team and a managed services partner. You will work directly with the hiring manager and the team’s senior architect. The role covers on-prem Active Directory and Azure/Entra ID, plus DNS, DHCP and internal PKI, and offers a chance to shape the next generation of the environment, including domain consolidation and an upcoming M&A integration., * Architect, engineer and modernize a multi-domain, multi-forest on-prem Active Directory environment, keeping it secure and compliant

• Build automated, monitored, supportable solutions that replace manual work
• Engineer Azure/Entra ID services: SSO, app registrations, secrets and non-human identities
• Own DNS, DHCP and internal PKI/certificate services, extending certificate automation through ServiceNow
• Lead domain consolidation and M&A integration efforts
• Partner with the IAM team on a new identity governance tool and object lifecycle automation
• Delegate and automate operational work with the on-prem support team and managed services partner
• Assess the environment and recommend improvements and next-gen tooling
• Support occasional after-hours changes and business continuity events

• 10+ years of experience in enterprise infrastructure, with senior-level Active Directory engineering
• Deep on-prem Active Directory experience: multiple domains and forests, legacy architecture, and keeping it secure, compliant and modernized (Azure-only backgrounds will not be a fit)
• Automation mindset: scripting or coding skills (PowerShell preferred) and a track record of building automated, monitored, supportable solutions instead of manual “click, click” work, * Azure / Entra ID (SSO, app registrations, secrets, non-human identities)
• DNS, DHCP and internal PKI / certificate services
• PowerShell, Python, Ansible, Terraform
• ServiceNow, especially spoke knowledge of AD, Azure, AWS and Google Cloud Platform connectors
• CyberArk, Tanium, VMware, AWS, Google Cloud
• Domain consolidation, M&A integration, identity governance or object lifecycle automation experience
• Microsoft on-prem certifications (a plus, not required)