> Markdown version of [/jobs/ext/4681889-senior-active-directory-engineer](https://www.wearedevelopers.com/jobs/ext/4681889-senior-active-directory-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Active Directory Engineer

- **Company:** MSH Group
- **Location:** Miami, FL, United States
- **Experience:** Expert
- **Contract:** Contract
- **Skills:** Active Directory, Amazon Web Services, User Authentication, Microsoft Azure, Dynamic Host Configuration Protocol, Domain Name System (DNS), Identity and Access Management, Python (Programming Language), Public Key Infrastructure, Windows PowerShell, Ansible, Google Cloud, Cyberark, Tanium Platform Expertise, Software Coding, Terraform, Servicenow, Vmware
- **Published:** November 12, 2026
- **Apply:** https://www.dice.com/job-detail/ca9a6dba-82c7-408a-8001-5ee9dcc423c5

## About the Role

* 10+ years of experience in enterprise infrastructure, with senior-level Active Directory engineering
 * Deep on-prem Active Directory experience: multiple domains and forests, legacy architecture, and keeping it secure, compliant and modernized (Azure-only backgrounds will not be a fit)
 * Automation mindset: scripting or coding skills (PowerShell preferred) and a track record of building automated, monitored, supportable solutions instead of manual "click, click" work, * Azure / Entra ID (SSO, app registrations, secrets, non-human identities)
 * DNS, DHCP and internal PKI / certificate services
 * PowerShell, Python, Ansible, Terraform
 * ServiceNow, especially spoke knowledge of AD, Azure, AWS and Google Cloud Platform connectors
 * CyberArk, Tanium, VMware, AWS, Google Cloud
 * Domain consolidation, M&A integration, identity governance or object lifecycle automation experience
 * Microsoft on-prem certifications (a plus, not required)

## Description

Our client, a large enterprise in the energy and utilities sector, is looking for a Senior Active Directory Engineer to join its Authentication Services team on a 6-month contract-to-hire. This person should be able to grow into an architect-level role.

The team owns architecture, engineering, standards, projects and automation for the company's identity infrastructure, while day-to-day operations are handled by an on-prem support team and a managed services partner. You will work directly with the hiring manager and the team's senior architect. The role covers on-prem Active Directory and Azure/Entra ID, plus DNS, DHCP and internal PKI, and offers a chance to shape the next generation of the environment, including domain consolidation and an upcoming M&A integration., * Architect, engineer and modernize a multi-domain, multi-forest on-prem Active Directory environment, keeping it secure and compliant

 * Build automated, monitored, supportable solutions that replace manual work
 * Engineer Azure/Entra ID services: SSO, app registrations, secrets and non-human identities
 * Own DNS, DHCP and internal PKI/certificate services, extending certificate automation through ServiceNow
 * Lead domain consolidation and M&A integration efforts
 * Partner with the IAM team on a new identity governance tool and object lifecycle automation
 * Delegate and automate operational work with the on-prem support team and managed services partner
 * Assess the environment and recommend improvements and next-gen tooling
 * Support occasional after-hours changes and business continuity events