Security Engineer

The Walt Disney Company; Bengaluru; On-site; INR 4,000,000 - 6,000,000; Full time

Job summary

The Walt Disney Company in Bengaluru seeks an experienced IAM Engineer to design, secure, and operate large Active Directory environments across multiple domains. You will lead consolidation efforts, support Radiant Logic VDS, and implement RBAC and JIT access patterns to protect privileged identities.

You'll partner with enterprise security and cloud identity teams to synchronize AD with Entra ID and enforce governance across tenants and business units, while mentoring junior engineers and

Qualifications

• 8+ years of hands-on experience engineering and operating large-scale Active Directory environments.
• Proven expertise in AD architecture, trusts, replication, DNS, PKI.
• Experience with RBAC, PIM, and PAM; Privileged access controls.
• Experience with enterprise IAM or directory services teams.
• Familiarity with Radiant Logic’s Virtual Directory Services.

Responsibilities

• Engineer, harden, and operate large-scale Active Directory environments across multiple domains.
• Lead AD consolidation and domain rationalization across enterprise, ecommerce, and business units.
• Support RadiantLogic’s Virtual Directory System operations and enhancements.
• Establish and enforce multi-domain baseline identity security standards.
• Implement and mature RBAC-based access models across AD and Entra ID integration.
• Integrate AD with PIM/PAM platforms and enable JIT access patterns.
• Enable bi-directional synchronization between AD and Entra ID.
• Support cross-tenant identity governance for multiple business units.
• Mentor junior engineers and contribute to reusable engineering patterns.

Skills

AD architecture

DNS

PKI

Multi-domain design

Radiant Logic VDS

RBAC

PIM

PAM

Troubleshooting

IAM

Education

Bachelor’s degree in CS/IT/Engineering

Tools

Radiant Logic Virtual Directory Services

Entra ID integration

Job description

Department Description

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company (TWDC) is a world‑class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance these exciting experiences.

Department Description

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company (TWDC) is a world‑class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance these exciting experiences.
The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.
The Global Information Security (GIS) Organization Strives To Secure The Magic By Employing Best-in-class Services To Assess, Prevent, Detect, And Respond To Cyber Threats That Present Risk To The Walt Disney Company. We Enable The Business By Integrating Enterprise And Business Segment-specific Supported Services To Create a Robust, Efficient, And Adaptable Cybersecurity Program. Our Key Objectives Are To

• Secure the Magic by protecting information systems and platforms.
• Reduce Risk by proactively assessing, preventing, and detecting to prevent harm to the Company and our Guests.
• Strengthen the business through optimizing execution, application, and technology used to protect the Company.
• Innovate by investing in core capabilities to enhance operational efficiency.

Team Description

• The Identity & Access Management (IAM) – Directory Services team is responsible for building and operating a secure, standardized, and automated enterprise identity foundation across The Walt Disney Company. We provide the authoritative directory platforms that enable authentication, authorization, and access governance for both human and non‑human identities.
• Our mission is to move identity governance from manual, reactive processes to automated, policy‑driven enforcement, ensuring identities are secure, compliant, and healthy by default across their lifecycle. We partner closely with security, infrastructure, and application teams to eliminate legacy risk, reduce operational toil, and enable modern, cloud‑first identity capabilities at enterprise scale.

What You’ll Do

Directory Platform Engineering & Operations

• Engineer, harden, and operate enterprise and multidomain Active Directory environments supporting critical business workloads.
• Lead Active Directory consolidation and domain rationalization efforts, including enterprise, eCommerce, and business‑unit directories.
• Support RadiantLogic’s Virtual Directory System operations and enhancements.
• Establish and enforce multi‑domain baseline identity security standards across environments.
• Implement and mature RBAC‑based access models across Active Directory.
• Integrate AD with Privileged Identity Management (PIM) and Privileged Access Management (PAM) platforms.
• Help with eliminating standing privilege through group‑based, time‑bound, and JIT access patterns.
• Implement and support synchronization between Active Directory and Entra ID.
• Support cross‑tenant identity governance for business segments and federated environments.
• Enable automated human and non‑human identity governance, including monitoring, remediation, and compliance reporting.
• Reduce directory and tool sprawl while maintaining service reliability and business continuity.
• Mentor and uplift junior engineers; contribute to repeatable engineering patterns and documentation.

Required Qualifications & Skills

• 8+ years of hands‑on experience engineering and operating large‑scale Active Directory environments.
• Deep expertise in:
  • Active Directory architecture, trusts, replication, DNS, PKI
  • Multi‑domain / multi‑forest designs
  • AD security hardening and recovery
  • Radiant Logic’s Virtual Directory Services
• Proven experience implementing or supporting:
  • RBAC, PIM, and PAM
  • Privileged account separation and Tier 0 controls
• Strong troubleshooting skills in complex, highly regulated environments.
• Experience working in enterprise‑scale IAM or directory services teams.

Preferred Qualifications

• Experience integrating AD with Entra ID / Azure AD in hybrid or cloud‑first environments.
• Familiarity with identity governance automation, non‑human identity management, and continuous compliance.
• Experience supporting cross‑tenant or multi‑business‑unit identity models.
• Background in directory consolidation, legacy system sunset, or M&A identity integration.
• Comfort operating in environments with high security, resilience, and audit expectations.

Required Education

• Bachelor’s degree in Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience

Engineer, harden, and operate large‑scale, multi‑domain Active Directory environments supporting critical business workloads.
Lead Active Directory consolidation and domain rationalization, reducing directory sprawl across enterprise, eCommerce, and business units.
Operate and enhance Virtual Directory services (RadiantLogic) to support federated and multi‑source identity use cases.
Define, implement, and enforce baseline identity security standards across complex, multi‑domain environments.
Design and mature RBAC‑based access models within Active Directory.
Integrate Active Directory with Privileged Identity and Access Management (PIM/PAM) platforms.
Eliminate standing privilege through group‑based, time‑bound, just‑in‑time (JIT) access patterns.
Implement and sustain Tier 0 security posture, including privileged account separation and Privileged Access Workstations (PAW).
Design and operate bi‑directional synchronization between Active Directory and Entra ID, partnering with cloud identity teams for consistent governance.
Improve identity governance and lifecycle accuracy through authoritative attribute synchronization, cross‑tenant governance, automation, documentation, and mentoring of junior engineers.