Cloud Identity & Directory Architect

Stefanini LATAM; Región Centro; On-site; MXN 700,000 - 1,000,000; Full time

Job summary

Stefanini LATAM is seeking an experienced IT Engineer focusing on enterprise identity and directory services. You will design, implement, and maintain AD/Entra ID infrastructure across on‑prem and cloud, enforce security controls like MFA and CA policies, and mentor junior engineers in a large global environment.

The role requires strong collaboration with cross‑functional teams and hands‑on expertise in AD DS, GPOs, LDAP, Kerberos, and cloud identity integrations.

Qualifications

• Bachelor’s degree in Computer Science, IT, Engineering, or related field; a master’s degree preferred.
• 4 years of IT engineering experience with strong expertise in identity infrastructure and AD-related technologies.
• Hands-on experience with AD DS, GPOs, and domain management.
• Knowledge of LDAP connectivity, Kerberos/NTLM, PKI integration, and firewall communications.
• Experience with Entra ID (Azure AD), PTA, PHS, MFA, CA policies, and RBAC/PIM.
• Familiarity with Intune, device management, and Hybrid Join scenarios.
• Proven ability to mentor junior engineers and work in large, global environments.
• Strong communication in English; CISSP or Azure certifications preferred.

Responsibilities

• Design, engineer, implement, and maintain enterprise identity infrastructure across on‑prem and cloud.
• Manage AD services, domain creation, GPOs, user/group management, and OU configuration.
• Configure and troubleshoot identity synchronization between AD and Entra ID.
• Implement identity security controls: MFA, Conditional Access, RBAC, PIM.
• Evaluate and strengthen AD security, monitoring, backup, and recovery processes.
• Test directory enhancements in lab environments before UAT/production.
• Support applications with LDAP connectivity and AD integrations while ensuring stability.
• Troubleshoot authentication, Kerberos/NTLM, and directory service issues.
• Review network traffic, ports, protocols, and firewall settings affecting auth flows.
• Automate provisioning with Terraform, Bicep, ARM; contribute to roadmaps and compliance.
• Provide technical guidance and mentorship; document designs clearly for operations.

Skills

Active Directory

Azure identity solutions

AD DS & GPOs

LDAP & Kerberos

Security monitoring & PAM

Entra ID / MS Entra

Intune & device management

RBAC / PIM / MFA

Identity integration (on-prem/cloud)

Education

Bachelor's degree in CS/IT/Engineering

Master's degree preferred

Tools

Terraform

Bicep

ARM templates

Job description

Stefanini LATAM is seeking an experienced IT Engineer focusing on enterprise identity and directory services. You will design, implement, and maintain AD/Entra ID infrastructure across on‑prem and cloud, enforce security controls like MFA and CA policies, and mentor junior engineers in a large global environment.

The role requires strong collaboration with cross‑functional teams and hands‑on expertise in AD DS, GPOs, LDAP, Kerberos, and cloud identity integrations.