Directory Services Engineer

Stefanini LATAM; Región Centro; In loco; MXN 700.000 - 1.000.000; Tempo pieno

Descrizione del lavoro

Stefanini LATAM is seeking an experienced IT Engineer focusing on enterprise identity and directory services. You will design, implement, and maintain AD/Entra ID infrastructure across on‑prem and cloud, enforce security controls like MFA and CA policies, and mentor junior engineers in a large global environment.

The role requires strong collaboration with cross‑functional teams and hands‑on expertise in AD DS, GPOs, LDAP, Kerberos, and cloud identity integrations.

Competenze

• Bachelor’s degree in Computer Science, IT, Engineering, or related field; a master’s degree preferred.
• 4 years of IT engineering experience with strong expertise in identity infrastructure and AD-related technologies.
• Hands-on experience with AD DS, GPOs, and domain management.
• Knowledge of LDAP connectivity, Kerberos/NTLM, PKI integration, and firewall communications.
• Experience with Entra ID (Azure AD), PTA, PHS, MFA, CA policies, and RBAC/PIM.
• Familiarity with Intune, device management, and Hybrid Join scenarios.
• Proven ability to mentor junior engineers and work in large, global environments.
• Strong communication in English; CISSP or Azure certifications preferred.

Mansioni

• Design, engineer, implement, and maintain enterprise identity infrastructure across on‑prem and cloud.
• Manage AD services, domain creation, GPOs, user/group management, and OU configuration.
• Configure and troubleshoot identity synchronization between AD and Entra ID.
• Implement identity security controls: MFA, Conditional Access, RBAC, PIM.
• Evaluate and strengthen AD security, monitoring, backup, and recovery processes.
• Test directory enhancements in lab environments before UAT/production.
• Support applications with LDAP connectivity and AD integrations while ensuring stability.
• Troubleshoot authentication, Kerberos/NTLM, and directory service issues.
• Review network traffic, ports, protocols, and firewall settings affecting auth flows.
• Automate provisioning with Terraform, Bicep, ARM; contribute to roadmaps and compliance.
• Provide technical guidance and mentorship; document designs clearly for operations.

Conoscenze

Active Directory

Azure identity solutions

AD DS & GPOs

LDAP & Kerberos

Security monitoring & PAM

Entra ID / MS Entra

Intune & device management

RBAC / PIM / MFA

Identity integration (on-prem/cloud)

Formazione

Bachelor's degree in CS/IT/Engineering

Master's degree preferred

Strumenti

Terraform

Bicep

ARM templates

Descrizione del lavoro

At Stefanini we are more than 30,000 geniuses, connected from more than 40 countries, we co-create a better future.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field; a master's degree is preferred.
• 4 years of experience in IT engineering, with strong expertise in Active Directory, Directory Services, and/or Azure identity solutions.
• Advanced experience with Microsoft Active Directory Domain Services (AD DS), including domain management, Group Policy Objects (GPOs), organizational units, users, and groups.
• Strong knowledge of LDAP connectivity, Kerberos/NTLM authentication, PKI integration, network ports and protocols, and firewall communications.
• Hands-on experience with Active Directory security, privileged access management, security monitoring, and backup and recovery processes.
• Experience with Microsoft Entra ID (formerly Azure Active Directory), Azure AD Connect, Pass-through Authentication (PTA), and Password Hash Synchronization (PHS).
• Knowledge of Azure Role-Based Access Control (RBAC), Privileged Identity Management (PIM), Multi-Factor Authentication (MFA), Conditional Access Policies, and Microsoft Authenticator.
• Experience with Microsoft Intune, device management policies, Azure AD Join/Hybrid Join, and identity integration across on-premises and cloud environments.
• Familiarity with Azure Policies, Azure Blueprints, Azure Resource Manager (ARM) templates, Bicep, and/or Terraform.
• Strong analytical, diagnostic, troubleshooting, and technical documentation skills.
• Experience working in large, complex, and global enterprise environments, collaborating with cross-functional engineering and operations teams.
• Proven ability to manage technical projects, implement infrastructure enhancements, improve operational processes, and mentor junior engineers.
• Strong communication skills and fluent English proficiency.
• Preferred certifications: CISSP, Microsoft Azure Administrator Associate,

Responsibilities

• Design, engineer, implement, and maintain enterprise directory services and identity infrastructure across on-premises and cloud environments.
• Manage and enhance Active Directory services, including domain creation, Group Policy administration, user and group management, and organizational unit configuration.
• Configure, maintain, and troubleshoot identity synchronization and authentication between on-premises Active Directory and Microsoft Entra ID.
• Implement and maintain identity security controls, including MFA, Conditional Access, RBAC, PIM, and privileged access management.
• Evaluate and strengthen Active Directory security through configuration reviews, security enhancements, monitoring, backup and recovery, and access control improvements.
• Test directory service enhancements and application integrations in laboratory environments before promoting changes to UAT and production.
• Support application teams in establishing secure LDAP connectivity and Active Directory integrations while ensuring that applications do not negatively impact directory functionality.
• Troubleshoot complex authentication, connectivity, password, account lockout, Kerberos, NTLM, and directory service issues.
• Review network traffic, ports, protocols, firewall configurations, and authentication flows to identify and resolve infrastructure issues.
• Manage and support directory service infrastructure, including lab servers, post-patching validation, and infrastructure readiness.
• Automate infrastructure provisioning and configuration using Terraform, Bicep, ARM templates, or other relevant tools, where applicable.
• Serve as a technical subject matter expert, contribute to technology roadmaps, recommend system enhancements, and ensure compliance with corporate security standards.
• Identify root causes, assess business and technical impacts, and implement sustainable solutions to improve service reliability and security.
• Provide technical guidance and mentorship to junior engineers while maintaining clear technical documentation and supporting continuous improvement initiatives.