Active Directory Engineer

PepsiCo Inc.; Makati; On-site; PHP 1,800,000 - 2,400,000; Full time

Job summary

PepsiCo Deutschland GmbH is seeking an experienced Directory Services Engineer to advance the enterprise Active Directory and Azure AD strategy within a hybrid environment. You will design, implement, and optimize identity solutions at scale across on-premises and cloud resources.

The role emphasizes automation, incident resolution, governance, and continuous improvement in large directory services environments, with opportunities to shape architecture and security controls.

Qualifications

• 9+ years of engineering and design experience with Active Directory.
• 8+ years supporting Active Directory.
• 3+ years supporting Azure Active Directory.

Responsibilities

• Analyze, design, and support a highly complex enterprise AD service in a hybrid on-premises and cloud-hosted environment.
• Manage enterprise identity cloud directories, including Microsoft AD and Azure AD.
• Translate business needs into workable technology solutions.
• Participate in or lead troubleshooting and incident resolution of complex high severity incidents
• Develop automated solutions using scripts, pipelines, and cloud-based server-less computing platforms
• Develop detailed architecture, standards, design, and implementation documentation
• Analyze the current Directory Services environment to identify technical and operational opportunities and develop continuous improvement action plans.
• Participate in disaster recovery, capacity planning, performance monitoring, and maintenance to ensure high availability.

Skills

Active Directory engineering

Azure Active Directory

PowerShell scripting

GPO management

Tools

PowerShell

VBScript

Job description

Overview

At PepsiCo, you'll find the opportunity to grow your career, make an impact, and help shape what's next. As one of the world's leading food and beverage companies, our beloved brands—including Gatorade, Lay's, and Quaker—help create smiles with every sip and bite. Behind our products is a connected system that starts with how we source and grow ingredients alongside farmers and extends to how we make, move, and deliver products while driving positive impact for our business and communities.

PepsiCo is looking for an experienced Active Directory/Azure AD engineer to help drive the enterprise directory strategy forward for the Identity and Access Management organization. As a member of the Directory Services team, the Directory Services Engineer will be responsible for developing, engineering, deploying, and supporting comprehensive solutions based on unique and complex requirements and problems related to identity and directory services. The Engineer will also be responsible for identifying opportunities for the automation of tasks, processes, or complete solutions and acting on them, and identifying any opportunities for improvement in the environment.

Responsibilities

• Analyze, design, and support a highly complex, enterprise-level Active Directory service in a hybrid on-premises and cloud-hosted environment.
• Manage enterprise identity cloud directories, including Microsoft AD and Azure AD.
• Translate business needs into workable technology solutions.
• Participate in or lead troubleshooting and incident resolution of complex high severity incidents
• Develop automated solutions using scripts, pipelines, and cloud-based server-less computing platforms
• Develop detailed architecture, standards, design, and implementation documentation
• Analyze the current Directory Services environment to identify technical and operational opportunities and develop continuous improvement action plans.
• Participate in disaster recovery, capacity planning, performance monitoring, and maintenance to ensure high availability.

Qualifications

• 9+ years experience with engineering and design of Active Directory
• 8+ years in supporting Active Directory
• 3+ years support Azure Active Directory

Mandatory Technical Skills:

Knowledge of the following core concepts:

• Principle of least privileged access
• Principle of revocation of rights
• Principle of Just In Time access
• Experience with developing, planning, and implementing a large scale enterprise-level Active Directory infrastructure, including but not limited to the following components:
  • Domain Controller deployment
  • Securing Active Directory
  • Advanced GPO settings
  • Advanced replication management
• Experience with governance and compliance, including the following:
  • SOX controls
  • Advanced auditing techniques
• Experience working with large-scale, enterprise-level LDAP / Active Directory environments
• Knowledge of programming/scripting disciplines like the following:
  • VBScript
  • PowerShell

At the heart of PepsiCo are our people: professionals who bring curiosity, drive, and fresh thinking, working together to turn ideas into action. Across functions, teams, and markets, we collaborate to solve challenges, unlock new opportunities, and create meaningful impact for our consumers, customers, and communities.

No matter your role, you'll be part of a connected community where your contributions matter, your voice is heard, and your development is supported. With opportunities to grow, belong, and smile, PepsiCo offers more than a place to build your career—it offers the chance to help create what's next.