Active Directory Services / Entra Engineer (Hybrid)

ABBVIE; North Chicago (IL); On-site; USD 84,500 - 162,000; Full time

Job summary

AbbVie is seeking an IAM Directory Services Engineer to design, deploy, and manage Microsoft Entra ID and Active Directory solutions for a global workforce. You will implement MFA, SSO, RBAC, and Zero Trust across hybrid and multi-cloud environments.

The ideal candidate will have strong PowerShell scripting, experience with AD CS/SCEP/NDES, and collaboration with security, engineering, and operations teams to harden identity controls.

Qualifications

• Experience with Entra ID/Azure AD and Active Directory.
• Strong PowerShell scripting and automation skills.
• Experience with certificate services (AD CS) and PKI.
• Knowledge of MFA, SSO, conditional access, and Zero Trust.

Responsibilities

• Design, deploy, and manage Entra ID/Azure AD solutions for hybrid environments.
• Configure RBAC, conditional access, and MFA for secure access.
• Develop automation scripts to streamline identity management tasks.
• Collaborate with security and IT teams to enforce identity controls.

Skills

PowerShell scripting

Entra ID / Azure AD

Active Directory

MFA

SSO

RBAC

Zero Trust

Certificate Services

Education

Bachelor Degree with 5 years’ experience OR Master’s Degree with 4 years’ experience

Tools

Active Directory Certificate Services (AD CS)

SCEP/NDES

SpecOps

LastPass

Job description

Active Directory Services / Entra Engineer

• Full-time
• Salary Min: 84500
• Salary Max: 162000
• Workday Global Grade: 16
• Travel: No
• Compensation: USD 84,500 - USD 162,000 - yearly

About AbbVie

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology, and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com . Follow @abbvie on LinkedIn, Facebook , Instagram , X and YouTube.

Join AbbVie’s Information Security & Risk Management (ISRM) team as an IAM Directory Services Engineer, where we empower our partners to succeed by delivering the knowledge, tools, and support needed to leverage data and technology securely and effectively. As part of our Identity & Access Management (IAM) team, you will play a pivotal role in shaping and executing our enterprise-wide IAM strategy.

The ideal candidate will have deep expertise in Microsoft Entra ID (formerly Azure AD), Active Directory, Certificate Services, supporting related authentication tools, and PowerShell scripting experience to design, implement, and manage Directory and Authentication solutions for our global workforce of 80,000 users.

Responsibilities:

• Designing, deploying, and maintaining Microsoft Entra ID (formerly Azure AD) solutions, including conditional access policies, application integrations, multi-factor authentication (MFA), single sign-on (SSO), and Zero Trust.
• Designing and managing custom roles and RBAC (Role-Based Access Control) in Entra ID for granular access management across hybrid and multi-cloud environments.
• Developing and maintaining PowerShell scripts to automate identity management tasks, streamline processes, and enhance operational efficiency.
• Aligning Entra ID and hybrid identity controls with security best practices through ongoing configuration hardening, policy tuning, and operational guardrails (e.g., Zero Trust patterns, privileged access controls).
• Collaborating with cross-functional teams to integrate enterprise applications and cloud platforms with Directory and Authentication Services.
• Performing advanced troubleshooting and root cause analysis of complex Entra ID and Active Directory authentication and authorization issues.
• Administering and supporting certificate lifecycle management and authentication infrastructure, including Active Directory Certificate Services (AD CS), SCEP/NDES configurations, and endpoint credential and password management tools such as SpecOps and LastPass.
• Staying current with industry trends and emerging technologies in IAM, AD, Azure, and related fields.

• Bachelor Degree with 5 years’ experience OR Master’s Degree with 4 years’ experience
• Respective years of demonstrated experience with a focus on Entra ID/Azure AD and Active Directory.
• Advanced proficiency in PowerShell scripting for automation and management of identity systems.
• Hands-on experience with Active Directory, Entra ID features, including conditional access, MFA, SSO, and Entra ID Connect.
• Experience supporting certificate and authentication services, including Active Directory Certificate Services (AD CS).
• Excellent problem-solving skills and ability to work in a fast-paced, global environment.
• Strong collaboration skills across engineering, security, and operations teams
• In-depth knowledge of securing identity platforms and hybrid directory environments, including threat modeling and control design
• Strong communication skills with the ability to document designs, drive implementation plans, and coordinate deliverables with stakeholders

Preferred:

• 5 years’ experience with a focus on Entra ID/Azure AD and Active Directory.
• Microsoft certifications such as Microsoft Certified: Identity and Access Administrator Associate or Microsoft Certified: Azure Solutions Architect Expert.
• Familiarity with cloud platforms like AWS or Google Cloud for hybrid identity solutions.
• Knowledge of security best practices and compliance frameworks (e.g., NIST, ISO 27001).
• Experience with Active Directory (AD) environments, including group policies, user provisioning, directory synchronization, and Certificate Services.
• Familiarity with PKI and certificate services administration (AD CS, SCEP/NDES) for issuing and managing device and user certificates supporting authentication use cases.

Applicable only to applicants applying to a position in any location with pay disclosure requirements under state or local law:

• The compensation range described below is the range of possible base pay compensation that the Company believes in good faith it will pay for this role at the time of this posting based on the job grade for this position. Individual compensation paid within this range will depend on many factors including geographic location, and we may ultimately pay more or less than the posted range. This range may be modified in the future.
• We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick), medical/dental/vision insurance and 401(k) to eligible employees.
• This job is eligible to participate in our short-term incentive programs.

Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, incentive, benefits, or any other form of compensation and benefits that are allocable to a particular employer remains in the Company's sole and absolute discretion unless and until paid and may be modified at the Company's sole and absolute discretion, consistent with applicable law.

AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives and serving our community. Equal Opportunity Employer/Veterans/Disabled.