Active Directory SME (Identity Security)

Intone Inc; Atlanta, Northern (GA, KY); Hybrid; USD 130,000 - 170,000; Full time

Job summary

Cargill's Identity Security team seeks an experienced Active Directory Subject Matter Expert to help modernize and optimize its enterprise AD environment. This senior contract engineering role is based in Atlanta, GA, for 6+ months and requires hands-on expertise in large-scale identities and hybrid cloud integrations.

The successful candidate will design, implement, and migrate AD domains, manage domain controllers and GPOs, and partner with IAM teams to advance IGA and PAM initiatives while

Qualifications

• 8+ years of hands-on Active Directory engineering experience.
• Extensive enterprise Active Directory design, implementation, and administration.
• Experience building new AD environments and decommissioning legacy environments.
• Strong understanding of hybrid identity and cloud integrations.
• Ability to lead technical initiatives with minimal supervision.
• Active Directory architecture and engineering.
• Domain and forest design, migrations, and consolidations.
• Domain controller deployment, promotions, and demotions.
• Organizational Units (OUs)
• Group Policy (GPO)
• Sites & Services
• User and computer administration
• Domain joins
• AD health, performance, and troubleshooting
• AWS Managed Microsoft AD / Active Directory integration
• Microsoft Entra ID (Azure AD)

Responsibilities

• Design, implement, and modernize enterprise Active Directory environments
• Build and decommission Active Directory domains and forests
• Improve hybrid connectivity between on-premises Active Directory and AWS
• Manage domain controllers, Group Policy Objects (GPOs), Sites & Services, and overall AD health
• Automate Active Directory administration and operational tasks
• Partner with Identity & Access Management teams on AD integrations
• Support Identity Governance (IGA) and Privileged Access Management (PAM) initiatives
• Troubleshoot complex AD issues and perform root cause analysis
• Mentor engineers and share technical knowledge across the team
• Transition from hands-on engineering early in the engagement toward architecture, modernization, and technical leadership as the engagement progresses

Skills

Active Directory

AD design & admin

Hybrid identity

Domain/Forest design

GPO / Sites & Services

Troubleshooting

IAM collaboration

IaC (Terraform/Ansible)

Tools

AWS AD integration

Azure AD

Job description

Cargill's Identity Security team is seeking an experienced Active Directory Subject Matter Expert to help modernize and optimize its enterprise Active Directory environment. This is a senior-level contract engineering role based in Atlanta, Georgia, for a duration of 6+ months. The ideal candidate is a hands-on Active Directory expert who thrives in complex enterprise environments, is comfortable working with minimal direction, and can balance engineering execution with long-term architecture and strategy.

Responsibilities

• Design, implement, and modernize enterprise Active Directory environments
• Build and decommission Active Directory domains and forests
• Improve hybrid connectivity between on-premises Active Directory and AWS
• Manage domain controllers, Group Policy Objects (GPOs), Sites & Services, and overall AD health
• Automate Active Directory administration and operational tasks
• Partner with Identity & Access Management teams on AD integrations
• Support Identity Governance (IGA) and Privileged Access Management (PAM) initiatives
• Troubleshoot complex AD issues and perform root cause analysis
• Mentor engineers and share technical knowledge across the team
• Transition from hands-on engineering early in the engagement toward architecture, modernization, and technical leadership as the engagement progresses

Qualifications

• Required
  • 8+ years of hands-on Active Directory engineering experience
  • Extensive enterprise Active Directory design, implementation, and administration
  • Experience building new AD environments and decommissioning legacy environments
  • Strong understanding of hybrid identity and cloud integrations
  • Ability to lead technical initiatives with minimal supervision
  • Active Directory architecture and engineering
  • Domain and forest design, migrations, and consolidations
  • Domain controller deployment, promotions, and demotions
  • Organizational Units (OUs)
  • Group Policy (GPO)
  • Sites & Services
  • User and computer administration
  • Domain joins
  • AD health, performance, and troubleshooting
  • AWS Managed Microsoft AD / Active Directory integration
  • Microsoft Entra ID (Azure AD)
• Preferred
  • Experience with Infrastructure as Code (IaC)
  • Terraform
  • Ansible
  • GitHub
  • CI/CD pipelines
  • Jenkins
  • DevOps / SecDevOps practices
  • Google Cloud Platform
  • Experience supporting Identity Governance (IGA) or Privileged Access Management (PAM) solutions
  • Microsoft, AWS, CyberArk, or SailPoint certifications