Active Directory Tier 0 Engineer :: PKI

STI; Spring (TX); On-site; USD 120,000 - 170,000; Full time

Job summary

Exxon is seeking an experienced IT security engineer to harden and automate identity infrastructure. The role blends automation and operations ~50/50, focusing on AD, PKI, and ADFS at enterprise scale with Tier 0 access.

Candidates should have 5+ years in high-security environments and hands-on experience with PowerShell and Terraform to drive automation. You will operate under strict controls, support audit/compliance, and deploy infrastructure via code.

Qualifications

• 5+ years PowerShell experience in production environments.
• 2–3+ years Terraform experience for IaC and pipelines.
• Deep operational judgment in high-security enterprise environments.

Responsibilities

• Automate and maintain scripts using PowerShell.
• Deploy and manage infrastructure via Terraform (IaC).
• Operate in a 50/50 automation/operations split within secure environments.
• Adhere to audit, compliance, and privileged access requirements.

Skills

Active Directory

Active Directory Certificate Services

Public Key Infrastructure

Active Directory Federation Services

5+ years PowerShell

2–3+ years Terraform

Tier 0 Security Experience

Tools

PowerShell

Terraform

Job description

Ben Explicitly Stated He Is Looking For Candidates Who Can “hit The Ground Running” And Suggested ~5 Years As a Practical Minimum To Demonstrate True Proficiency In:

• Active Directory (enterprise scale)
• Active Directory Certificate Services (ADCS)
• Public Key Infrastructure (PKI)
• Active Directory Federation Services (ADFS)

These technologies are described as the team’s “bread and butter” and are mandatory due to Tier 0 access.

Why This Matters:

This is not a learning role. Exxon expects deep operational judgment developed over multiple production environments.

• PowerShell & Infrastructure as Code (Terraform)

3–5+ years PowerShell | 2–3+ years Terraform

PowerShell:

Heavy daily usage for automation and operational efficiency

Candidates should be independently building and maintaining scripts

Terraform / IaC:

• Manage pipelines
• Deploy infrastructure via code

The role is approximately 50% automation/engineering and 50% operations.

Why This Matters:

Candidates who are “GUI-only AD admins” will not succeed. Exxon is modernizing identity through automation.

• Tier 0 Security Experience in Large Enterprise Environments
• 5+ years in high‑security / regulated enterprise environments

This role includes Tier 0 / Enterprise Administrator access

Requires:

• Experience operating under strict security controls
• Comfort with audit, compliance, and privileged access models
• Ability to pass an enhanced background check (financial, criminal, global, dark web)
• Large enterprise experience is strongly preferred, especially environments at Exxon’s scale.