Active Directory Tier 0 Engineer :: PKI

STI; Spring (TX); On-site; USD 100,000 - 130,000; Full time

Job summary

STI is seeking candidates for a role that requires extensive knowledge of Active Directory, PKI, and automation tools such as PowerShell and Terraform. The position demands 5+ years of experience in security-focused environments, and candidates will work on critical Tier 0 systems. Strong operational judgment and the ability to work in automated environments are essential.

Applicants must demonstrate proficiency in infrastructure as code and possess the ability to navigate compliance and audit requirements. This is not a learning role; deep expertise is expected.

Qualifications

• 5+ years of experience with Active Directory at an enterprise scale.
• 3–5+ years of PowerShell experience and 2–3+ years of Terraform experience.
• Experience in high-security regulated enterprise environments.

Responsibilities

• Build and maintain automation scripts for operational efficiency.
• Manage pipelines and deploy infrastructure via code.
• Operate under strict security controls.

Skills

Active Directory

AD Certificate Services (ADCS)

Public Key Infrastructure (PKI)

Active Directory Federation Services (ADFS)

PowerShell Automation

Infrastructure as Code (Terraform)

Tier 0 Security Experience

Job description

Ben explicitly stated that he is looking for candidates who can “hit The Ground Running” and suggested ~5 years as a practical minimum to demonstrate true proficiency in:

• Active Directory (enterprise scale)
• Active Directory Certificate Services (ADCS)
• Public Key Infrastructure (PKI)
• Active Directory Federation Services (ADFS)

These technologies are described as the team’s “bread and butter” and are mandatory due to Tier 0 access.

Why This Matters

This is not a learning role. Exxon expects deep operational judgment developed over multiple production environments.

PowerShell Automation & Infrastructure as Code (Terraform)

3–5+ years PowerShell experience | 2–3+ years Terraform experience.

Heavy daily usage for automation and operational efficiency.

Candidates should be independently building and maintaining scripts.

Terraform / IaC

Ben specified 2–3 years as sufficient, provided the candidate can manage pipelines and deploy infrastructure via code.

The role is approximately 50% automation/engineering and 50% operations.

Why This Matters

Candidates who are “GUI-only AD admins” will not succeed. Exxon is modernizing identity through automation.

• Tier 0 Security Experience in Large Enterprise Environments

5+ years in high‑security / regulated enterprise environments.

This role includes Tier 0 / Enterprise Administrator access.

Requires

• Experience operating under strict security controls
• Comfort with audit, compliance, and privileged access models
• Ability to pass an enhanced background check (financial, criminal, global, dark web)
• Large enterprise experience is strongly preferred, especially environments at Exxon’s scale.