Active Directory Tier 0 Engineer : PKI

STI; Spring (TX); On-site; USD 100,000 - 130,000; Full time

Job summary

STI in Spring, Texas, seeks a qualified candidate with extensive experience in Active Directory and strong PowerShell skills for an essential role focusing on automation and operations. Candidates must possess 5+ years of expertise in high-security environments, as they will handle Tier 0 Enterprise Administrator access.

The chosen individual will be required to operate under strict security guidelines, ensuring excellence in compliance and privileged access. This is a pivotal role that emphasizes modernizing identity management through automation.

Qualifications

• 5+ years of experience in Active Directory and related services.
• 3-5 years of PowerShell experience for automation.
• 2-3 years of experience with Terraform/IaC.
• 5+ years in high-security environments with Tier 0 access.

Responsibilities

• Independently build and maintain PowerShell scripts for automation.
• Manage pipelines and deploy infrastructure via Terraform.
• Operate with strict compliance and security controls.

Skills

Active Directory (enterprise scale)

Active Directory Certificate Services (ADCS)

Public Key Infrastructure (PKI)

Active Directory Federation Services (ADFS)

PowerShell

Terraform / Infrastructure as Code (IaC)

Tier 0 security experience

Operating under strict security controls

Job description

Key Experience Requirements

Ben explicitly stated he is looking for candidates who can “hit the ground running” and suggested ~5 years as a practical minimum to demonstrate true proficiency in:

• Active Directory (enterprise scale)
• Active Directory Certificate Services (ADCS)
• Public Key Infrastructure (PKI)
• Active Directory Federation Services (ADFS)

These technologies are described as the team’s “bread and butter” and are mandatory due to Tier 0 access.

Why this matters: This is not a learning role. Exxon expects deep operational judgment developed over multiple production environments.

PowerShell Automation & Infrastructure as Code (Terraform)

3–5+ years PowerShell | 2–3+ years Terraform

PowerShell: Heavy daily usage for automation and operational efficiency. Candidates should be independently building and maintaining scripts.

Terraform / IaC: Ben specified 2–3 years as sufficient, provided the candidate can manage pipelines and deploy infrastructure via code.

The role is approximately 50% automation/engineering and 50% operations.

Why this matters: Candidates who are “GUI‑only AD admins” will not succeed. Exxon is modernizing identity through automation.

Tier 0 Security Experience in Large Enterprise Environments

5+ years in high‑security / regulated enterprise environments.

This role includes Tier 0 / Enterprise Administrator access. Requires:

• Experience operating under strict security controls
• Comfort with audit, compliance, and privileged access models
• Ability to pass an enhanced background check (financial, criminal, global, dark web)

Large enterprise experience is strongly preferred, especially environments at Exxon’s scale.