AD Specialist

Programmers.io; United States; Presencial; USD 120 000 - 160 000; Tempo integral

Resumo da oferta

Programmers.io seeks an IAM/Identity Engineer with strong on-premises Active Directory expertise to design, implement, and maintain identity infrastructure across domain controllers, GPOs, and hybrid environments. You will ensure secure authentication, regulatory compliance, and seamless AD/ Azure AD synchronization.

The role involves collaboration with security, infrastructure, and architecture teams to optimize identity services using best practices and scalable solutions.

Qualificações

• Experience configuring and troubleshooting on-premises Multi-Domain Active Directory with Domain Controllers, GPOs, and patch management.
• Strong knowledge of AD replication, site topology design, and conflict resolution.
• Proficient in Kerberos authentication, NTLM, and secure credential handling.
• Experience configuring Azure AD Connect for hybrid identity synchronization.
• Install, configure, and maintain Windows Server OS, VMs, and AD infrastructure for high availability and security.
• Knowledge of managing Azure VMs, EC2, and VMware.
• Administer and monitor Defender for Identity (MDI) sensors across domain controllers.
• Design authentication/authorization frameworks for on-prem and cloud identity platforms.
• Collaborate with internal teams and vendors to deliver AD-based identity solutions.
• Develop architecture diagrams and documentation for on-prem identity infrastructure.
• Evaluate and implement AD and SSO solutions focusing on secure, scalable identity management.
• Drive IAM security architecture improvements and AD hardening.
• Work with security, infrastructure, and architecture teams to align identity services with goals and compliance.

Conhecimentos

Active Directory

GPO management

Kerberos authentication

NTLM

Hybrid identity

AD replication

SSO

IAM architecture

Windows Server

Defender for Identity (MDI)

Ferramentas

Azure AD Connect

Quest Active Roles Server

Recovery manager

Semperis

VMware

Descrição da oferta de emprego

Necessary skills:

• Configuration, management, and troubleshooting of on-premises Multi-Domain Active Directory environments, including Domain Controllers, Group Policy Objects (GPOs), and Patch management.
• Strong Knowledge Active Direcotry replication, site topology design, and conflict resolution.
• Proficient knowledge of Kerberos authentication, NTLM, and secure credential handling.
• Configuring and managing Azure AD Connect for secure synchronization between on-premises Active Directory and Azure AD in hybrid identity environments.
• Install, configure, and maintain Windows Server operating systems, virtual machines, and Active Directory infrastructure to ensure high availability and security.
• Knowledge of Managing Virtual machines in Azure VMs, EC2 instances and VMware.
• Manage Azure AD Connect for seamless synchronization between on-prem AD and Azure AD, with a strong focus on maintaining integrity and performance of the on-prem identity source.
• Administer and monitor Microsoft Defender for Identity (MDI) sensors across domain controllers to detect and respond to identity-based threats.
• Design and implement authentication and authorization frameworks primarily for on-premises identity systems, with supplementary support for cloud identity platforms (Azure AD, AWS, GCP) as needed.
• Collaborate with internal teams and vendors to gather requirements and deliver robust Active Directory-based identity solutions, ensuring compatibility with enterprise applications and services.
• Develop and maintain architectural diagrams and documentation for on-prem identity infrastructure, including GPO structures, OU design, and trust relationships.
• Evaluate, design, and implement Active Directory and Single Sign-On (SSO) solutions, focusing on secure, scalable, and cost-effective identity management within the on-prem environment.
• Drive continuous improvement in IAM security architecture, enhancements to on-prem identity systems and introducing best practices for GPO management and AD hardening.
• Work closely with teams across information security, infrastructure, and architecture to ensure alignment of identity services with organizational goals and compliance requirements.

Good to have skills:

• Knowledge of Quest Active Roles Server, Recovery manager and Semperis
• Microsoft Certifications.
• Powershell Scripting