IAM Active Directory Engineer (Remote, US Only)

Braintrust; United States; Remote; USD 96,000 - 103,000; Full time

Job summary

Deloitte is seeking an experienced IAM/Active Directory Engineer to design, deploy, and support secure AD environments in AWS. You will work across AWS Managed Microsoft AD and customer‑managed AD, developing standards and documentation for deployment and operations while resolving client issues.

The role requires strong AD expertise, AWS knowledge, and excellent communication. Open to candidates based anywhere in the United States, with a 40-hour week and competitive hourly pay.

Qualifications

• Strong experience administering Active Directory, including Group Policy and LDAP.
• Experience with AD backup and recovery.
• Hands‑on familiarity with AWS cloud management concepts.
• Experience with AWS Managed Microsoft AD and customer‑managed AD in AWS.
• Working knowledge of DNS and VLANs.
• Understanding of event collection and monitoring options.
• Strong troubleshooting, communication, and technical writing skills.

Responsibilities

• Design, deploy, and test Active Directory environments in AWS—both AWS Managed Microsoft AD and customer-managed deployments.
• Manage and support development AD environments hosted in AWS.
• Create practical standards and documentation for AD deployment and operations, covering: Delegated administration and entitlement management, Automation workflow integration, SIEM and event-collection integration, Required security tooling
• Design and document AD backup and recovery procedures.
• Troubleshoot client issues involving AWS-hosted AD, authentication, and connectivity.
• Produce clear technical documentation and communicate findings to technical and business stakeholders.

Skills

Active Directory

Group Policy

LDAP

Kerberos

NTLM

OU design

User management

Group management

AD backup

AWS cloud management

AWS Managed AD

DNS

VLANs

Monitoring

Troubleshooting

Communication

Technical writing

Job description

• Rate: $70 – $75/hr
• Hours: 40 hours / week
• Experience: 5 - 10 years
• Location: United States + 3 more

Open to candidates based anywhere in the United States.

Work you'll do

We're looking for an experienced IAM / Active Directory Engineer to build and support secure, reliable Active Directory environments in AWS. You'll work across AWS Managed Microsoft AD and customer-managed AD, develop operational standards, and help resolve client issues.

Roles and Responsibilities :

• Design, deploy, and test Active Directory environments in AWS—both AWS Managed Microsoft AD and customer-managed deployments.
• Manage and support development AD environments hosted in AWS.
• Create practical standards and documentation for AD deployment and operations, covering: Delegated administration and entitlement management, Automation workflow integration, SIEM and event-collection integration, Required security tooling
• Design and document AD backup and recovery procedures.
• Troubleshoot client issues involving AWS-hosted AD, authentication, and connectivity.
• Produce clear technical documentation and communicate findings to technical and business stakeholders.

Required Qualification:

• Strong experience administering Active Directory, including Group Policy, LDAP, Kerberos and NTLM, OU design, and user and group management.
• Experience with AD backup and recovery.
• Hands‑on familiarity with AWS cloud management concepts.
• Experience with AWS Managed Microsoft AD and customer‑managed Active Directory hosted in AWS.
• Working knowledge of DNS and VLANs.
• Understanding of event collection and monitoring options.
• Strong troubleshooting, communication, and technical writing skills.

The exact pay rate will vary based on skills, experience, and location and will be determined by the third‑party whose employees provide services to Deloitte.

Candidates interested in applying for this opportunity must be geographically based in the United States and must be legally authorized to work in the United States without the need for employer sponsorship.

Deloitte is not the employer for this role.

This work is contracted through a third‑party whose employees provide services to Deloitte.