IAM & AD Infrastructure Engineer - Hybrid/Remote

C4 Technical Services; Wayzata (MN); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Cargill Identity Security is seeking an AD Infrastructure Engineer to design, implement, and secure Active Directory across on-prem and cloud environments. Hybrid or remote work options are available; you will collaborate with IAM/PAM teams and cloud engineers to extend AD into AWS and other cloud services.

You will troubleshoot health and authentication, manage GPOs, domain controllers, DNS, and replication, and develop runbooks and standards for operations.

Qualifications

• Hands-on experience administering Microsoft Active Directory in large enterprise environments.
• Strong understanding of Active Directory security principles, delegation models, and privileged group management.
• Experience operating Active Directory as part of an integrated Identity and Access Management (IAM) ecosystem.
• Proven troubleshooting skills across authentication, replication, DNS, account lifecycle, and access issues.
• Experience working with AWS and any of its Active Directory implementation options (e.g. Managed AD, self-hosted, etc.)
• Experience integrating Active Directory with identity governance or privileged access management platforms.

Responsibilities

• Design, engineer, operate, and secure Active Directory forests, domains, trusts, organizational units, Group Policy, and domain controllers.
• Partner with IAM and PAM teams to design and support privileged access controls, including administrative group structures and delegated administration models.
• Monitor, troubleshoot, and remediate Active Directory health issues, including authentication failures, replication, DNS dependencies, domain controller availability, and account state incidents.
• Support integrations between Active Directory and identity governance, access request, authentication, and certification platforms.
• Develop and maintain standards, runbooks, and operational documentation for Active Directory services and domain controller operations.
• Participate in change management, incident response, audits, and continuous improvement initiatives aligned to the IAM roadmap and security strategy.

Skills

AD fundamentals

IAM & PAM

AWS AD integration

Tools

Terraform

Ansible

Chef

Job description

Cargill Identity Security is seeking an AD Infrastructure Engineer to design, implement, and secure Active Directory across on-prem and cloud environments. Hybrid or remote work options are available; you will collaborate with IAM/PAM teams and cloud engineers to extend AD into AWS and other cloud services.

You will troubleshoot health and authentication, manage GPOs, domain controllers, DNS, and replication, and develop runbooks and standards for operations.