IAM Consultant

Performix; Atlanta (GA); On-site; USD 120,000 - 180,000; Full time

Job summary

Performix is seeking a Senior Professional, Identity & Access Management to design, implement, and oversee Active Directory and related IAM services. The role focuses on securing access, reducing risk, and ensuring compliance across AD, AWS, and cloud integrations.

The ideal candidate brings deep AD experience in large enterprises, plus hands-on work with AWS integration and IAM governance to modernize our identity ecosystem.

Qualifications

• Hands-on experience administering Microsoft Active Directory in large, complex enterprises.
• Strong AD security principles, delegation models, and privileged group management.
• Experience operating Active Directory as part of an integrated IAM ecosystem.
• Proven troubleshooting across authentication, replication, DNS, account lifecycle, and access issues.
• Experience with AWS AD implementations (Managed/self-hosted).
• Experience integrating Active Directory with identity governance or PAM platforms.

Responsibilities

• Design, engineer, operate, and secure Active Directory forests, domains, trusts, OUs, GPOs, and domain controllers.
• Collaborate with IAM/PAM teams to design privileged access controls and delegated admin models.
• Monitor, troubleshoot, and remediate AD health issues including auth failures and replication.
• Support integrations between AD and identity governance, access requests, authentication, and certification platforms.
• Develop standards, runbooks, and docs for AD services and DC operations.
• Participate in change mgmt, audits, and IAM roadmap initiatives.
• Develop integration patterns with AWS to facilitate AD authentication via LDAP or Kerberos.
• Encourage app developers to leverage Kerberos over LDAP.

Skills

Active Directory

IAM

AWS

Kerberos

LDAP

DNS

Troubleshooting

Job description

The Senior Professional, Identity & Access Management job designs, implements and oversees identity and access management systems within the organization. With minimal supervision, this job ensures secure access to resources, minimises risk exposure, and maintains compliance with security standards.

The client’s Identity Security team is looking for an IAM professional with extensive Active Directory experience to improve our AD implementation and modernize it with extension into our Amazon Web Services (AWS) and broader cloud environment.

Responsibilities include but are not limited to:

• Design, engineer, operate, and secure Active Directory forests, domains, trusts, organizational units, Group Policy, and domain controllers.
• Partner with IAM and PAM teams to design and support privileged access controls, including administrative group structures and delegated administration models.
• Monitor, troubleshoot, and remediate Active Directory health issues, including authentication failures, replication, DNS dependencies, domain controller availability, and account state incidents.
• Support integrations between Active Directory and identity governance, access request, authentication, and certification platforms.
• Develop and maintain standards, runbooks, and operational documentation for Active Directory services and domain controller operations.
• Participate in change management, incident response, audits, and continuous improvement initiatives aligned to the IAM roadmap and security strategy.
• Develop integration patterns with AWS to facilitate authentication with AD using LDAP or Kerberos
• Develop application development patterns encouraging app devs to leverage Kerberos over just LDAP

Required Qualifications include:

• Hands‑on experience administering Microsoft Active Directory in large, complex enterprise environments.
• Strong understanding of Active Directory security principles, delegation models, and privileged group management.
• Experience operating Active Directory as part of an integrated Identity and Access Management (IAM) ecosystem.
• Proven troubleshooting skills across authentication, replication, DNS, account lifecycle, and access issues.
• Experience working with AWS and any of its Active Directory implementation options (e.g. Managed AD, self-hosted, etc.)
• Experience integrating Active Directory with identity governance or privileged access management platforms.