Identity and Access Management Engineer

Forbes Technical Consulting; Chicago (IL); Hybrid; USD 118,900 - 169,000; Full time

Benefits offered by this job

Collaborative environment

High trust and autonomy

Opportunities for team growth

Job summary

A leading tech consulting firm based in Chicago seeks an IAM Engineer to design and manage Active Directory environments. This full-time hybrid position involves maintaining directory services, performance monitoring, and participation in a 24x7 on-call rotation. The ideal candidate has extensive experience managing Active Directory, strong troubleshooting skills, and is comfortable working in a dynamic security team environment. Collaborative and supportive culture with opportunities for growth and impact.

Qualifications

• Hands-on experience managing and architecting Active Directory environments.
• Experience in installing and architecting Active Directory.
• Strong experience with DNS, DHCP, WINS, DFS, ADFS, PKI, and Group Policy.

Responsibilities

• Maintain Active Directory health, topology, replication, and security baselines.
• Design and implement domain and forest configurations.
• Troubleshoot and manage DNS, DHCP, Group Policy, and trust relationships.

Skills

Active Directory management

DNS

DHCP

Group Policy

Scripting (PowerShell)

Automation

Job description

Schedule: Full-time | Hybrid (minimum 3 days in office per week)

Salary Range: $118,900 – $169,000

We are seeking an IAM Engineer to join our team in Chicago. This role focuses on the design, installation, configuration, and management of Active Directory environments across Windows Desktop and Server systems, including both on‑premises and cloud‑based environments.

This is a highly technical backend role responsible for maintaining the health, performance, and security of directory services across multiple environments.

This is a full‑time position requiring regular attendance and collaboration with the team. While employees are expected to work onsite, this role offers flexibility with a minimum of three days per week in the office.

The team typically works onsite on Tuesdays for team meetings, and it is preferred that Tuesday be one of the onsite days when possible.

Additional hours may occasionally be required during periods of heavy workload.

This role also participates in a 24x7x365 on‑call rotation, alternating primary and secondary coverage with another team member on a bi‑weekly basis.

Key Responsibilities

• Maintain Active Directory health, topology, replication, and security baselines
• Design and implement domain and forest configurations
• Promote and manage Domain Controllers
• Troubleshoot and manage DNS, DHCP, Group Policy, and trust relationships
• Plan and execute directory migrations and disaster recovery testing
• Manage directory services across multiple Windows Server environments (physical and virtual)
• Support automation and process improvement within Active Directory workflows

Required Experience

Candidates must have hands‑on experience managing and architecting Active Directory environments, not just provisioning or access administration.

• Experience installing and architecting Active Directory
• Promoting Domain Controllers and configuring domains and forests
• Managing directory services across multiple Windows Server environments
• Strong experience with DNS, DHCP, WINS, DFS, ADFS, PKI, and Group Policy
• Experience with directory migrations, recovery, security, and capacity management
• Experience improving or automating Active Directory processes

Nice to Have

• Experience across the Microsoft ecosystem, including Windows Server, SCCM, or SharePoint
• Experience managing multiple domains or forests
• Scripting or automation experience (PowerShell)
• CI pipelines for infrastructure changes

Team Structure

This role reports to the IAM Manager and will work alongside a growing team that currently includes:

• 2 IAM Analysts
• 2 Senior IAM Analysts
• 1 Senior IAM Specialist
• 1 IAM Engineer (recently hired)

Additional Information

This position requires a self‑sufficient engineer who can independently manage Active Directory environments while collaborating within a dynamic and evolving security team. The role involves minimal direct interaction with firm clients and focuses primarily on backend infrastructure.

Why Join the Team

• Collaborative environment with high trust and autonomy
• Opportunity to help strengthen and expand a growing security and identity team
• Long‑standing organization with 150+ years of stability and proven resilience