IT Systems Directory Services and Cloud Identity Specialist Senior

Modine Manufacturing Company; Northern (KY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Maternity leave

Paid parental leave

Job summary

Modine Manufacturing Company seeks an experienced IT Systems Directory Services and Cloud Identity Specialist Senior to lead hybrid identity architecture across AD DS and Entra ID. The role focuses on SSO, identity governance, and automated workflows, driving secure modernization across Azure subscriptions and M365 services.

The position requires hands-on expertise, strong scripting skills, and the ability to mentor teams while partnering with security, IT operations, and engineering.

Qualifications

• 8+ years of progressive engineering experience in enterprise Windows Server, Active Directory, and Microsoft Cloud / Identity ecosystems.
• Directory & Cloud Identity: Deep expertise in AD DS, GPO, DNS/DHCP, Kerberos/NTLM, and Microsoft Entra ID (Azure AD).
• Scripting & Automation: Advanced proficiency in PowerShell scripting (Graph PowerShell SDK, REST APIs, and background job handling) for large-scale enterprise administration.
• Federation & IAM: Hands-on experience configuring SSO, SAML, OAuth, Conditional Access, PIM, and SCIM-based provisioning.
• Cloud Platform Governance: Administration of Microsoft Azure subscriptions, IAM/RBAC, Resource Governance, Networking, and Log Analytics.

Responsibilities

• Design, implement, and maintain hybrid identity architecture (AD DS, Azure AD Connect/Entra Sync).
• Administer SSO, SAML/OIDC, and enterprise federation with SaaS apps.
• Automate user lifecycle workflows (JML) and RBAC governance.
• Enforce Zero Trust security posture with CA policies, MFA, and passwordless methods.
• Manage Azure subscriptions, VNets, NSGs, and private endpoints.

Skills

PowerShell

Azure AD

Graph API

Conditional Access

Education

Bachelor's degree

Tools

Azure CLI

Terraform

AD CS

GitHub Actions

Job description

IT Systems Directory Services and Cloud Identity Specialist Senior

Job Posting Location: Remote, USA. Posting Start Date: 9/25/26. Req Id: 10315. Required Travel: 0 - 10%. Remote, Onsite or Hybrid?: Onsite.

For more than 100 years, Modine has solved the toughest thermal management challenges for mission-critical applications. Our purpose of Engineering a Cleaner, Healthier World means we are always evolving our portfolio of technologies to provide the latest heating, cooling, and ventilation solutions. Through the hard work of more than 11,000 employees worldwide, our Climate Solutions and Performance Technologies segments advance our purpose with systems that improve air quality, reduce energy and water consumption, lower harmful emissions, enable cleaner running vehicles, and use environmentally friendly refrigerants. Modine is a global company headquartered in Racine, Wisconsin (U.S.), with operations in North America, South America, Europe, and Asia. For more information about Modine, visit modine.com.

Position Description

The Senior Directory Services & Cloud Identity Specialist serves as a senior-level technical authority and hands-on subject matter expert responsible for the architecture, security, lifecycle governance, and operational resilience of enterprise identity ecosystems and cloud infrastructure.

This role requires a proactive, highly autonomous go-getter who thrives in dynamic environments, takes immediate ownership of complex challenges, and actively identifies architectural gaps before they impact the business. Bridging hybrid Active Directory Domain Services (AD DS) and Microsoft Entra ID, this engineer will lead identity modernization, automate critical operational workflows via PowerShell and DevOps practices, manage Azure subscriptions and core SaaS platforms, and serve as the tier-3/4 escalation authority across enterprise collaboration and infrastructure services.

Key Responsibilities

• Hybrid Identity Architecture: Design, implement, optimize, and maintain enterprise Active Directory (AD DS), Azure AD Connect / Entra Cloud Sync, and Microsoft Entra ID across hybrid multi-domain and multi-tenant environments.
• Access Federation & SSO: Architect and administer Single Sign-On (SSO), SAML 2.0 / OIDC integrations, Entra Application Proxy, and enterprise federation with third-party SaaS and line-of-business applications.
• Identity Governance & Lifecycle: Implement and maintain automated user lifecycle provisioning (JML: Joiner/Mover/Leaver workflows), Entra ID Governance, Access Reviews, Privileged Identity Management (PIM), and dynamic role-based access control (RBAC).
• Zero Trust & Security Posture: Define and enforce Conditional Access Policies, Multi-Factor Authentication (MFA), passwordless authentication mechanisms, and Active Directory Fine-Grained Password Policies to maintain a robust Zero Trust security posture.
• Azure Subscription & Resource Governance: Administer enterprise Azure subscriptions, management groups, Resource Groups, Azure Policy, cost optimisation, and virtual networking (VNets, NSGs, private endpoints).
• SaaS Administration & Collaboration Support: Oversee tenant-level configurations, cross-tenant synchronization, security baselines, and escalated troubleshooting for Microsoft 365 services—with deep administrative focus on Microsoft Teams and SharePoint (Online & Hybrid/On-Premises).
• Public Key Infrastructure (PKI): Oversee Microsoft Certificate Authority (AD CS), certificate lifecycle management, and secure enrollment services (NDES/SCEP).
• Advanced PowerShell Automation: Build, maintain, and document production-grade PowerShell modules, automation runbooks, and API-driven scripts (Graph API, Azure CLI) to eliminate manual administration tasks and automate cross-platform syncs.
• Continuous Improvement & Problem Discovery: Proactively identify legacy technical debt, performance bottlenecks, and security vulnerabilities across directory and cloud services without waiting for task assignment.
• Infrastructure as Code (IaC): Drive modern automation practices utilizing ARM/Bicep templates or Terraform for repeatable Azure resource deployments.
• Tier 3/4 Escalation Authority: Serve as the definitive escalation tier for complex directory, authentication, sync, and M365 infrastructure issues, interfacing directly with Helpdesk, Local Tech Support, Infosec, and engineering teams.
• Vendor & Project Leadership: Partner with external technology vendors, lead enterprise migration and divestiture initiatives, and author detailed technical documentation, architectural diagrams, and standard operating procedures (SOPs).
• Technical Mentorship: Guide and upskill junior system administrators, desktop engineers, and support personnel.

Required Education & Qualifications

• Experience: 8+ years of progressive engineering experience in enterprise Windows Server, Active Directory, and Microsoft Cloud / Identity ecosystems.
• Directory & Cloud Identity: Deep, proven expertise in Active Directory Domain Services (AD DS), Group Policy (GPO), DNS/DHCP, Kerberos/NTLM authentication, and Microsoft Entra ID (Azure AD).
• Scripting & Automation: Advanced proficiency in PowerShell scripting (including Graph PowerShell SDK, REST APIs, and background job handling) for large-scale enterprise administration.
• Federation & IAM: Extensive hands-on experience configuring SSO, SAML, OAuth, Conditional Access, PIM, and SCIM-based identity provisioning.
• Cloud Platform Governance: Practical administration experience with Microsoft Azure (Subscriptions, IAM/RBAC, Resource Governance, Networking, and Log Analytics/Sentinel).
• Mindset & Initiative: Self-directed problem solver with a proven track record of wearing multiple hats, driving unassigned initiatives to completion, and navigating ambiguity in fast-paced enterprise environments.
• Communication & Interpersonal Skills: Excellent written and verbal communication skills with the ability to articulate complex technical architectures to leadership and mentor operational support teams.

Preferred / "Nice to Have" Qualifications

• Multi-Cloud & GCP Experience:
• • Hands-on administration or foundational experience with Google Cloud Platform (GCP), including Google Cloud IAM, Cloud Identity, and Workload Identity Federation with Microsoft Entra ID / Active Directory.
  • Familiarity with GCP Zero Trust access controls, Cloud Identity-Aware Proxy (IAP), and hybrid multi-cloud networking.
• Enterprise Collaboration: Strong operational administration and migration experience with Microsoft Teams and SharePoint Online / Server (permissions, site architectures, and external sharing policies).
• Migration & Coexistence Tools: Experience utilizing enterprise identity/mailbox migration platforms (e.g., Quest On Demand Migration / Migration Manager, BitTitan, or native cross-tenant sync).
• Hybrid Messaging: Experience supporting hybrid Microsoft Exchange environments (Exchange Online and Exchange Server).
• Industry Certifications (Highly Desirable):
• • Microsoft Certified: Identity and Access Administrator Associate (SC-300)
  • Microsoft Certified: Azure Administrator Associate (AZ-104)
  • Microsoft Certified: Cybersecurity Architect Expert (SC-100) or Azure Solutions Architect Expert (AZ-305)

Education Requirements

• Bachelor’s degree in Information Technology, Computer Science, Computer Engineering, or a related technical discipline (or equivalent relevant professional experience).

Why Choose Modine?

Health & Well-being:

• Day One
• • Competitive health, dental & vision insurance coverage
  • Employee Assistance Program
• After 90 days of continuous employment
• • Maternity Leave (12 weeks at 100% pay)
  • 8 weeks of short term disability leave paid at 100%
  • 4 weeks of paid parental leave