Lead Active Directory & IAM Reliability Engineer

Coupa Software; Los Angeles (CA); On-site; USD 125,000 - 174,000; Full time

Benefits offered by this job

Global Wellness Days

Birthday Time Off

Volunteer Time Off (VTO)

Employee Assistance Program (EAP)

Travel Protection

Job summary

Coupa Software is seeking a Lead Site Reliability Engineer–Identity to shape our global Directory Services strategy within the Cloud Operations team. You will define the technical roadmap for AD, IAM, and security, balancing on‑prem and cloud workloads.

You will drive GitOps for infrastructure, mentor engineering teams, and enforce least‑privilege access while delivering reliable identity services and seamless user experiences across Coupa's enterprise network.

Qualifications

• Deep expertise in AD DS including DNS, DHCP, Certificate Services, and GPO management.
• Experience with cloud-directory services (AWS Directory Service, Azure AD/Entra ID) preferred.
• IGA processes, automated user lifecycle management, RBAC/ABAC, compliance reporting.
• GitOps workflows for infrastructure with Terraform, Chef, Ansible, or DSC.
• SIEM/log analysis for troubleshooting and health monitoring.
• 7+ years IT, Systems Eng, DevOps, or Identity Engineering; 2+ years in leadership.
• Scripting: PowerShell, Python, or similar.
• Experience building identity solutions on AWS, Azure, GCP.
• Strong cross-team communication.

Responsibilities

• Architect and maintain an Identity-as-Code ecosystem with CI/CD for AD.
• Lead design and governance of global identity infrastructure across cloud and on‑prem.
• Act as escalation point for AD incidents with root-cause analysis.
• Implement observability and alerting for directory services (New Relic and more).
• Define AD delegation and least-privilege administration model.
• Onboard applications to identity platforms like Okta.
• Mentor teams on security best practices and lifecycle management.
• Publish standards and best practices for identity architecture and security.

Skills

Active Directory Domain Services (AD /

DNS

DHCP

Certificate Services

GPO Management

Education

Bachelor’s Degree in Computer Science or Computer Engineering

Tools

Terraform

Chef

Ansible

PowerShell DSC

Job description

Coupa Software is seeking a Lead Site Reliability Engineer–Identity to shape our global Directory Services strategy within the Cloud Operations team. You will define the technical roadmap for AD, IAM, and security, balancing on‑prem and cloud workloads.

You will drive GitOps for infrastructure, mentor engineering teams, and enforce least‑privilege access while delivering reliable identity services and seamless user experiences across Coupa's enterprise network.