Principal IAM/AD Engineer -- DAVDC5693168

Compunnel Inc.; Natick (MA); À distance; USD 110 000 - 140 000; Temps partiel

Résumé du poste

A leading IT service provider in Natick, MA is seeking a Senior IAM / AD Engineer. The role involves managing Active Directory, implementing Entra ID capabilities, and providing expertise in modern authentication and ITDR processes. Candidates should have over 10 years of experience, particularly with enterprise-level identity and access management. This full-time position offers a competitive salary and the opportunity to lead identity operations for a dynamic organization.

Qualifications

• 10+ years enterprise experience required.
• Hands-on experience with Microsoft Entra ID is preferred.
• Experience operating Azure AD Connect or Cloud Sync is a plus.

Responsabilités

• Operate and maintain on-premises Active Directory.
• Implement and manage Entra ID capabilities.
• Monitor, troubleshoot, and optimize directory synchronization.

Connaissances

Active Directory

MS EntraID

PowerShell

Enterprise Experience

Formation

Bachelor's degree

Description du poste

Direct message the job poster from Compunnel Inc.

Senior Technical Recruiter @ Compunnel Inc.

Job Description:

Are you an IAM / AD Engineer with Architect-level knowledge? Our Natick, MA client is looking to bring on a Senior IAM / AD Engineer to help deliver hardened directory services across the organization. This will include modern authentication, ITDR, and Zero Trust controls. This person will provide SME guidance as well as hands on duties such as operating on-prem AD, patching / replication / monitoring / and more. This is a full-time, direct hire position.

Must haves

• 10+ years enterprise Experience
• Active Directory
• MS EntraID
• PowerShell

Client JD

Do you design secure, resilient Active Directory at scale and enjoy automating identity operations? Join our Security Operations IAM team responsible for enterprise identity foundations across on‑prem Active Directory and Microsoft Entra ID. We partner with Security Engineering, IT, and Compliance to deliver hardened directory services, modern authentication, ITDR capabilities and Zero Trust controls that enable the business.

Responsibilities

• Operate and maintain on‑premises Active Directory: domain controller health, patching, promotion/demotion, replication, sites/subnets, time services, SYSVOL/GPO health, and capacity monitoring.
• Implement and manage Entra ID capabilities: Conditional Access, Identity Protection risk policies, PIM, and app registrations/service principals.
• Monitor, troubleshoot, and optimize directory synchronization and identity lifecycle flows.
• Partner with our SOC to drive a successful TDR program. Help build and tune detections to identify threats such as DCSync, Golden/Silver Ticket, Kerberoasting, pass‑the‑hash/ticket, risky sign‑ins, and impossible travel.
• Harden AD and Entra ID: apply baselines, admin tiering, PAW usage, secure delegation, privileged workflow controls, regular access reviews, and identity threat hunting.
• Automate identity operations and ITDR tasks with PowerShell and APIs (Graph/Entra): alert enrichment, response runbooks, access certifications, reporting, and drift remediation.
• Lead complex troubleshooting and incident response for identity (Kerberos/NTLM, replication, DCSync/Golden/Silver Ticket detections, Conditional Access failures); drive root cause and preventive actions.
• Produce runbooks, standards, and change records; mentor team members and collaborate with stakeholders to align IAM operations with business needs.

Minimum Qualifications

A bachelor's degree and 10 years of professional work experience (or equivalent experience) is required.

Additional Qualifications

A successful candidate for this role will have a combination of some or all of the following skills/experience:

• 7+ years in enterprise Active Directory operations and hardening including DC lifecycle management, sites/services, replication, BCDR, and observability.
• Hands‑on experience with Microsoft Entra ID: Conditional Access, MFA, Identity Protection, PIM, app registration and service principal governance.
• Experience operating Azure AD Connect or Cloud Sync in hybrid identity environments.
• Identity Governance and Administration experience for provisioning, role/entitlement models, and access certifications.
• Proficiency with PowerShell, Python and Microsoft Graph/Entra APIs for automation.
• Experience with privileged access models and administrative tiering.
• Ability to support after‑hours maintenance and incident response as needed.
• SSO/Federation: SAML/OIDC/OAuth; SCIM provisioning to SaaS apps.
• AD security: trusts, LDAP/LDAPS, constrained delegation, GPO hardening.
• PKI and certificates: AD CS, CRL/OCSP, auto enrollment, renewal automation for workloads and service principals/certs.
• Backup/Recovery: authoritative restore, forest recovery planning and drills.
• IaC/automation: DSC, GPO as Code, Git workflows; CI/CD familiarity for scripts/policies.
• Compliance familiarity: CMMC, NIST CSF/800‑53/171, ISO 27001

Seniority level

Director

Employment type

Contract

Job function

Finance and Information Technology

Industries

IT Services and IT Consulting and Financial Services

Referrals increase your chances of interviewing at Compunnel Inc. by 2x

Get notified about new Active Directory Specialist jobs in Natick, MA.