Security Operations Domain Administrator (G31)

PACCAR; Washington (District of Columbia); On-site; USD 100,000 - 157,000; Full time

Benefits offered by this job

401k with up to a 5% company match

Fully funded pension plan

Comprehensive paid time off

Tuition reimbursement

Medical, dental, and vision plans

FSA/HSA

Disability programs

Life and AD&D insurance

EAP services

Job summary

PACCAR is seeking a highly skilled Security Operations Domain Administrator to manage on-premises Active Directory and Microsoft Entra (Azure AD) environments for its global directory services. The role requires hands-on experience, on-call readiness, and the ability to operate in fast-changing security landscapes from Renton, WA.

You will design and optimize AD structures, oversee global cloud governance, implement IAM policies, and mentor teammates while supporting incidents and service

Qualifications

• 7+ years of experience as a Systems Engineer in a medium to large enterprise environment with primary duties in Windows domain administration and managing Active Directory infrastructure
• Bachelor's degree
• Deep expertise in installation, operation, and maintenance of highly complex, enterprise-level Active Directory Domain Services in a hybrid on-premises and Microsoft Entra (Azure AD) cloud environment
• Strong proficiency in Advanced PowerShell scripting for automation
• Expertise with IT infrastructure technologies including DNS, DHCP, PKI, and certificate management
• Advanced skills in writing and maintaining PowerShell scripts for automating identity management, compliance reporting, and service configurations across the enterprise
• Excellent problem-solving skills and the ability to troubleshoot complex technical issues
• Strong communication skills and the ability to work effectively with cross-functional teams
• Experience monitoring and working out of an ITSM ticketing system such as ServiceNow
• Availability to work “on-call” 24 hours/day for emergencies, and flexibility in schedule
• Familiarity with domain-related disaster recovery and business continuity planning
• Deep functional understanding of Windows 10/11, Windows Server, Active Directory Domain Services, Group Policy, DNS, PKI, and Federation.
• CISSP, Microsoft role-based Expert certification, or equivalent industry certification strongly desired

Responsibilities

• Designing and managing complex Microsoft Active Directory structures, including forests, domains, trusts, and replication topology.
• Oversees global cloud governance by managing the entire Microsoft 365 and Azure tenant with full Global Admin privileges over users, groups, licenses, and service settings.
• Implements advanced security and Identity and Access Management (IAM) policies such as MFA, Conditional Access, and Privileged Identity Management (PIM).
• Leads infrastructure modernization through Security and Security Operations projects, domain restructuring, and PowerShell automation
• Provides Tier 3 support, subject matter expertise, and team mentorship for complex authentication, synchronization, and group policy issues.
• Responsible for daily domain and tenant administration tasks, troubleshooting complex issues, and will participate in an on-call rotation.

Skills

PowerShell scripting

Active Directory administration

Windows Server Administration

IAM / MFA / CA

Cross-functional collaboration

Problem solving

Education

Bachelor's degree

Tools

Azure AD / Entra

PowerShell

ServiceNow

DNS/DHCP/PKI

Active Directory Domain Services

Job description

We are seeking a highly skilled Security Operations Domain Administrator with expertise in managing and optimizing on-premises Active Directory and Microsoft 365 Entra environments and ensuring the stability, security, and scalability of PACCAR’s large-scale global directory services infrastructure. This role requires proven hands-on experience in managing and securing enterprise-level organizations. Work is done both in team and individual contributor roles. The pace of work is fast and can change quickly based on current security risks. Thus, the qualified individual must be flexible and able to manage multiple tasks. They must also be willing and eager to learn new and emerging technologies and skills, both while at work and on their own time. The analyst will be required to be on call according to a set schedule and be willing to quickly respond to security and operational incidents when called upon.

This position is located in Renton, WA.

Job Functions/Responsibilities

• Designing and managing complex Microsoft Active Directory structures, including forests, domains, trusts, and replication topology.
• Oversees global cloud governance by managing the entire Microsoft 365 and Azure tenant with full Global Admin privileges over users, groups, licenses, and service settings.
• Implements advanced security and Identity and Access Management (IAM) policies such as MFA, Conditional Access, and Privileged Identity Management (PIM).
• Leads infrastructure modernization through Security and Security Operations projects, domain restructuring, and PowerShell automation
• Provides Tier 3 support, subject matter expertise, and team mentorship for complex authentication, synchronization, and group policy issues.
• Responsible for daily domain and tenant administration tasks, troubleshooting complex issues, and will participate in an on-call rotation.

Qualifications

• 7+ years of experience as a Systems Engineer in a medium to large enterprise environment with primary duties in Windows domain administration and managing Active Directory infrastructure
• Bachelor's degree
• Deep expertise in installation, operation, and maintenance of highly complex, enterprise-level Active Directory Domain Services in a hybrid on-premises and Microsoft Entra (Azure AD) cloud environment
• Strong proficiency in Advanced PowerShell scripting for automation
• Expertise with IT infrastructure technologies including DNS, DHCP, PKI, and certificate management
• Advanced skills in writing and maintaining PowerShell scripts for automating identity management, compliance reporting, and service configurations across the enterprise
• Excellent problem-solving skills and the ability to troubleshoot complex technical issues
• Strong communication skills and the ability to work effectively with cross-functional teams
• Experience monitoring and working out of an ITSM ticketing system such as ServiceNow
• Availability to work “on-call” 24 hours/day for emergencies, and flexibility in schedule
• Familiarity with domain-related disaster recovery and business continuity planning
• Deep functional understanding of Windows 10/11, Windows Server, Active Directory Domain Services, Group Policy, DNS, PKI, and Federation.
• CISSP, Microsoft role-based Expert certification, or equivalent industry certification strongly desired

Company Information

PACCAR is a Fortune 500 company established in 1905. PACCAR Inc is recognized as a global leader in the commercial vehicle, financial, and customer service fields with internationally recognized brands such as Kenworth, Peterbilt, and DAF trucks. PACCAR is a global technology leader in the design, manufacture and customer support of premium light-, medium- and heavy-duty trucks under the Kenworth, Peterbilt and DAF nameplates and also provides customized financial services, information technology and truck parts related to its principal business.

Division Information

PACCAR’s Information Technology Division (ITD), located in Renton, WA utilizes cutting-edge technology to provide systems development, consulting, voice and data communications services to the entire Corporation, which has high visibility in the technology sector.

PACCAR Benefits

• 401k with up to a 5% company match
• Fully funded pension plan that provides monthly benefits after retirement
• Comprehensive paid time off - minimum of 10 paid vacation days (additional days are provided with additional seniority/years of service), 12 paid holidays, and sick time
• Tuition reimbursement for continued education
• Medical, dental, and vision plans for you and your family
• Flexible spending accounts (FSA) and health savings account (HSA)
• Paid short-and long-term disability programs
• Life and accidental death and dismemberment insurance
• EAP services including wellness plans, estate planning, financial counseling and more

Additional Job Board Information

PACCAR is an Equal Opportunity Employer/Protected Veteran/Disability. At PACCAR, we value talent and promote growth and development. We carefully consider numerous compensation factors, including your education, training, or experience. Applicants and employees for this position will not be sponsored for work authorization, including, but not limited to H-1B visas, now or in the future. The salary range for the Senior Domain Administrator is $100,100 - $156,600 annually. Additionally, this role is eligible for a full range of benefit options listed above. This position is also eligible for a holiday gift.