Senior Directory Infrastructure Engineer

ZipRecruiter; Washington (District of Columbia); Remote; USD 120,000 - 160,000; Full time

Job summary

The DNA Group is seeking a Senior Directory Infrastructure Engineer to lead and support complex directory service projects in a hybrid enterprise environment. This role requires deep technical expertise in Active Directory, Entra ID, OKTA, and automation, ideal for a proactive and detail-oriented individual focused on secure design.

Qualifications

• 6+ years of experience in enterprise directory services.
• 5+ years in AD domain lifecycle management.
• Experienced in advanced PowerShell scripting.

Responsibilities

• Lead complex directory service projects in a hybrid enterprise environment.
• Implement complex directory architecture solutions.
• Ensure security best practices in directory management.

Skills

Active Directory

PowerShell scripting

Security best practices

Directory synchronization

Automation

REST API

Education

Bachelor’s degree

Tools

Terraform

Ansible

Job description

Job DescriptionJob Description

Location: Washington, DC

Work Arrangement: Remote

Duration: 12 month contract, with possible extension

W-2 or 1099

No C2C, visa transfers, or sponsorship

The DNA Group is seeking a Senior Directory Infrastructure Engineer to lead and support complex and directory service projects in a multi-forest, hybrid enterprise environment. This is a senior-level role requiring deep technical expertise in Active Directory, Entra ID, OKTA, and infrastructure automation.

Overview Requirements:

• 5+ years of hands-on experience with enterprise directory services (Active Directory, Entra ID, OKTA Universal Directory, LDAP).

• Demonstrated expertise in AD domain lifecycle management including domain creation, upgrades, and decommissioning.

• Advanced PowerShell scripting skills with proven automation of directory management tasks.

• Proven experience with Microsoft GraphAPI and REST API for directory integration and management.

• Experience with directory synchronization tools such as Azure AD Connect and OKTA integration agents.

• Strong understanding of security best practices and compliance standards.

• Hands-on experience in multi-forest and hybrid environments.

• Ability to design and implement complex directory architecture solutions.

Minimum Qualifications:

• Bachelor’s degree.

Qualifications:

• Relevant certifications (e.g., Microsoft 365 Certified: and Access Administrator, OKTA Professional).

• Experience with Terraform, Ansible, or similar Infrastructure-as-Code (IaC) tools for directory infrastructure.

• Knowledge of modern authentication protocols such as SAML, OAuth, and OIDC.

• Experience with Group Policy design and management.

• Expertise in domain controller sizing, placement, and performance optimization.

• Experience with domain functional level upgrades and cross-domain migrations.

• Familiarity with CI/CD pipelines for infrastructure automation.

• Experience implementing Zero Trust architecture.

Required Experience:

• Experience with enterprise directory services (Active Directory, Entra ID, OKTA Universal Directory, LDAP): 6 years (Required)

• Experience with AD domain lifecycle management including domain creation, upgrades, and decommissioning: 5 years (Required)

• Advanced PowerShell scripting skills with demonstrable experience automating directory management tasks: 5 years (Required)

• Proven experience with Microsoft GraphAPI and REST API integration for directory management: 5 years (Required)

• Strong understanding of security best practices and compliance requirements: 5 years (Required)

• Experience with directory synchronization technologies (Azure AD Connect, OKTA integration agents, etc.): 5 years (Required)

• Experience with multi-forest and hybrid environments: 5 years (Required)

• Ability to design and implement complex directory architecture solutions: 5 years (Required)

This Job Is Ideal for Someone Who Is:

• Critical thinker – enjoys analyzing complex and infrastructure challenges.

• Detail-oriented – carefully documents architecture, procedures, and troubleshooting steps.

• Proactive – takes initiative to identify and resolve issues before they impact operations.

• Technically driven – passionate about scripting, automation, and infrastructure as code.

• Security-minded – prioritizes secure design and adheres to best practices.

• Adaptable – comfortable working in hybrid, multi-forest, and evolving environments.

• Strong communicator – explains technical concepts clearly to both technical and non-technical audiences.

• Lifelong learner – stays current with emerging technologies, tools, and certifications.

The DNA Group maintains a drug free workplace and conducts pre-employment drug-testing, where applicable, in accordance with federal, state, and local laws.