Senior Directory Infrastructure Engineer (onsite)

Serigor Inc; Washington (District of Columbia); On-site; USD 115,000 - 260,000; Full time

Job summary

A leading company is seeking a Senior Directory Infrastructure Engineer to join their Security and Engineering Team in Washington, DC. The engineer will design and maintain enterprise directory services, manage the AD domain lifecycle, and ensure security best practices. Ideal candidates will possess extensive expertise in directory infrastructure and a strong understanding of modern identity approaches.

Qualifications

• Experience with enterprise directory services for at least 6 years.
• 5+ years in AD domain management including lifecycle tasks.
• Advanced PowerShell scripting for directory management.

Responsibilities

• Design, implement, and maintain the enterprise directory services infrastructure.
• Manage the AD domain lifecycle including planning and decommissioning.
• Develop and maintain automation scripts using PowerShell.

Skills

Enterprise directory services (Active Directory, Entra ID, OKTA Universal Directory, LDAP)

AD domain lifecycle management

PowerShell scripting

Microsoft GraphAPI and REST API integration

Identity security best practices

Directory synchronization technologies

Multi-forest and hybrid identity environments

Complex directory architecture solutions

Education

Relevant certifications (Microsoft 365 Certified: Identity and Access Administrator, OKTA Professional)

Tools

Terraform

Ansible

Job description

Get AI-powered advice on this job and more exclusive features.

Direct message the job poster from Serigor Inc

Job Title: Senior Directory Infrastructure Engineer (Onsite)

Location: Washington, DC

Duration: 12 Months+

Job Description:

The Security and Engineering Team manages a variety of functions including endpoint management, Active Directory, VPN, firewalls and security incident response. The team is l seeking experienced Directory Infrastructure Engineers with extensive expertise in enterprise identity infrastructure including Active Directory, Entra ID (formerly Azure AD), OKTA Universal Directory, and LDAP environments. The resource must have a proven track record of designing and managing complex directory services across multiple platforms with particular emphasis on the complete lifecycle management of AD domains. The ideal candidates will bring expertise in modern identity approaches including Just-In-Time access, Privileged Identity Management, and continuous validation patterns that balance security with user experience.

Key Responsibilities

• Design, implement, and maintain enterprise directory services infrastructure
• Manage the complete lifecycle of AD domains including planning, deployment, maintenance, upgrades, and decommissioning
• Lead domain consolidation, migration, and forest restructuring projects
• Develop domain health monitoring and proactive maintenance procedures
• Create and execute disaster recovery plans for directory services
• Develop and maintain automation scripts using PowerShell for directory management tasks
• Interface with directory services using GraphAPI and REST API for custom integrations
• Implement and maintain security best practices for directory services
• Design and manage trust relationships between domains and forests
• Create and maintain documentation for directory architecture and operational procedures
• Provide escalation support for critical directory service incidents

Preferred Qualifications

• Relevant certifications (Microsoft 365 Certified: Identity and Access Administrator, OKTA Professional, etc.)
• Experience with Terraform, Ansible, or similar IaC tools for directory infrastructure
• Knowledge of SAML, OAuth, OIDC, and other modern authentication protocols
• Experience with Group Policy design and management
• Expertise in domain controller sizing, placement, and performance optimization
• Experience with domain functional level upgrades and cross-domain migrations
• Familiarity with CI/CD pipelines for infrastructure automation
• Experience with implementing Zero Trust architecture

Skills:

• Experience with enterprise directory services (Active Directory, Entra ID, OKTA Universal Directory, LDAP) -Required-6-Years
• Experience with AD domain lifecycle management including domain creation, upgrades, and decommissioning-Required-5-Years
• Advanced PowerShell scripting skills with demonstrable experience automating directory management tasks-Required-5-Years
• Proven experience with Microsoft GraphAPI and REST API integration for directory management -Required-5-Years
• Strong understanding of identity security best practices and compliance requirements-Required-5-Years
• Experience with directory synchronization technologies (Azure AD Connect, OKTA integration agents, etc.) -Required-5-Years
• Experience with multi-forest and hybrid identity environments-Required-5-Years
• Ability to design and implement complex directory architecture solutions-Required-5-Years

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Contract

Job function

• Job function

  Information Technology

Referrals increase your chances of interviewing at Serigor Inc by 2x

Sign in to set job alerts for “Infrastructure Engineer” roles.

Fort Meade, MD $115,000.00-$260,000.00 22 hours ago

Annapolis Junction, MD $168,000.00-$240,000.00 1 day ago

Columbia, MD $130,000.00-$180,000.00 1 month ago

Hanover, MD $78,000.00-$250,000.00 18 hours ago

Annapolis Junction, MD $130,000.00-$180,000.00 1 month ago

Maryland, United States $150,000.00-$240,000.00 2 months ago

District of Columbia, United States 3 weeks ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.