Senior Directory Services Engineer (Active Directory Expert)

Bizzstrong; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Bizzstrong is seeking a Senior/Principal Directory Services Engineer to serve as the top technical authority for Active Directory and core identity infrastructure in a large enterprise.

You will lead the design, modernization, security, and lifecycle management of directory services, ensuring reliability, scalability, and regulatory alignment across multidomain environments.

Qualifications

• 10+ years of hands-on experience with Active Directory in large, complex enterprise environments.
• Expert-level knowledge of AD architecture, domain controllers, replication, GPOs, DNS/DHCP, trusts, and security models.
• Strong experience with PowerShell scripting and automation.
• Deep understanding of identity security, privileged access management, and Zero Trust principles.
• Proven ability to lead large-scale directory upgrades, migrations, and remediation efforts.

Responsibilities

• Serve as the principal expert for Active Directory architecture, design, and operations across multidomain, multiforest environments.
• Lead modernization initiatives including domain consolidation, schema upgrades, AD hardening, and identity lifecycle automation.
• Architect and maintain Group Policy, DNS, DHCP, replication, trusts, and domain controller strategy.
• Oversee AD security posture: privileged access, tiering models, delegation, auditing, and Zero Trust alignment.
• Drive rootcause analysis and resolution of complex directory issues impacting authentication, authorization, and enterprise applications.
• Develop standards, runbooks, and automation using PowerShell and modern configuration tools.
• Collaborate with crossfunctional teams (Security, Cloud, Infrastructure, Applications) to ensure directory stability and performance.
• Evaluate and optimize vendor, contractor, and staffing partnerships supporting directory services.

Skills

Active Directory

PowerShell

Group Policy

DNS/DHCP

AD architecture

Zero Trust

Privileged access

domain controllers

scripting/automation

Tools

Configuration tools

Job description

We are actively seeking qualified candidates for the following position. The selected person will work directly with our Client that is based in US and is an industry leader in their area of operations. Our client is rated among the top 100 best places to work for by Fortune.

Role Overview

The Senior/Principal Directory Services Engineer is the organizations top technical authority for Active Directory and core identity infrastructure. This role leads the design, modernization, security, and lifecycle management of enterprise directory services, ensuring reliability, scalability, and alignment with business and regulatory requirements.

Key Responsibilities

• Serve as the principal expert for Active Directory architecture, design, and operations across multidomain, multiforest environments.
• Lead modernization initiatives including domain consolidation, schema upgrades, AD hardening, and identity lifecycle automation.
• Architect and maintain Group Policy, DNS, DHCP, replication, trusts, and domain controller strategy.
• Oversee AD security posture: privileged access, tiering models, delegation, auditing, and Zero Trust alignment.
• Drive rootcause analysis and resolution of complex directory issues impacting authentication, authorization, and enterprise applications.
• Develop standards, runbooks, and automation using PowerShell and modern configuration tools.
• Collaborate with crossfunctional teams (Security, Cloud, Infrastructure, Applications) to ensure directory stability and performance.
• Evaluate and optimize vendor, contractor, and staffing partnerships supporting directory services.

Required Experience

• 10+ years of handson experience with Active Directory in large, complex enterprise environments.
• Expertlevel knowledge of AD architecture, domain controllers, replication, GPOs, DNS/DHCP, trusts, and security models.
• Strong experience with PowerShell scripting and automation.
• Deep understanding of identity security, privileged access management, and Zero Trust principles.
• Proven ability to lead largescale directory upgrades, migrations, and remediation efforts.

Preferred Qualifications

• Background in AD forest recovery, DR planning, and cyberresiliency hardening.
• Microsoft certifications (MS102, AZ104, SC300) or equivalent is a plus