Senior IAM & AWS Active Directory Engineer

Braintrust; United States; Remote; USD 96,000 - 103,000; Full time

Job summary

Deloitte is seeking an experienced IAM/Active Directory Engineer to design, deploy, and support secure AD environments in AWS. You will work across AWS Managed Microsoft AD and customer‑managed AD, developing standards and documentation for deployment and operations while resolving client issues.

The role requires strong AD expertise, AWS knowledge, and excellent communication. Open to candidates based anywhere in the United States, with a 40-hour week and competitive hourly pay.

Qualifications

• Strong experience administering Active Directory, including Group Policy and LDAP.
• Experience with AD backup and recovery.
• Hands‑on familiarity with AWS cloud management concepts.
• Experience with AWS Managed Microsoft AD and customer‑managed AD in AWS.
• Working knowledge of DNS and VLANs.
• Understanding of event collection and monitoring options.
• Strong troubleshooting, communication, and technical writing skills.

Responsibilities

• Design, deploy, and test Active Directory environments in AWS—both AWS Managed Microsoft AD and customer-managed deployments.
• Manage and support development AD environments hosted in AWS.
• Create practical standards and documentation for AD deployment and operations, covering: Delegated administration and entitlement management, Automation workflow integration, SIEM and event-collection integration, Required security tooling
• Design and document AD backup and recovery procedures.
• Troubleshoot client issues involving AWS-hosted AD, authentication, and connectivity.
• Produce clear technical documentation and communicate findings to technical and business stakeholders.

Skills

Active Directory

Group Policy

LDAP

Kerberos

NTLM

OU design

User management

Group management

AD backup

AWS cloud management

AWS Managed AD

DNS

VLANs

Monitoring

Troubleshooting

Communication

Technical writing

Job description

Deloitte is seeking an experienced IAM/Active Directory Engineer to design, deploy, and support secure AD environments in AWS. You will work across AWS Managed Microsoft AD and customer‑managed AD, developing standards and documentation for deployment and operations while resolving client issues.

The role requires strong AD expertise, AWS knowledge, and excellent communication. Open to candidates based anywhere in the United States, with a 40-hour week and competitive hourly pay.