Senior IAM Engineer: AD Modernization & Automation

Integration International Inc.; Wayzata (MN); On-site; USD 120,000 - 160,000; Full time

Job summary

Integration International Inc. is seeking a Senior Identity & Access Management Professional to design, engineer, secure, and modernize a large-scale enterprise Active Directory environment in Wayzata, MN. The role emphasizes automation, cloud integration, and modern engineering practices.

The candidate will lead AD design, security, and automation efforts, integrating LDAP/Kerberos with IAM and PAM platforms, while ensuring global multi-domain support and CI/CD driven improvements.

Qualifications

• Extensive hands-on experience administering Microsoft Active Directory in large, complex enterprise environments.
• Strong knowledge of AD architecture: forests, domains, trusts, OU, Group Policy, Domain Controllers.
• Understanding of AD security, delegation models, and privileged group management.
• Experience troubleshooting authentication, replication, DNS, and account lifecycle issues.
• Experience integrating AD with IAM and PAM platforms.
• Experience with AWS AD implementations and LDAP/Kerberos integrations.
• Hands-on experience with IaC, CI/CD, and automation.
• Proven experience modernizing AD environments through automation.

Responsibilities

• Design, engineer, operate, secure, and maintain Microsoft Active Directory environments.
• Manage forests, domains, trusts, OU, Group Policy, and Domain Controllers.
• Monitor, troubleshoot, and resolve authentication, replication, DNS, and access issues.
• Partner with IAM and PAM teams to support privileged access controls.
• Support integrations between AD and identity governance and access platforms.
• Develop integration patterns between AD and AWS using LDAP and Kerberos.
• Establish authentication patterns leveraging Kerberos where appropriate.
• Modernize AD infrastructure through automation and engineering best practices.
• Develop and maintain automation using Ansible, Terraform, Chef, or similar.
• Implement IaC and CI/CD for identity infrastructure and operations.
• Create and maintain standards, runbooks, and operational docs.
• Participate in change management, incidents, audits, and continuous improvement.
• Support global, multi-domain, and multi-region AD environments.

Skills

Active Directory

IAM

Automation

Infrastructure as Code

CI/CD

LDAP

Kerberos

Multi-region AD

Cloud integration

Enterprise IAM

Tools

Ansible

Terraform

Chef

AWS Managed Microsoft AD

Job description

Integration International Inc. is seeking a Senior Identity & Access Management Professional to design, engineer, secure, and modernize a large-scale enterprise Active Directory environment in Wayzata, MN. The role emphasizes automation, cloud integration, and modern engineering practices.

The candidate will lead AD design, security, and automation efforts, integrating LDAP/Kerberos with IAM and PAM platforms, while ensuring global multi-domain support and CI/CD driven improvements.