Senior IAM Platform Engineer — AD/Entra & PAM

TEKsystems; United States; Hybrid; USD 131,000 - 138,000; Full time

Benefits offered by this job

Hybrid work arrangement

Contract role

Job summary

TEKsystems is seeking a Senior Platform Engineer (Active Directory & Entra ID) for a contract role. The position supports a hybrid work model from Burbank, CA, with remote options in the region.

You will analyze lifecycle management of identities, automate processes, and guide operations on decommissioning legacy AD instances. The ideal candidate has extensive experience in hybrid IAM, PAM (CyberArk), RBAC/PIM, PKI, and security governance across AD and Entra ID.

Qualifications

• Minimum of 8 years of work experience in Identity & Access Management.
• Experience designing, implementing, and integrating enterprise-level hybrid IAM solutions including Active Directory, Azure Active Directory / Entra ID, Microsoft Identity Manager, Active Directory Federation, PAM, and LDAP integrations.
• Experience with CyberArk / Idira is a huge plus.
• Experience engineering both infrastructure components and logical aspects like GPO management and directory structures.
• Experience directing suppliers in outsourced environments.
• Hands-on with PAM platforms (e.g., CyberArk) and PAW deployment.
• Experience RBAC/PIM across AD and Entra ID.
• Experience PKI, certificate lifecycle, and domain consolidation.
• Familiarity with Entra ID governance and cross-tenant identity governance.
• Experience automating service account lifecycle management and privileged identity management.

Responsibilities

• Lead PAM onboarding and AD standardization efforts.
• Consolidate legacy MGMT/iDMZ AD domains and their PKI infrastructure.
• Onboard privileged accounts into PAM and enforce zero standing privileged access.
• Implement RBAC/PIM across AD and Entra ID, replacing broad permissions.
• Automate provisioning/deprovisioning of service accounts and lifecycle management.
• Standardize AD architecture and governance across domains.
• Pilot cross-tenant Entra ID governance across business segments.
• Deploy Privileged Access Workstations and restrict Tier 0 activity.
• Remediate high-priority security findings ahead of migration.

Skills

Active Directory

IAM

Entra ID

automation

Job description

TEKsystems is seeking a Senior Platform Engineer (Active Directory & Entra ID) for a contract role. The position supports a hybrid work model from Burbank, CA, with remote options in the region.

You will analyze lifecycle management of identities, automate processes, and guide operations on decommissioning legacy AD instances. The ideal candidate has extensive experience in hybrid IAM, PAM (CyberArk), RBAC/PIM, PKI, and security governance across AD and Entra ID.