Senior Identity & Access Engineer - AWS AD Modernization

KellyMitchell Group; Wayzata (MN); On-site; USD 80,000 - 114,000; Full time

Benefits offered by this job

Medical, Dental, & Vision Insurance Pl

Employee-Owned Profit Sharing (ESOP)

401K offered

Job summary

KellyMitchell Group is seeking a Senior Professional, Identity & Access Management to join the Identity Security team. The role blends extensive Active Directory engineering with AWS infrastructure, automation, and modern infra practices in a contract setting.

Approximately 60% AWS/Infrastructure Engineering and 40% Active Directory Engineering, focusing on modernization of enterprise identity infrastructure and secure authentication patterns.

Qualifications

• Extensive hands-on AD engineering in large, complex enterprises.
• Experience with AD forests, domains, trusts, DNS, and GPOs.
• AWS and cloud infra experience with AD in AWS or hybrid clouds.
• Experience with IaC and automation tools (Terraform, Ansible, Chef).
• CI/CD, DevOps, SRE, or modern infra practices.

Responsibilities

• Design, engineer, operate, and secure AD forests, domains, trusts, and GPOs across large environments.
• Troubleshoot AD health issues including auth failures, replication, DNS, domain controller availability, and account incidents.
• Design and support privileged access controls and admin group structures with IAM/PAM teams.
• Develop and maintain AWS and hybrid-cloud integration patterns for secure AD authentication (LDAP/Kerberos).
• Automate infrastructure provisioning, deployment, and maintenance using IaC and DevOps practices.
• Contribute to disaster recovery planning, incident response, audits, and security remediation.
• Lead or contribute to AD modernization, migration, and infrastructure transformation initiatives.

Skills

Active Directory

AWS

Infrastructure as Code

Automation

DevOps

Security engineering

Kerberos LDAP

Tools

Terraform

Ansible

Chef

Job description

KellyMitchell Group is seeking a Senior Professional, Identity & Access Management to join the Identity Security team. The role blends extensive Active Directory engineering with AWS infrastructure, automation, and modern infra practices in a contract setting.

Approximately 60% AWS/Infrastructure Engineering and 40% Active Directory Engineering, focusing on modernization of enterprise identity infrastructure and secure authentication patterns.