Senior Infrastructure Engineering Manager — AD & Hybrid Cloud

Kroll; Philadelphia (Philadelphia County); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) with company match

Generous PTO

Parental and family leave

Job summary

Kroll is seeking an experienced Infrastructure Engineer to design, operate, and secure enterprise infrastructure across on‑premises and cloud environments. The role emphasizes privileged Domain Administrator access, formal change control, and strong documentation for Windows and Linux platforms in a global setting.

You will work across Active Directory, identity services, and cloud integrations, delivering automation, resilience, and cost-conscious design while collaborating with Cybersecurity,

Qualifications

• Bachelor’s degree in computer science, information technology, engineering, or a related discipline, or equivalent practical experience.
• Five or more years of enterprise infrastructure engineering or systems administration experience, including substantial hands-on responsibility for Microsoft Active Directory.
• Demonstrated experience performing controlled work with Domain Administrator or comparably privileged credentials in large, complex, or regulated environments.
• Advanced knowledge of Active Directory Domain Services, Group Policy, DNS, Kerberos, LDAP, Windows Server, permissions, delegation, replication, and directory recovery.
• Strong understanding of privileged-access security, least privilege, role-based access, credential hygiene, logging, auditability, and separation of duties.
• Hands-on experience with PowerShell automation and source control.
• Working knowledge of virtualization, networking, storage, backup and recovery, monitoring, and cloud infrastructure.
• Experience with formal change management, incident response, root-cause analysis, and production support in a 24x7 environment.
• Strong analytical, troubleshooting, documentation, and communication skills, with the ability to work independently and collaborate across technical and business teams.

Responsibilities

• Privileged Domain and Identity Services: administer and troubleshoot Active Directory domains, forests, trusts, DNS, Group Policy, and service accounts.
• Plan and execute sensitive directory changes, upgrades, migrations, consolidations, and recoveries through formal change-management.
• Protect privileged access with least privilege, MFA, secure workstations, time-bound elevation, credential rotation, and access reviews.
• Maintain security and recoverability of identity services, including backup validation and runbooks.
• Automate administration, reporting, health checks, and compliance evidence with PowerShell or similar tools.
• Design, build, patch, monitor, and support Windows and Linux server platforms across data centers and clouds.
• Support hybrid-cloud workloads in Azure and AWS, including identity integration and networking dependencies.
• Use IaC and configuration-management tools (Terraform, PowerShell, Ansible, Git) to deliver repeatable changes.
• Lead or contribute to lifecycle projects, capacity planning, migrations, and service improvements.
• Monitor performance, availability, security, and configuration compliance; address risks proactively.
• Participate in incident/ change/ problem processes and provide clear communications during major incidents.
• Create and maintain architecture diagrams, standards, procedures, runbooks, and knowledge articles.
• Mentor engineers and transfer knowledge across global teams; participate in on-call rotations.

Skills

Active Directory

Identity Services

Windows Server

Cloud infrastructure

Automation

Networking

Education

Bachelor’s degree in computer science, information technology, engineering, or a related discipline

Tools

PowerShell

Terraform

Ansible

Git

CI/CD

Job description

Kroll is seeking an experienced Infrastructure Engineer to design, operate, and secure enterprise infrastructure across on‑premises and cloud environments. The role emphasizes privileged Domain Administrator access, formal change control, and strong documentation for Windows and Linux platforms in a global setting.

You will work across Active Directory, identity services, and cloud integrations, delivering automation, resilience, and cost-conscious design while collaborating with Cybersecurity,