Senior Manager, Infrastructure Engineering

Kroll; Philadelphia (Philadelphia County); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) with company match

Generous PTO

Parental and family leave

Job summary

Kroll is seeking an experienced Infrastructure Engineer to design, operate, and secure enterprise infrastructure across on‑premises and cloud environments. The role emphasizes privileged Domain Administrator access, formal change control, and strong documentation for Windows and Linux platforms in a global setting.

You will work across Active Directory, identity services, and cloud integrations, delivering automation, resilience, and cost-conscious design while collaborating with Cybersecurity,

Qualifications

• Bachelor’s degree in computer science, information technology, engineering, or a related discipline, or equivalent practical experience.
• Five or more years of enterprise infrastructure engineering or systems administration experience, including substantial hands-on responsibility for Microsoft Active Directory.
• Demonstrated experience performing controlled work with Domain Administrator or comparably privileged credentials in large, complex, or regulated environments.
• Advanced knowledge of Active Directory Domain Services, Group Policy, DNS, Kerberos, LDAP, Windows Server, permissions, delegation, replication, and directory recovery.
• Strong understanding of privileged-access security, least privilege, role-based access, credential hygiene, logging, auditability, and separation of duties.
• Hands-on experience with PowerShell automation and source control.
• Working knowledge of virtualization, networking, storage, backup and recovery, monitoring, and cloud infrastructure.
• Experience with formal change management, incident response, root-cause analysis, and production support in a 24x7 environment.
• Strong analytical, troubleshooting, documentation, and communication skills, with the ability to work independently and collaborate across technical and business teams.

Responsibilities

• Privileged Domain and Identity Services: administer and troubleshoot Active Directory domains, forests, trusts, DNS, Group Policy, and service accounts.
• Plan and execute sensitive directory changes, upgrades, migrations, consolidations, and recoveries through formal change-management.
• Protect privileged access with least privilege, MFA, secure workstations, time-bound elevation, credential rotation, and access reviews.
• Maintain security and recoverability of identity services, including backup validation and runbooks.
• Automate administration, reporting, health checks, and compliance evidence with PowerShell or similar tools.
• Design, build, patch, monitor, and support Windows and Linux server platforms across data centers and clouds.
• Support hybrid-cloud workloads in Azure and AWS, including identity integration and networking dependencies.
• Use IaC and configuration-management tools (Terraform, PowerShell, Ansible, Git) to deliver repeatable changes.
• Lead or contribute to lifecycle projects, capacity planning, migrations, and service improvements.
• Monitor performance, availability, security, and configuration compliance; address risks proactively.
• Participate in incident/ change/ problem processes and provide clear communications during major incidents.
• Create and maintain architecture diagrams, standards, procedures, runbooks, and knowledge articles.
• Mentor engineers and transfer knowledge across global teams; participate in on-call rotations.

Skills

Active Directory

Identity Services

Windows Server

Cloud infrastructure

Automation

Networking

Education

Bachelor’s degree in computer science, information technology, engineering, or a related discipline

Tools

PowerShell

Terraform

Ansible

Git

CI/CD

Job description

Technology Operations

Technology Operations | Philadelphia, PA, United States | 21015333

We are seeking an experienced Infrastructure Engineer to design, operate, secure, and continuously improve enterprise infrastructure across on-premises and cloud environments. This position is entrusted with privileged Domain Administrator access for approved high-trust work and must apply disciplined change control, least-privilege practices, strong documentation, and sound engineering judgment. The engineer will serve as a senior technical resource for Microsoft identity and Windows platforms while contributing broadly to compute, virtualization, storage, backup, monitoring, automation, cloud, and disaster-recovery initiatives.

Day-to-day responsibilities:

Privileged Domain and Identity Services

Perform approved high-trust administrative work in enterprise Active Directory environments using designated, individually assigned privileged accounts.

Administer and troubleshoot domain controllers, forests, domains, trusts, sites and services, replication, DNS, Group Policy, organizational units, service accounts, and authentication dependencies.

Plan and execute sensitive directory changes, upgrades, migrations, consolidations, acquisitions, and recovery activities through formal change-management and peer-review processes.

Protect privileged access through least privilege, separation of duties, multifactor authentication, secure administrative workstations, just-in-time or time-bound elevation where available, credential rotation, and auditable access reviews.

Maintain the security and recoverability of identity services, including backup validation, authoritative and non-authoritative recovery procedures, break-glass controls, and tested runbooks.

Investigate complex authentication, authorization, Kerberos, LDAP, DNS, replication, and Group Policy incidents; lead root-cause analysis and corrective actions.

Partner with Cybersecurity, IAM, Audit, Compliance, Application, Network, and Cloud teams to remediate vulnerabilities and satisfy control requirements.

Automate repeatable administration, reporting, health checks, and compliance evidence collection using PowerShell or comparable tools.

Design, build, configure, patch, monitor, and support highly available Windows and Linux server platforms across data centers and public cloud environments.

Engineer and support virtualization, compute, storage, backup, disaster recovery, monitoring, and core infrastructure services.

Support hybrid-cloud workloads in Microsoft Azure and Amazon Web Services, including identity integration, networking dependencies, security controls, resilience, and cost-conscious design.

Use infrastructure-as-code and configuration-management practices, such as Terraform, PowerShell, Ansible, Git, and CI/CD workflows, to deliver consistent and repeatable changes.

Lead or contribute to infrastructure lifecycle projects, capacity planning, platform upgrades, migrations, technical debt reduction, and service improvements.

Monitor performance, availability, security, capacity, and configuration compliance; address risks before they affect business services.

Participate in incident, problem, change, release, and configuration-management processes and provide clear technical communications during major incidents.

Create and maintain architecture diagrams, standards, operating procedures, build documents, recovery plans, and knowledge articles.

Provide escalation support, mentor engineers, conduct technical reviews, and transfer knowledge across global teams.

Participate in an on-call rotation and perform approved after-hours maintenance when required.

Bachelor’s degree in computer science, information technology, engineering, or a related discipline, or equivalent practical experience.

Five or more years of enterprise infrastructure engineering or systems administration experience, including substantial hands-on responsibility for Microsoft Active Directory.

Demonstrated experience performing controlled work with Domain Administrator or comparably privileged credentials in large, complex, or regulated environments.

Advanced knowledge of Active Directory Domain Services, Group Policy, DNS, Kerberos, LDAP, Windows Server, permissions, delegation, replication, and directory recovery.

Strong understanding of privileged-access security, least privilege, role-based access, credential hygiene, logging, auditability, and separation of duties.

Hands-on experience with PowerShell automation and source control.

Working knowledge of virtualization, networking, storage, backup and recovery, monitoring, and cloud infrastructure.

Experience with formal change management, incident response, root-cause analysis, and production support in a 24x7 environment.

Strong analytical, troubleshooting, documentation, and communication skills, with the ability to work independently and collaborate across technical and business teams.

Ability to manage confidential information and privileged access with discretion, accountability, and sound judgment.

Experience with multi-forest or multi-domain environments, mergers and acquisitions, domain migrations, or complex trust relationships.

Experience with Microsoft Entra ID, hybrid identity, federation, single sign-on, multifactor authentication, PKI, managed service accounts, and privileged-access management platforms.

Experience supporting VMware or comparable virtualization platforms; enterprise storage and backup technologies; and Azure or AWS services.

Knowledge of security frameworks and controls such as Zero Trust, CIS benchmarks, NIST guidance, ISO 27001, or SOC 2.

Relevant Microsoft, Azure, AWS, ITIL, or security certification.

Healthcare Coverage: Comprehensive medical, dental, and vision plans.

Time Off and Leave Policies: Generous paid time off (PTO), paid company holidays, generous parental and family leave.

Protective Insurances: Life insurance, short- and long-term disability coverage, and accident protection.

Compensation and Rewards: Competitive salary structures, performance-based incentives, and merit-based compensation reviews.

Retirement Plans: 401(k) plans with company matching.

Please note that benefits may vary by region, department and role. We encourage you to speak with your recruiter to learn more about the specific benefits available for your position.

About Kroll

Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you’ll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore and maximize our clients’ value? Your journey begins with Kroll.

We are proud to be an equal opportunity employer and will consider all qualified applicants regardless of gender, gender identity, race, religion, color, nationality, ethnic origin, sexual orientation, marital status, veteran status, age or disability.