Senior Platform Engineer - Active Directory & PAM

Beacon Hill Staffing Group, LLC; Los Angeles (CA); Hybrid; USD 150,000 - 190,000; Full time

Job summary

Beacon Hill Technologies in the United States is seeking a hands-on Senior Platform Engineer with deep Active Directory expertise to modernize and automate enterprise identity lifecycle management, focusing on AD standardization, identity automation, and PAM across hybrid environments.

You will analyze, design, and implement identity solutions, automate provisioning/deprovisioning, lead AD consolidation and migrations, and collaborate with security and infrastructure teams to strengthen identity

Qualifications

• 8+ years in IAM/AD or identity platform engineering.
• Hands-on AD engineering and planning experience.
• Strong C#/.NET development or automation skills.
• Deep Microsoft Azure experience and hybrid identity design.
• Experience with AD migrations and domain consolidation.
• Experience automating identity lifecycle and PAM workflows.
• Knowledge of AD security, remediation and compliance.

Responsibilities

• Analyze and modernize identity lifecycle management across AD and Entra ID.
• Automate provisioning and deprovisioning of user and service accounts.
• Lead AD consolidation, migrations, and legacy domain decommissioning.
• Standardize AD architecture, security controls and governance.
• Support PAM onboarding and privileged vaulting.
• Implement RBAC/PIM controls and reduce excess privileged access.
• Support PKI rationalization and certificate lifecycle management.
• Conduct security baseline assessments and remediate findings.
• Collaborate with security and infrastructure teams to strengthen identity security.
• Evaluate identity tech and design scalable future-state solutions.
• Create detailed designs, configurations, and support documentation.

Skills

Active Directory

IAM

C# / .NET

Azure

Hybrid environments

PAM

AD migrations

Automation

Identity security

LDAP / AD architecture

Tools

CyberArk

Microsoft Entra ID

ADFS

MIM

PKI

Job description

Beacon Hill was founded to set a new standard in search, career placement and flexible staffing.

Senior Platform Engineer - Active Directory & PAM

Position Summary

Seeking a hands-on Senior Platform Engineer with deep Active Directory expertise to modernize and automate enterprise identity lifecycle management. This role will focus on Active Directory standardization, identity automation, security remediation, domain consolidation, and privileged access management across hybrid environments.

Must Haves

• 8+ years of experience in Identity & Access Management (IAM), Active Directory, or Identity Platform Engineering
• Deep hands-on Active Directory (AD) engineering experience
• Strong C# / .NET development or automation experience
• Strong Microsoft Azure experience
• Experience designing and supporting enterprise-scale hybrid identity environments
• Privileged Access Management (PAM) experience
• Strong knowledge of AD architecture, including domain controllers, GPOs, sites/services, directory structures, LDAP, and identity integrations
• Experience with Active Directory migrations, domain consolidation, and legacy domain decommissioning
• Experience automating identity and service account lifecycle management
• Experience performing AD security assessments, vulnerability remediation, hardening, and compliance activities
• Ability to design, document, and implement enterprise identity solutions

Nice to Haves

• CyberArk or similar PAM platform experience
• Microsoft Entra ID experience
• RBAC and Privileged Identity Management (PIM)
• Microsoft Identity Manager (MIM)
• Active Directory Federation Services (ADFS)
• PKI architecture and certificate lifecycle management
• Privileged Access Workstation (PAW) implementation
• Cross-tenant Entra ID governance experience

Key Responsibilities

• Analyze and modernize identity lifecycle management across Active Directory and Entra ID
• Automate provisioning and deprovisioning of user and non-human/service accounts
• Lead Active Directory consolidation, migration, and legacy domain decommissioning
• Standardize AD architecture, security controls, and governance across enterprise environments
• Support PAM onboarding and privileged account vaulting
• Implement RBAC/PIM controls and reduce excessive or standing privileged access
• Support PKI rationalization, migration, and certificate lifecycle management
• Conduct AD/Entra security baseline assessments and remediate security findings
• Partner with security and infrastructure teams to resolve vulnerabilities and improve identity security
• Evaluate identity technologies and design scalable future-state solutions
• Create detailed technical designs, configurations, operational procedures, and support documentation
• Provide troubleshooting and technical support for Active Directory, Azure/Entra, PAM, and related identity platforms

Beacon Hill is an equal opportunity employer and individuals with disabilities and/or protected veterans are encouraged to apply.

California residents: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

Company Profile

Beacon Hill Technologies, a premier National Information Technology Staffing Group, provides world class technology talent across all industries utilizing a complete suite of staffing services. Beacon Hill Technologies' dedicated team of recruiting and staffing experts consistently delivers quality IT professionals to solve our customers' technical and business needs. Beacon Hill Technologies covers a broad spectrum of IT positions, including Project Management and Business Analysis, Programming/Development, Database, Infrastructure, Quality Assurance, Production/Support and ERP roles. Learn more about Beacon Hill and our specialty divisions, Beacon Hill Associates, Beacon Hill Financial, Beacon Hill HR, Beacon Hill Legal, Beacon Hill Life Sciences and Beacon Hill Technologies by visiting www.bhsg.com.

Benefits Information

Beacon Hill offers a robust benefit package including, but not limited to, medical, dental, vision, and federal and state leave programs as required by applicable agency regulations to those that meet eligibility. Upon successfully being hired, details will be provided related to our benefit offerings.

We look forward to working with you.Beacon Hill. Employing the Future