Sr. Systems Engineer (Active Directory)

Berkley Technology Services

Wilmington (DE)

On-site

USD 107,000 - 198,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Health insurance

Dental coverage

Vision plan

Life insurance

401(k) plan

Profit sharing

Paid time off

Job summary

Berkley Technology Services is seeking a Sr. Systems Engineer (Active Directory) to design, implement, and manage enterprise AD/Entra Hybrid infrastructure. This role requires expert AD architecture, security hardening, and automation, not routine administration.

Ideal candidate will integrate AD with IAM solutions like Okta/Auth0 and Entra ID, contribute to PKI/AD CS, and lead cross-functional teams while ensuring high availability and security standards.

Qualifications

Extensive hands-on AD design, implementation, and management in large multi-forest environments.

Responsibilities

Serve as enterprise SME for AD architectural designs aligning with security.
Develop and maintain AD architecture including forests, domains, OUs, and GPOs.
Automate administrative tasks across AD/Entra environment with health monitoring.
Ensure AD security with PAM, RBAC, and hardening techniques.
Document architectures, standards, and SOPs for ITIL-compliant processes.
Lead projects with PM, AM, and customer teams across Berkley Technology Services.
Mentor staff in AD/IAM technologies and best practices.
Participate in incident, request, and change management under ITIL.
Support on-call rotation for Platform Identity Management Team.

Skills

AD architecture

Scripting/Automation

Security best practices

Communication

Disaster recovery planning

Education

Bachelor's degree in CS/IT

Equivalent experience considered

Tools

Netwrix Directory Manager (NDM)

Okta/Auth0

Microsoft Entra ID

LDAPS

GPOs

Job description

Company Details

\"Thoughtful Minds | Empowering Possibilities\"
W. R. Berkley Corporation is comprised of 60+ businesses alongside Berkley Technology Services (BTS) and other shared services groups. Here at Berkley Technology Services, the core of our success is our people. Our teams bring their own unique perspective and experiences which enables us to translate the needs of our business to deliver adaptable, secure solutions while providing an unmatched user-focused experience.
At BTS, our teams thrive in Berkley’s decentralized model, leveraging the power of being part of a long-standing, heritage brand with extensive expertise while innovation and being entrepreneurial is encouraged. Internally, we operate as a relatively flat organization valuing communication and feedback. We pride ourselves in an open-door policy where no one is treated differently based on title, fostering a culture of trust, transparency, and engagement.

Mission

We Believe in the value of every voice
Translate needs into capabilities
Secure the future of Berkley

Vision

Be the foundation of Berkley through adaptable solutions, resilient environments, and an unmatched experience.
Come join us as we push forward into the future of industry-leading technological solutions.
The Company is an equal employment opportunity employer.

Responsibilities

The Sr. Systems Engineer (Active Directory) is an experienced Active Directory specialist to design, implement, and manage our enterprise-wide Active Directory /Entra Hybrid infrastructure. This is a highly technical, senior-level position requiring expertise in AD architecture, security best practices, and automation. This is not an administrator role. The ideal candidate will be a subject matter expert in AD technologies, with a proven track record of designing scalable, secure, and resilient AD solutions for complex environments. Experience with Active Directory Integrated DNS and Domain Controller administration is essential. This position is on the Platform Identity Management team with a focus on owning Active Directory as a Source of Truth (SOT) for Identity. This team is also responsible for Entra and Auth0 identity services, AD CS PKI, and Identity authN / authZ.

Systems Planning and Implementation: Serve as the enterprise subject matter expert (SME) for Active Directory architectural designs, ensuring they align with business needs and security requirements.

AD Management: Develop, implement, and maintain the AD architecture, including forests, domains, organizational units (OUs), and Group Policies (GPOs). Perform advanced troubleshooting and root cause analysis for complex AD infrastructure issues, including replication, DNS, and authentication.

Scripting/Automation : Utilize DevOps and Platform Engineering principles to support the automation of administrative tasks across the Active Directory and Entra environment. Ensures critical AD roles and Entra Identity services have health monitoring and alerting.

Security Standards: Ensure the security of the AD environment by implementing best practices for authentication, authorization, and auditing. Perform periodic Domain Controller security hardening.

Documentation: Develop and maintain comprehensive documentation, including architectural designs, configuration standards, and standard operating procedures (SOPs).

Project and cross-matrix Leadership: Lead projects, working directly with Project Management, Account Management, and Customer teams. Collaborate and consult with other Berkley Technology Services teams, including security, networking, and application development to ensure seamless integration and operational efficiency.

Mentorship: Mentor and cross-train technical staff, peers, and subordinate team members in AD/ IAM technologies and best practices.

ITIL Standards: Participate and adhere to defined ITIL standards for incident, request, and change management.

On Call Rotation (PIC) is required as part of the Platform Identity Management Team.

Qualifications

Active Directory Architecture: Extensive, hands-on experience in designing, implementing, and managing large, complex, multi-forest Active Directory environments (Minimum 5 years of experience) . Deep expertise in AD components such as DNS, DC, GPOs, Sites and Services, and trusts.
Netwrix Directory Manager (NDM): Proven experience implementing, configuring, and managing NDM (or similar products ) to provide a policy-based delegated AD administration and governance model within a least -privilege d security framework.
Windows Platforms: In-depth knowledge of Windows Server operating systems (2016, 2019, 2022, 2025) and their roles within an enterprise environment.
Security Expertise: Strong understanding of AD security best practices, including privileged access management (PAM), role-based access control (RBAC), and security hardening techniques. Previous experience with server hardening within an AD environment is preferred.
Identity & Access Management (IAM): Ability to integrate Active Directory with IAM solutions aligned with Zero Trust, identity governance, and adaptive authentication concepts . Previous experience with Okta/Auth0, Microsoft Entra ID, MFA , LDAPS preferred.
Communication: Excellent written and verbal communication skills, with the ability to document and convey complex technical concepts to both technical and non-technical audiences.
Disaster Recovery: Experience with disaster recovery and business continuity planning for AD and its role within the organization's technology stacks.
AI Tools: Demonstrate comfort using AI-assisted tools in a professional context; approach AI as a standard part of modern workflow rather than a specialized or optional capability.

Education Requirement