Cloud Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Engineer, manage, maintain, modernize, and ensure the operational resilience of the enterprise Active Directory and Microsoft identity infrastructure.

• Install, configure, administer, and sustain AD DS, AD LDS, Entra ID integration, AD CS, Group Policy, DNS/DHCP, and hybrid identity synchronization services.

• Execute platform upgrades, migrations, patch management, and lifecycle management.

• Monitor the health of Active Directory, including replication, authentication services, and directory performance.

• Oversee domain controllers, forests, domains, trusts, sites, and services.

• Assist in directory consolidation, modernization, and cloud identity initiatives.

• Manage users, groups, organizational units, and directory permissions.

• Design and implement Group Policy Objects while maintaining delegation models.

• Facilitate enterprise authentication via LDAP, Kerberos, NTLM, and SAML.

• Administer service accounts and managed service accounts.

• Support certificate-based authentication and PKI integrations.

• Create PowerShell automation for user lifecycle, group management, service account governance, GPO deployment, AD health monitoring, and certificate lifecycle management.

• Develop integrations using PowerShell, REST APIs, LDAP, and Microsoft Graph APIs.

• Back Infrastructure-as-Code and platform automation initiatives.

• Ensure compliance with SOX, HIPAA, PCI, NIST, and internal security controls.

• Assist in collecting audit evidence, conducting compliance reviews, risk assessments, and remediation efforts.

• Maintain technical documentation, standards, and operational procedures.

• Support Zero Trust identity initiatives, passwordless authentication, Entra ID modernization, identity telemetry, security analytics, and NHI governance.

• Collaborate with teams in Infrastructure, Security, IAM, Platform Engineering, Application Development, and Architecture.

• May provide mentorship to less experienced colleagues.

⛳️ Requirements

• Preferred 4-8 years of relevant experience.

• Bachelor's degree in a related field, or equivalent professional experience preferred.

• Proficient in advanced PowerShell skills.

• Experience with Active Directory Domain Services (AD DS).

• Familiarity with Active Directory Lightweight Directory Services (AD LDS).

• Knowledge of Microsoft Entra ID integration.

• Understanding of Active Directory Certificate Services (AD CS).

• Experience with Group Policy infrastructure.

• Proficient in DNS and DHCP services that support AD.

• Experience with hybrid identity synchronization services.

• Knowledge of LDAP, Kerberos, NTLM, SAML, PKI, and certificate-based authentication.

• Experience with PowerShell, REST APIs, LDAP, Microsoft Graph APIs, and JSON/XML.

• Background in Infrastructure Automation and Workflow Automation.

• ServiceNow Developer experience is a plus.

• Knowledge of SOX, HIPAA, PCI, NIST, and internal security controls.

🏝️ Benefits

• Medical, dental, and vision coverage.

• Paid time off plan.

• Health savings account (HSA).

• 401k savings plan.

• Access to wages prior to payday with myFlexPay.

• Flexible spending accounts (FSAs).

• Short- and long-term disability coverage.

• Work-Life resources.

• Paid parental leave.

• Healthy lifestyle programs.