Lead Site Reliability Engineer – Active Directory

This is a fully remote position, open to applicants in California.

📋 Description

• Design and sustain an Identity-as-Code ecosystem utilizing CI/CD pipelines.

• Automate changes in directories, updates to security policies, and provisioning of infrastructure for global Active Directory.

• Oversee the creation, implementation, and management of robust identity infrastructure across both public cloud and on-premise settings.

• Act as the final escalation point for intricate and critical Active Directory incidents.

• Conduct advanced troubleshooting and perform root cause analysis.

• Implement monitoring and alerting capabilities using New Relic and other relevant tools.

• Continuously assess the health, performance, and reliability of directories.

• Establish and manage the AD Delegation and Tiered Administration model.

• Ensure compliance with the principle of least privilege.

• Lead the onboarding process and integration of applications and services with Okta.

• Provide mentorship to teams on security best practices.

• Promote ongoing improvements in identity reliability and lifecycle management.

• Author and disseminate standards and best-practice documentation regarding identity architecture, administration, and security.

• Set the strategic technical direction for Coupa's Identity and Access Management capabilities.

• Define the technical roadmap and create a center of excellence for Active Directory.

⛳️ Requirements

• Extensive knowledge of Active Directory Domain Services (AD DS), including DNS, DHCP, Certificate Services, and Group Policy Object (GPO) Management.

• Preferred experience with cloud-based directory services such as AWS Directory Service and Azure Active Directory (Azure AD/Entra ID).

• In-depth understanding of Identity Governance and Administration (IGA) processes, automated user lifecycle management, RBAC/ABAC methodologies, and compliance reporting.

• Proven experience in implementing GitOps workflows for infrastructure configuration.

• Proficient in Terraform, Chef, Ansible, or PowerShell DSC.

• Familiarity with directory log analysis using SIEM tools such as Azure Sentinel.

• 7+ years of progressive experience in IT, Systems Engineering, DevOps, or Identity Engineering.

• At least 2+ years in a technical leadership position.

• Demonstrated success in defining and driving technical roadmaps for identity and access management platforms.

• Competence in PowerShell, Python, or other equivalent scripting languages.

• Experience in building and managing modern identity solutions on AWS, Azure, or GCP.

• Strong understanding of networking systems and protocols, including TCP/IP, DNS, and DHCP.

• Bachelor's Degree in Computer Science, Computer Engineering, or equivalent professional experience.

• Excellent communication and cross-team collaboration skills.

• Enthusiasm for tackling complex problems.

🏝️ Benefits

• Two company-wide paid wellness days off each year.

• Paid day off on your birthday or another day in your birthday month.

• 40 hours of paid Volunteer Time Off annually.

• Free, confidential, 24/7/365 Employee Assistance Program.

• Business travel medical, safety, pre-trip planning, and emergency support.

• Monetary referral bonuses for successful referrals.

• Comprehensive medical/dental insurance.

• Retirement/pension plans.

• Life or accident protection.

• Open and autonomous work culture.

• Collaborative culture driven by transparency, openness, and a shared commitment to excellence.