Lead Site Reliability Engineer – Active Directory

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and sustain an Identity-as-Code ecosystem utilizing CI/CD pipelines to automate directory modifications, security policy enhancements, and infrastructure provisioning for global Active Directory.

• Spearhead the design, execution, and management of a robust global identity infrastructure across both public cloud and on-premise settings.

• Act as the final escalation point for intricate and critical incidents related to Active Directory.

• Conduct advanced troubleshooting and root cause analysis.

• Implement observability and alerting mechanisms in New Relic and other tools to monitor directory health, performance, and reliability.

• Establish and oversee the AD Delegation and Tiered Administration model based on the principle of least privilege.

• Lead the onboarding and integration of applications and services with identity platforms like Okta.

• Mentor teams in security best practices and enhance identity reliability and lifecycle management.

• Own and publish standards and best-practice documentation for identity architecture, administration, and security.

⛳️ Requirements

• Extensive expertise in Active Directory Domain Services, encompassing DNS, DHCP, Certificate Services, and Group Policy Object management.

• Preferred experience with AWS Directory Service and Azure Active Directory/Entra ID.

• Profound understanding of Identity Governance and Administration processes, automated user lifecycle management, RBAC/ABAC, and compliance reporting.

• Demonstrated experience in implementing GitOps workflows for infrastructure configuration.

• Proficient in Terraform, Chef, Ansible, or PowerShell DSC.

• Familiarity with analyzing directory logs using SIEM tools such as Azure Sentinel.

• Over 10 years of progressive experience in IT, Systems Engineering, DevOps, or Identity Engineering.

• A minimum of 2 years in a technical leadership position.

• Proven ability to define and drive technical roadmaps for identity and access management platforms.

• Competence in PowerShell, Python, or equivalent scripting languages.

• Experience in building and managing modern identity solutions utilizing AWS, Azure, or GCP.

• Strong understanding of networking systems and protocols, including TCP/IP, DNS, and DHCP.

• Bachelor’s degree in Computer Science, Computer Engineering, or equivalent professional experience.

• US Citizenship required due to Gov cloud and FedRamp requirements.

🏝️ Benefits

• Two company-wide paid wellness days off each year.

• Paid day off on your birthday or an alternative day within your birthday month.

• 40 hours of paid volunteer time off annually.

• Free, confidential, 24/7/365 Employee Assistance Program providing counseling and work-life, financial, legal, and new-parent resources.

• Zurich Travel Assist for business travel medical, safety, pre-trip planning, and emergency support.

• Monetary referral bonuses for successful employee referrals.

• Location-specific comprehensive medical/dental insurance.

• Retirement/pension plans.

• Life or accident protection.