Senior AD/ICAM Administrator

This is a fully remote position, open to applicants in United States.

📋 Description

• Provide modern solutions for Identity Access Credential Management (ICAM) and Zero Trust Architectures (ZTA).

• Offer technical leadership in modernization initiatives.

• Convert business requirements into various technical solution alternatives.

• Engage in hands-on implementation and prototyping of identified solutions.

• Oversee IPT project management activities across multiple ICAM service capabilities.

• Organize and prioritize tasks within the directory services team.

• Design, implement, and manage Active Directory Domain Services, including forest/domain architecture, trusts, replication, and high availability.

• Lead hybrid identity initiatives leveraging Azure AD Connect, Entra ID, and cloud synchronization technologies.

• Develop Zero Trust and ICAM solutions through COTS integration activities.

• Conduct technical triage, requirements decomposition, and solution development.

• Manage and optimize Group Policy Objects (GPOs), Organizational Unit (OU) structures, and security baselines.

• Implement and maintain identity governance, Role-Based Access Control (RBAC), Privileged Identity Management (PIM), and Conditional Access policies in Azure.

• Monitor Active Directory health, perform performance tuning, and plan for backup/recovery and disaster recovery.

• Migrate and modernize legacy Active Directory environments to Azure-native or hybrid solutions.

• Present solution options, including their advantages and disadvantages, to senior leadership.

• Advocate for the development, documentation, and execution of system policies.

• Influence project and team leaders regarding solution design, processes, and methodologies.

• Diagnose complex identity and authentication issues across Windows, Azure, and third-party applications.

• Collaborate with Security, Networking, and Application teams to enforce Zero Trust principles and compliance standards.

⛳️ Requirements

• Bachelor’s degree and 12+ years of relevant experience; additional experience may substitute for a degree.

• Over 8 years of hands-on experience in a leadership role.

• MCSE or MCSA certification in Windows Server / Directory Services is mandatory.

• Demonstrated experience and proficiency in enterprise-level Windows Server administration and Directory Services management.

• Proven expertise with Azure services including Azure Virtual Machines, Azure AD Domain Services, Azure Arc, and the Microsoft Entra suite.

• Understanding of Attributes Based Access Control (ABAC), Role-Based Access Control (RBAC), and Policy-Based Access Control (PBAC).

• Strong expertise in Azure AD / Entra ID, hybrid identity, and cloud migration projects.

• Extensive knowledge of Windows Server operating systems (2016/2019/2022), Active Directory Domain Services (AD DS), DNS, DHCP, PKI, and certificate services.

• Proficiency in PowerShell scripting for automation and reporting purposes.

• Proven experience in Digital Identity Management, Identity Governance, Authorization ICAM services, Data Security Architecture, Data Protection Services, CIAM solutioning, MFA solutions, cloud-first/cloud-native architectures, infrastructure as code, and IdAM/ICAM services.

• Demonstrated experience supporting large-scale enterprise applications.

• Strong communication skills, both in documentation and verbally with senior management.

• Must be a US Citizen.

• Ability to obtain and maintain a Public Trust clearance.

• Preferred: AZ-104, AZ-305 or SC-300, and Microsoft Certified: Windows Server Hybrid Administrator Associate certifications.

• Familiarity with Power BI, Azure Landing Zones, Azure Policy, Blueprints, Bicep/Terraform, SAML, OAuth, OpenID Connect, Kerberos, NTLM, Defender for Identity, Sentinel, PAW, DevOps, and Lambda.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Flexible work schedule and remote work options.

• Comprehensive health, dental, and vision insurance.

• Retirement savings plan with company matching.

• Opportunities for professional development and certifications.