Identity & Access Management Professional

About the role

We are seeking an Identity & Access Management (IAM) Professional to design, engineer, administer and secure our Microsoft Active Directory environment while extending identity services to AWS and hybrid cloud platforms. The role combines hands‑on engineering with architectural strategy, leading modernization initiatives and mentoring team members.

Key responsibilities

• Design, engineer, administer and secure AD forests, domains, trusts, OUs, GPOs and domain controllers.
• Lead AD modernization across hybrid and cloud environments, including AWS integration.
• Implement authentication and authorization solutions using LDAP, Kerberos and hybrid identity architectures.
• Develop and maintain integration patterns between AD, AWS Managed Microsoft AD, self‑hosted AD and enterprise applications.
• Partner with IAM and PAM teams to implement privileged access controls and security governance.
• Monitor, troubleshoot and resolve AD issues related to authentication, replication, DNS, DC health and account lifecycle.
• Support integrations with identity governance, access request, certification and privileged access platforms.
• Contribute to cloud modernization through Infrastructure as Code, automation, CI/CD and DevOps practices.
• Create operational standards, runbooks, architectural documentation and technical procedures.
• Participate in incident response, audit activities, change management and continuous improvement.

Required profile

• 8+ years of hands‑on experience administering and engineering Microsoft Active Directory in large‑scale enterprises.
• Proven track record designing, implementing and securing enterprise AD environments.
• Deep understanding of AD security, delegation models, privileged group administration and identity governance.
• Experience troubleshooting authentication, replication, DNS and DC issues.
• Hands‑on experience integrating AD with AWS environments.

Required skills

• Microsoft Active Directory
• AWS (including Managed Microsoft AD)
• LDAP
• Kerberos
• IAM and PAM concepts
• Group Policy Objects
• Infrastructure as Code (IaC)
• CI/CD pipelines
• Automation and DevOps methodologies