Senior Directory Infrastructure engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Directory Infrastructure Engineer based in the United States.

We are seeking an experienced Senior Directory Infrastructure Engineer to design, implement, and manage complex enterprise identity and directory services environments. In this role, you will play a critical part in maintaining secure, reliable, and scalable identity infrastructure across multiple platforms. You will lead Active Directory lifecycle management, hybrid identity integrations, domain migrations, and infrastructure modernization initiatives. Working closely with security and engineering teams, you will help strengthen identity protection while ensuring seamless access for users and applications. You will also leverage automation and modern identity technologies to improve operational efficiency and reduce security risks. This fully remote opportunity is ideal for a technical expert who enjoys solving complex infrastructure challenges and shaping enterprise security architecture.

Accountabilities:

• Design, implement, maintain, and optimize enterprise directory services infrastructure across Active Directory, Microsoft Entra ID, Okta Universal Directory, and LDAP environments.

• Manage the complete lifecycle of Active Directory domains, including planning, creation, deployment, maintenance, upgrades, and decommissioning.

• Lead complex domain consolidation, migration, and Active Directory forest restructuring initiatives.

• Design and manage trust relationships between domains and forests to ensure secure and reliable identity operations.

• Develop domain health monitoring strategies and proactive maintenance procedures to maintain infrastructure availability and performance.

• Create, implement, and maintain disaster recovery plans for directory services and ensure operational resilience.

• Develop and maintain advanced PowerShell scripts to automate directory administration, maintenance, and management activities.

• Integrate directory services with external platforms and applications using Microsoft Graph API and REST APIs.

• Implement identity security best practices, access management controls, and compliance requirements across enterprise environments.

• Manage directory synchronization technologies, including Azure AD Connect and Okta integration agents.

• Support modern identity security approaches, including Just-In-Time access, Privileged Identity Management, continuous validation, and Zero Trust principles.

• Develop and maintain comprehensive technical documentation covering directory architecture, configurations, and operational procedures.

• Provide advanced troubleshooting and escalation support for critical directory infrastructure incidents.

• Collaborate with security, infrastructure, and engineering teams to deliver complex identity solutions and continuously improve enterprise directory services.

Requirements:

• Bachelor's degree in a relevant technical discipline or equivalent qualifications.

• At least 6 years of hands-on experience with enterprise directory services, including Active Directory, Microsoft Entra ID, Okta Universal Directory, and LDAP.

• Minimum 5 years of experience managing the Active Directory domain lifecycle, including domain creation, upgrades, maintenance, and decommissioning.

• At least 5 years of advanced PowerShell scripting experience, particularly in automating directory management and infrastructure operations.

• Minimum 5 years of experience integrating directory management solutions through Microsoft Graph API and REST APIs.

• Strong understanding of identity security best practices, enterprise access management, and regulatory compliance requirements.

• At least 5 years of experience with directory synchronization technologies, such as Azure AD Connect and Okta integration agents.

• Minimum 5 years of experience working with multi-forest and hybrid identity environments.

• At least 5 years of experience designing and implementing complex enterprise directory architecture solutions.

• Strong knowledge of identity infrastructure administration, domain architecture, and enterprise authentication environments.

• Ability to troubleshoot complex technical issues and deliver scalable, secure, and reliable infrastructure solutions.

• Excellent analytical, problem-solving, and technical documentation skills.

• Strong communication and collaboration abilities, with the capacity to work effectively across security and engineering teams.

Preferred qualifications:

• Relevant industry certifications, such as Microsoft 365 Certified: Identity and Access Administrator or Okta Professional.

• Experience with Infrastructure as Code (IaC) tools such as Terraform and Ansible.

• Knowledge of modern authentication protocols, including SAML, OAuth, and OpenID Connect (OIDC).

• Experience designing, implementing, and managing Group Policy environments.

• Expertise in domain controller sizing, placement, capacity planning, and performance optimization.

• Experience with domain functional level upgrades and cross-domain migrations.

• Familiarity with CI/CD pipelines for infrastructure automation.

• Practical experience implementing Zero Trust architecture and modern identity security frameworks.

Benefits:

• Competitive hourly compensation ranging from $94 to $105 per hour.

• Fully remote work arrangement within the United States.

• Opportunity to work on complex enterprise identity and directory infrastructure projects.

• Exposure to modern technologies, including Microsoft Entra ID, Okta, Active Directory, and cloud-based identity solutions.

• Opportunity to contribute to enterprise security initiatives and infrastructure modernization.

• Professional growth through challenging technical projects and advanced identity architecture responsibilities.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether?    Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.     #LI-CL1