Enterprise Identity Engineer (Active Directory / PKI / Tier 0)

Job Description

Highly skilled engineer to manage and support enterprise identity and security infrastructure. Administers, troubleshoots, and automates across Active Directory, certificate services, federation services, and related technologies. Includes enterprise administrator role which is Tier 0 security access. Enhanced background check required. Oil & gas experience preferred. Top 3 required skills: Active Directory; ADCS and PKI; Terraform and IaC.

Requirements

• • Strong experience with Active Directory, ADCS, ADFS, and PKI (required)
• • Proficiency in Kerberos authentication, SPNs, and Keytab management
• • Hands-on experience with Group Policy Objects (GPO) and policy troubleshooting
• • Advanced PowerShell scripting for automation and reporting
• • Familiarity with Azure Information Protection (AIP) and identity security
• • Experience with Quest tools: Change Auditor, RMAD, GPOAdmin
• • Knowledge of HSM configuration and cryptographic key management
• • Cloud experience with AWS and Infrastructure-as-Code using Terraform
• • Tier 0 security access requires enhanced background check

Responsibilities

• • Administer and maintain Active Directory (AD), including domain controllers, replication, and security hardening
• • Manage Active Directory Certificate Services (ADCS) and Public Key Infrastructure (PKI)
• • Support Active Directory Federation Services (ADFS) and integration with identity providers
• • Implement and maintain Azure Information Protection (AIP) for data security
• • Utilize Quest tools (Change Auditor, RMAD, GPOAdmin) for auditing, recovery, and policy management
• • Configure and manage Hardware Security Modules (HSM) for cryptographic operations
• • Deploy and manage infrastructure in AWS using Terraform
• • Develop automation scripts using PowerShell
• • Provide on-call support for critical identity and security services as part of a rotation schedule

Technologies & Skills