Active Directory Engineer

About the role

The Identity & Access Management (IAM) Directory Services team is looking for an experienced Active Directory Engineer to design, harden, and operate enterprise‑wide AD environments. You will drive consolidation, improve security standards, and enable automated identity governance across both human and non‑human identities.

Key responsibilities

• Engineer, harden, and operate multi‑domain, multi‑forest Active Directory platforms supporting critical workloads.
• Lead AD consolidation and domain rationalisation initiatives across enterprise, eCommerce, and business‑unit directories.
• Support and enhance Radiant Logic Virtual Directory System operations.
• Establish baseline security standards, implement RBAC, and integrate AD with PIM, PAM, and Entra ID/Azure AD.
• Enable just‑in‑time, group‑based, time‑bound privileged access and cross‑tenant identity governance.
• Automate identity monitoring, remediation, compliance reporting, and reduce tool sprawl while ensuring service reliability.
• Mentor junior engineers and contribute to repeatable engineering patterns and documentation.

Required profile

• 8+ years of hands‑on experience operating large‑scale Active Directory environments.
• Deep knowledge of AD architecture, trusts, replication, DNS, PKI, and multi‑forest designs.
• Proven experience with AD security hardening, recovery, and Radiant Logic Virtual Directory services.
• Strong troubleshooting skills in highly regulated, enterprise‑scale IAM settings.
• Experience driving AD consolidation, legacy system sunset, or M&A identity integration.

Required skills

• Active Directory (architecture, trusts, replication, DNS, PKI)
• Multi‑domain / multi‑forest design
• AD security hardening and recovery
• Radiant Logic Virtual Directory Services
• Role‑Based Access Control (RBAC)
• Privileged Identity Management (PIM) and Privileged Access Management (PAM)
• Entra ID / Azure AD integration
• Identity governance automation