Senior Identity & Directory Services Engineer

About the role

We are looking for a Senior Identity & Directory Services Engineer to lead the design, implementation, and ongoing management of our global identity infrastructure. You will work closely with security, infrastructure, HR, and application teams to ensure a resilient, secure, and scalable identity environment.

Key responsibilities

• Own and evolve the global identity architecture, including Active Directory, Microsoft Entra ID, and hybrid identity solutions.
• Design and implement hybrid identity services such as Entra Connect/Cloud Sync, ensuring stability and scalability.
• Engineer AD DS and GPO structures, including tiering models, OU delegation, and hardening.
• Apply Zero Trust principles, MFA, Conditional Access, and privileged access management.
• Manage identity governance processes such as join/move/leave, role/group models, access reviews, and recertifications.
• Develop automation using PowerShell and Microsoft Graph, create runbooks, and maintain technical documentation.
• Provide 2nd‑3rd level troubleshooting, root‑cause analysis, and collaborate on change management.

Required profile

• 5+ years of hands‑on enterprise experience with Active Directory design, hardening, and troubleshooting.
• Strong experience with Microsoft Entra ID, RBAC, Conditional Access, and hybrid identity.
• Solid understanding of IAM lifecycle, role/permission models, and audit requirements.
• Experience with Windows Server platforms and Azure administration, including security controls.
• Proficient in PowerShell scripting and preferably Microsoft Graph automation.
• Detail‑oriented with a documentation mindset.

Required skills

• Active Directory
• Group Policy Objects
• Microsoft Entra ID
• Identity and Access Management (IAM)
• Windows Server
• Azure administration
• PowerShell
• Microsoft Graph
• Automation scripting
• Identity governance