To Apply for this Job Click Here
Senior Platform Engineer – Active Directory & PAM
Position Summary
Seeking a hands-on Senior Platform Engineer with deep Active Directory expertise to modernize and automate enterprise identity lifecycle management. This role will focus on Active Directory standardization, identity automation, security remediation, domain consolidation, and privileged access management across hybrid environments.
Must Haves
- 8+ years of experience in Identity & Access Management (IAM), Active Directory, or Identity Platform Engineering
- Deep hands-on Active Directory (AD) engineering experience
- Strong C# / .NET development or automation experience
- Strong Microsoft Azure experience
- Experience designing and supporting enterprise-scale hybrid identity environments
- Privileged Access Management (PAM) experience
- Strong knowledge of AD architecture, including domain controllers, GPOs, sites/services, directory structures, LDAP, and identity integrations
- Experience with Active Directory migrations, domain consolidation, and legacy domain decommissioning
- Experience automating identity and service account lifecycle management
- Experience performing AD security assessments, vulnerability remediation, hardening, and compliance activities
- Ability to design, document, and implement enterprise identity solutions
Nice to Haves
- CyberArk or similar PAM platform experience
- Microsoft Entra ID experience
- RBAC and Privileged Identity Management (PIM)
- Microsoft Identity Manager (MIM)
- Active Directory Federation Services (ADFS)
- PKI architecture and certificate lifecycle management
- Privileged Access Workstation (PAW) implementation
- Cross-tenant Entra ID governance experience
Key Responsibilities
- Analyze and modernize identity lifecycle management across Active Directory and Entra ID
- Automate provisioning and deprovisioning of user and non-human/service accounts
- Lead Active Directory consolidation, migration, and legacy domain decommissioning
- Standardize AD architecture, security controls, and governance across enterprise environments
- Support PAM onboarding and privileged account vaulting
- Implement RBAC/PIM controls and reduce excessive or standing privileged access
- Support PKI rationalization, migration, and certificate lifecycle management
- Conduct AD/Entra security baseline assessments and remediate security findings
- Partner with security and infrastructure teams to resolve vulnerabilities and improve identity security
- Evaluate identity technologies and design scalable future-state solutions
- Create detailed technical designs, configurations, operational procedures, and support documentation
- Provide troubleshooting and technical support for Active Directory, Azure/Entra, PAM, and related identity platforms
Interested candidates may submit their resumes online or call at 310-906-4780 for further information regarding the position
NS-ADED-NS_1791403026