Security Engineer - Active Directory

Position: Staff Security Engineer - Active Directory

Position Summary

As an Staff Security Engineer - Active Directory on our team, you will serve as a technical authority responsible for the design, security, and long‑term health of a large enterprise, multi‑domain Active Directory environment in a hybrid on‑prem and Azure cloud configuration. This role is primarily focused on Microsoft Entra , with Active Directory serving as a foundational dependency within a hybrid identity architecture rather than the center of gravity.

You will lead cloud identity security initiatives, drive Entra and governance decisions, and act as a senior escalation point for identity‑related incidents and risks. In addition to hands‑on engineering, you will partner closely with Cybersecurity, IAM, Infrastructure, and Audit teams to ensure Entra hybrid identity services are resilient, compliant, and aligned with Zero Trust with enterprise security objectives.

Key Duties and Responsibilities

• Architect, secure, and oversee enterprise multi‑domain Active Directory environments in hybrid configurations with Azure, including Azure AD Connect and identity synchronization strategies
• Provide senior‑level administration and security engineering for Azure Active Directory (Microsoft Entra ), including identity protection, authentication methods, and access governance
• Design, implement, and continuously improve Entra l Access, privileged access models, and identity security controls
• Lead analysis and response efforts for complex identity‑related security incidents, including root cause analysis and long‑term remediation
• Oversee and harden hybrid identity integrations, including Entra / Cloud Sync, ensuring secure synchronization and minimal on‑prem dependency exposure
• Monitor, investigate, and respond to cloud‑based identity threats and anomalous authentication activity using Entra , risk detections, and SIEM tooling
• Lead root cause analysis and long‑term remediation for identity‑related security incidents spanning Entra , SaaS applications, and hybrid authentication flows
• Establish and enforce Entra standards, including tenant configuration, role management, identity lifecycle controls, and service principal governance
• Proactively identify architectural weaknesses and attack paths within cloud and hybrid identity and drive modernization and risk‑reduction initiatives
• Lead and support internal and external audits (SOX, PCI, HIPAA, etc.) related to identity, access management, and authentication controls
• Partner with Cybersecurity, IAM, Application, and Platform teams to ensure secure Entra n with enterprise SaaS, Azure, and on‑prem applications
• Develop and maintain enterprise documentation, architecture standards, and operational runbooks for Entra hybrid identity services
• Evaluate new Microsoft Entra capabilities and identity security features, making informed recommendations for adoption

Required Qualifications

• 7+ years of experience engineering enterprise identity solutions, with increasing focus on cloud‑based identity platforms
• 7+ years of advanced experience administering and securing Microsoft Entra (Azure AD) in large enterprise environments
• 7+ years of experience administering and securing Azure and Azure Active Directory
• 5+ years of experience using Power Shell and automation to manage, audit, and secure identity platforms
• 5+ years of experience in security hardening, vulnerability remediation, and identity‑related risk reduction

Preferred Qualifications

• Expert level understanding of cloud identity and access management concepts: Tiered administrative models, Privileged access management and credential protection, Group Policy design and hardening, and Secure authentication and authorization architectures
• Experience leading identity‑related security investigations and incident response
• Strong experience with monitoring and security tools such as Splunk and Microsoft Systems Center Operations Manager (SCOM)
• Experience with vulnerability and attack‑path analysis tools such as Microsoft Assessment tools, Crowd Strike, Blood Hound, or similar
• Proven experience designing and remediating controls for SOX, PCI, HIPAA, or similar regulatory frameworks