We are looking for an experienced Identity & Access Management specialist to support and enhance enterprise directory services. This long-term contract position focuses on strengthening Active Directory architecture, improving secure access across on-premises and cloud environments, and advancing reliable identity operations at scale. The role is well suited for someone who combines deep technical expertise in Active Directory with strong automation, documentation, and operational support capabilities.

Responsibilities:

• Architect, administer, and secure Active Directory environments, including forests, domains, trusts, organizational units, group policy, and domain controllers.
• Collaborate with security and infrastructure teams to establish privileged access approaches, delegated administration models, and administrative group structures.
• Investigate and resolve directory service issues related to authentication, replication, service dependencies, domain controller performance, and account status.
• Build and support connections between Active Directory and identity governance, access request, authentication, and certification solutions.
• Create and maintain technical standards, operational procedures, and support documentation for directory services and domain controller management.
• Contribute to change control activities, security incident response, audit support, and ongoing service improvement efforts aligned with enterprise security goals.
• Develop authentication integration patterns for applications and platforms connecting to Active Directory, including Kerberos-based approaches where appropriate.
• Promote modern engineering practices by implementing automation, infrastructure as code, and repeatable deployment methods using tools such as Ansible, Terraform, or Chef.
• Extend directory service capabilities into AWS and broader cloud environments while maintaining security, resiliency, and compliance standards.