Directory Services Engineer

Overview

TheDirectory Services Engineer within theAlight Identity Security team is responsible for the security, reliability, and availability of enterprise directory and identity platforms. This role supportsTier 0 and Tier 1 identity systems, safeguards privileged access, integrates identity and security technologies, and provides operational and incident‑response support across the enterprise.

The ideal candidate will bring strong hands‑on experience with directory services, cloud platforms, IAM technologies, scripting and automation, and modern authentication and federation protocols.

Key Responsibilities

Platform Administration & Operations

• Ensure directory services platforms are secure, compliant, resilient, and highly available.
• Maintainperformance, availability, and resilience of Tier 0 and Tier 1 identity systems.
• Proactively monitor systems for performance, stability, and reliability.
• Protectprivileged identities by enforcing least‑privilege principles using RBAC, ACLs, and Just‑In‑Time access.
• Support security, compliance, and regulatory audits.
• Participate inincident response activities, including off‑hours support as required.

Integration & Engineering

• Lead and support theintegration, lifecycle management, and engineering of identity and security platforms.
• Collaborate withapplication development teams and end users to resolve incidents and complete service requests.
• Providetechnical leadership and guidance to operational support team members.
• Support architectural decisions related toidentity, authentication, authorization, and platform resilience.

Upgrades, Support & Documentation

• Coordinateplatform maintenance, upgrades, and operational support activities.
• Develop and maintaintechnical documentation, scripts, code repositories, and training materials.
• Ensure properknowledge transfer, documentation, and operational readiness during platform changes and upgrades.
• Support ongoingoperational improvements through documentation and process refinement.

Required Qualifications

• 7+ years of professional experience in Directory Services and/or Identity & Access Management (IAM).
• Deep understanding ofActive Directory Domain Services (AD DS) architecture, including forests, domains, trusts, FSMO roles, replication, and multi‑site topology.
• Hands‑on experience integrating with IAM platforms such as Saviynt, Microsoft Entra ID (Azure AD), SailPoint, Okta, and PingFederate.
• Strong knowledge ofLDAP concepts, schema extensions, and directory query optimization.
• Experience withPKI and certificate lifecycle management, including CRLs, NDES/SCEP, and AD‑integrated certificate services.
• Proficiency inscripting and automation (PowerShell, Bash, Python, Ansible).
• Strong experience designing and managingGroup Policy Objects (GPOs).
• Extensive experience withcloud platforms (AWS, Azure) and service models (IaaS, PaaS, SaaS), including cloud networking concepts.
• Excellent written and verbal communication skills.

Preferred Qualifications

• Experience managing directory platforms such asActive Directory, eDirectory, and Radiant Logic (FID/SaaS).
• Familiarity withCI/CD pipelines and Infrastructure‑as‑Code tools (e.g., Terraform).
• Experience withMicrosoft Entra Conditional Access andEntra Connect.
• Knowledge ofPrivileged Access Management (PAM) solutions.
• Strong understanding ofauthentication and authorization principles.
• Experience withITSM platforms (ServiceNow).
• Hands‑on knowledge ofSSO and federation standards (SAML 2.0, OAuth 2.0, OIDC).
• Proven troubleshooting skills grounded inengineering best practices.
• Familiarity withAgile methodologies (Scrum, SAFe, Kanban).
• Experience with monitoring platforms and tuning alerts for performance, availability, and connectivity.
• Broad systems engineering experience includingDNS, DHCP, TCP/IP, clustering, SIEM, IIS/Tomcat, virtualization (VMware/Hyper‑V), and load balancing (F5, NLB, ALB).

We offer you a competitive total rewards package, continuing education & training, and tremendous potential with a growing worldwide organization.
 

DISCLAIMER:

Nothing in this job description restricts management's right to assign or reassign duties and responsibilities of this job to other entities; including but not limited to subsidiaries, partners, or purchasers of Alight business units.