Identity Engineer - Active Directory
RemoteFull-time10–18 yrsPosted over a month ago
Leadership identity and access role at Ibwujb. Needs 10+ years and a CA. Remote.
About the role
The Identity Engineer is responsible for administering, securing, and supporting the enterprise's directory services and public key infrastructure (PKI) environment, with a primary focus on Microsoft Active Directory Certificate Services (AD CS), certificate lifecycle management, and hybrid directory architecture (multiple Active Directory domains and Microsoft Entra ID).
What you'll do
- Administer and maintain Active Directory Certificate Services (AD CS) , including root and issuing certificate authorities, certificate templates, and enrollment policies
- Manage the end-to-end certificate lifecycle , including issuance, renewal, revocation (CRL/OCSP), and expiration monitoring across internal and public-facing systems
- Administer and maintain directory services (Active Directory, LDAP), including forest/domain architecture, replication health, group policy, OU structure
- Manage hybrid identity synchronization via Azure AD Connect/Entra Connect, including sync rules, attribute flow, and troubleshooting synchronization failures
- Support Microsoft Entra ID administration where it intersects with directory and certificate-based authentication, including certificate-based authentication (CBA)
What you need
- Active Directory
- SIEM
- Incident response
- ISO 27001
- Python
- IAM
Good to have
- CISSP
- CISM
- Azure
- REST APIs
- SOX
- AWS