Identity Engineer - Active Directory

About the role

This is an exciting opportunity for a highly experienced identity and security professional to manage and strengthen enterprise directory services and Public Key Infrastructure (PKI) environments. You will take ownership of Microsoft Active Directory Certificate Services (AD CS), certificate lifecycle management, and hybrid identity architecture spanning on-premises Active Directory and Microsoft Entra ID.

What you'll do

• Administer and maintain Microsoft Active Directory Certificate Services (AD CS), including root and issuing certificate authorities, certificate templates
• Manage the complete certificate lifecycle, including issuance, renewal, revocation through CRL/OCSP, and expiration monitoring for internal and public-facing systems
• Maintain enterprise directory services, including Active Directory and LDAP, with responsibility for forest and domain architecture, replication health, Group Policy
• Manage hybrid identity synchronization through Azure AD Connect or Microsoft Entra Connect, including synchronization rules, attribute flows, and troubleshooting failures
• Support Microsoft Entra ID administration related to directory and certificate-based authentication, including certificate-based authentication, Conditional Access

What you need

• 10–18 yrs of experience
• Active Directory
• Incident response
• SIEM
• ISO 27001
• Python
• IAM
• Any graduate

Good to have

• CISSP
• CISM
• Azure
• REST APIs
• SOX
• AWS