Identity Engineer - Active Directory

About the role

The Identity Engineer is responsible for administering, securing, and supporting the enterprise's directory services and public key infrastructure (PKI) environment, with a primary focus on Microsoft Active Directory Certificate Services (AD CS), certificate lifecycle management, and hybrid directory architecture (multiple Active Directory domains and Microsoft Entra ID).

What you'll do

• Administer and maintain Active Directory Certificate Services (AD CS) , including root and issuing certificate authorities, certificate templates, and enrollment policies
• Manage the end-to-end certificate lifecycle , including issuance, renewal, revocation (CRL/OCSP), and expiration monitoring across internal and public-facing systems
• Administer and maintain directory services (Active Directory, LDAP), including forest/domain architecture, replication health, group policy, OU structure
• Manage hybrid identity synchronization via Azure AD Connect/Entra Connect, including sync rules, attribute flow, and troubleshooting synchronization failures
• Support Microsoft Entra ID administration where it intersects with directory and certificate-based authentication, including certificate-based authentication (CBA)

What you need

• 10–18 yrs of experience
• Active Directory
• SIEM
• Incident response
• ISO 27001
• Python
• IAM
• Chartered Accountant

Good to have

• CISSP
• CISM
• Azure
• REST APIs
• SOX
• AWS