Senior Directory Services Engineer (Active Directory Expert) Remote

Role Overview

The Senior/Principal Directory Services Engineer is the organization s top technical authority for Active Directory and core identity infrastructure. This role leads the design, modernization, security, and lifecycle management of enterprise directory services, ensuring reliability, scalability, and alignment with business and regulatory requirements.

Key Responsibilities

• Serve as the principal expert for Active Directory architecture, design, and operations across multidomain, multiforest environments.
• Lead modernization initiatives including domain consolidation, schema upgrades, AD hardening, and identity lifecycle automation.
• Architect and maintain Group Policy, DNS, DHCP, replication, trusts, and domain controller strategy.
• Oversee AD security posture: privileged access, tiering models, delegation, auditing, and Zero Trust alignment.
• Drive rootcause analysis and resolution of complex directory issues impacting authentication, authorization, and enterprise applications.
• Develop standards, runbooks, and automation using PowerShell and modern configuration tools.
• Collaborate with crossfunctional teams (Security, Cloud, Infrastructure, Applications) to ensure directory stability and performance.
• Evaluate and optimize vendor, contractor, and staffing partnerships supporting directory services.

Required Experience

• 10+ years of handson experience with Active Directory in large, complex enterprise environments.
• Expertlevel knowledge of AD architecture, domain controllers, replication, GPOs, DNS/DHCP, trusts, and security models.
• Strong experience with PowerShell scripting and automation.
• Deep understanding of identity security, privileged access management, and Zero Trust principles.
• Proven ability to lead largescale directory upgrades, migrations, and remediation efforts.

Preferred Qualifications

• Background in AD forest recovery, DR planning, and cyberresiliency hardening.
• Microsoft certifications (MS102, AZ104, SC300) or equivalent is a plus