Staff Engineer II – Active Directory

Role Overview

• Serve in a mid-level, hands-on engineering role with a primary focus on Active Directory technologies
• Collaborate with IAM team responsible for managing, maintaining, and supporting the organization’s on premises and hybrid Active Directory infrastructure
• Identify development and operational support needs
• Contribute to Active Directory–centric design decisions
• Take ownership of assigned project and enhancement tasks
• Facilitate technical discussions and cross team collaboration
• Provide high-level engineering and functional support for Active Directory and Windows Server services
• Serve as Subject Matter Expert (SME) for Active Directory and PKI infrastructure
• Design, redesign, and maintain Active Directory forests, domains, trusts, and OU structures
• Architect and enforce Group Policy (GPO) strategy
• Design and manage permissions, delegation models, and RBAC aligned with least privileged principles
• Implement and maintain Active Directory security hardening
• Design and manage tiered administration models (Tier 0 / privileged access separation)
• Support and integrate PKI, Kerberos, and authentication controls across the environment
• Independently execute large-scale Active Directory initiatives
• Act as L3 escalation for Active Directory–related incidents
• Develop, document, and maintain runbooks, standard operating procedures, and workflows for L2 operational teams
• Configure and troubleshoot Windows desktop environments in support of VDI / Azure Virtual Desktop deployments
• Provide on-call support for critical identity and directory services incidents
• Ensure compliance with IT policies, procedures, and industry standards

Requirements

• 7+ years of related experience in IT App Support, IT Development, IT Networking, Active Directory/Azure (Entra) AD or similar field
• Bachelor's degree in related field required
• Intermediate to advanced knowledge of general Financial Services or Banking preferred
• Intermediate to advanced knowledge of core Windows Server services
• Advanced knowledge of applicable regulatory and legal compliance obligations, rules and regulations, industry standards, and practices
• Intermediate to advanced ability to see the big picture and align projects with organizational goals
• Expertise in resolving conflicts and addressing challenges as well as skilled at identifying and mitigating risks at the project level
• Proficient in governance patterns tied to intake, technical reviews, and architectural compliance
• MCSE or equivalent Microsoft certification (or equivalent real-world experience)
• Advanced speaking and writing communication skills
• May require up to 25% travel.

Tech Stack

• Azure

Benefits

• competitive salaries
• ownership stake in the company
• medical and dental insurance
• time off
• great 401k matching program
• tuition assistance program
• employee volunteer program
• wellness program