Senior Directory Infrastructure Engineer (Remote)

Job Title : Senior Directory Infrastructure Engineer (Remote)

Location : Washington, DC

Duration :  12 Months+

Job Description :

The client's Security and Engineering Team manages a variety of functions including endpoint management, Active Directory, VPN, firewalls and security incident response. The team is l seeking experienced Directory Infrastructure Engineers with extensive expertise in enterprise identity infrastructure including Active Directory, Entra ID (formerly Azure AD), OKTA Universal Directory, and LDAP environments. The resource must have a proven track record of designing and managing complex directory services across multiple platforms with particular emphasis on the complete lifecycle management of AD domains. The ideal candidates will bring expertise in modern identity approaches including Just-In-Time access, Privileged Identity Management, and continuous validation patterns that balance security with user experience.

Key Responsibilities

• Design, implement, and maintain enterprise directory services infrastructure
• Manage the complete lifecycle of AD domains including planning, deployment, maintenance, upgrades, and decommissioning
• Lead domain consolidation, migration, and forest restructuring projects
• Develop domain health monitoring and proactive maintenance procedures
• Create and execute disaster recovery plans for directory services
• Develop and maintain automation scripts using PowerShell for directory management tasks
• Interface with directory services using GraphAPI and REST API for custom integrations
• Implement and maintain security best practices for directory services
• Design and manage trust relationships between domains and forests
• Create and maintain documentation for directory architecture and operational procedures
• Provide escalation support for critical directory service incidents

Preferred Qualifications

Skills : Skills

Required / Desired

Amount

of Experience

Experience with enterprise directory services (Active Directory, Entra ID, OKTA Universal Directory, LDAP)

Required

Years

Experience with AD domain lifecycle management including domain creation, upgrades, and decommissioning

Required

Years

Advanced PowerShell scripting skills with demonstrable experience automating directory management tasks

Required

Years

Proven experience with Microsoft GraphAPI and REST API integration for directory management

Required

Years

Strong understanding of identity security best practices and compliance requirements

Required

Years

Experience with directory synchronization technologies (Azure AD Connect, OKTA integration agents, etc.)

Required

Years

Experience with multi-forest and hybrid identity environments

Required

Years

Ability to design and implement complex directory architecture solutions

Required

Years

Bachelor’s degree

Required