Identity & Authentication Management Engineer

The Position

Join our Cyber Security - Identity & Authentication Management (IAM) Operations team as a Senior Systems Engineer – Authentication Operations. In this role, you will operate, secure, and modernize the directory and authentication services that enable trusted access across our global enterprise.

Working across Active Directory, Microsoft Entra ID, Multi-Factor Authentication (MFA), hybrid identity, and Public Key Infrastructure (PKI), you will perform authorized privileged administration within a controlled enterprise access model. You will use dedicated administrative identities, Privileged Access Workstations or other secured admin workstations, and just-in-time role activation while collaborating with global teams to maintain secure, resilient, and compliant services.

Tasks and responsibilities

• Provide L3 operational support for Active Directory, Microsoft Entra ID, MFA, hybrid identity, and PKI services.
• Perform authorized privileged administration activities in Active Directory and Microsoft Entra ID using dedicated administrative identities, Privileged Access Workstations or secured admin workstations, and just-in-time role activation through Privileged Identity Management.
• Administer and troubleshoot Active Directory in complex multi-domain and multi-forest environments, including domain controllers, replication, Sites and Services, DNS dependencies, and Group Policy.

• Maintain the supporting infrastructure for highly critical authentication systems, including Windows, hardware, connectivity, etc.

• Support Active Directory backup, recovery, and disaster-recovery testing to ensure directory-service resilience and recoverability.
• Operate within tiering or enterprise access models and securely manage privileged groups, service accounts, administrative role delegation, and least-privilege controls.
• Perform security hardening and remediate identity-related vulnerabilities across Active Directory and Microsoft Entra ID.
• Provide operational support for Conditional Access, authentication methods, MFA policies, tenant-level security configurations, and controlled change execution.
• Administer and troubleshoot hybrid identity and directory synchronization using Microsoft Entra Connect or Cloud Sync.
• Manage certificate lifecycle activities, including issuance, renewal, revocation, and compliance monitoring.
• Resolve incidents and service requests; lead identity incident response and root cause analysis for recurring issues.
• Plan and execute privileged changes with appropriate peer review or four-eyes approval, validation, rollback planning, and audit evidence.
• Maintain operational documentation, knowledge articles, recovery procedures, and runbooks while driving continuous service improvement.

Requirements

Required

• Bachelor's degree in Computer Science, Information Technology, or equivalent practical experience.
• Strong experience supporting enterprise authentication, identity, or directory services in complex hybrid environments.
• Operational experience with Active Directory administration and troubleshooting, including domain controllers, replication, Sites and Services, DNS, Group Policy, privileged groups, service accounts, backup, and recovery.
• Hands-on experience with Microsoft Entra ID, Conditional Access, authentication methods, MFA, Privileged Identity Management, tenant-level security configuration, and administrative role delegation.
• Experience with Microsoft Entra Connect or Cloud Sync and troubleshooting hybrid identity and directory synchronization.
• Practical understanding of tiering or enterprise access models, dedicated administrative identities, secured administrative workstations, just-in-time access, and least-privilege principles.
• Experience with identity incident response, security hardening, vulnerability remediation, and controlled privileged change execution.
• Knowledge of PKI, certificate lifecycle management, encryption technologies, and authentication protocols such as Kerberos and LDAP.
• Experience with secure PowerShell scripting, Microsoft Graph, automation, or operational tooling.
• Experience working within ITIL-based service management, change-control, peer-review, and four-eyes approval processes.
• Familiarity with AI-assisted support, automation, or data-driven operational practices is an advantage.
• Strong analytical, problem-solving, and communication skills, with fluent written and spoken English.

Desirable

• Relevant certifications are an advantage, such as Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Cybersecurity Architect Expert, Microsoft Certified: Azure Solutions Architect Expert, or relevant Active Directory, PKI, or security certifications.