{bc}
Apply
workday

Consultant, IT Infrastructure

Travel + Leisure Co.
Florida, USA
Full-time
Senior · 15+ years experience
Remote
Discovered 1 weeks ago
ansibleazurepowershellpythonservicenowvmware

Full Job Posting

What You'll Bring

  • Bachelor's degree in Computer Science, Information Technology, Information Systems, Engineering, or a related technical field preferred.
  • Equivalent professional experience may be accepted in lieu of the education requirement.
  • At least one current or previously held certification, formal training credential, or equivalent demonstrated expert-level experience in Active Directory, DNS/DHCP/IPAM (DDI), enterprise PKI/certificate services, or enterprise IT infrastructure engineering.
  • Microsoft Certified: Windows Server Hybrid Administrator Associate or equivalent Windows Server / Active Directory credential preferred
  • Microsoft Certified: Identity and Access Administrator Associate preferred
  • Vendor certification in DDI/IPAM platforms (e.g., Infoblox, BlueCat, or Microsoft IPAM) preferred
  • Training or formal certification in enterprise PKI / certificate lifecycle management preferred
  • ITIL 4 Foundation or higher ITIL certification preferred
  • Microsoft Certified: Azure Administrator Associate a plus
  • VMware Certified Professional - Data Center Virtualization (VCP-DCV) a plus
  • Certification or formal training in scripting or automation tooling (e.g., PowerShell, Python, or Ansible) a plus
  • Active Directory and Identity Infrastructure Expertise
  • Expert-level knowledge of Active Directory architecture, including multi-forest and multi-domain design, trust relationships, replication topology, and Group Policy.
  • Ability to design, harden, and troubleshoot enterprise-scale directory environments and diagnose complex, cross-domain issues.
  • Ability to automate routine Active Directory administration, such as account and group lifecycle management, Group Policy deployment, and health checks.
  • DDI (DNS, DHCP, IPAM) Expertise
  • Expert-level knowledge of enterprise DNS and DHCP design, zone and scope management, and IP address management (IPAM) practices.
  • Ability to design, secure, and troubleshoot DDI services at enterprise scale, and to connect DDI design decisions to identity, network, and application dependencies.
  • Ability to automate DNS record management, DHCP scope provisioning, and IPAM workflows using scripting, APIs, or orchestration tools to reduce manual effort and improve accuracy.
  • Certificate Services (PKI) Expertise
  • Expert-level knowledge of enterprise PKI design, certificate authority hierarchy, certificate templates, and certificate lifecycle management.
  • Ability to design, secure, and troubleshoot certificate services at enterprise scale, and to connect PKI design decisions to identity, network, and application dependencies.
  • Ability to automate certificate issuance, renewal, and expiration monitoring to reduce manual effort and prevent outages caused by expired certificates.
  • Automation and Process Improvement
  • Ability to identify manual, repetitive, or error-prone Active Directory, DDI, and PKI processes and design automation that improves speed, consistency, and accuracy.
  • Working proficiency with scripting and automation tooling (such as PowerShell, Python, or Ansible) sufficient to build and maintain production automation.
  • Problem Solving and Technical Judgment
  • Demonstrated ability to troubleshoot in a crisis and lead technical resolution of complex, business-critical incidents.
  • Ability to anticipate and identify potential problems before they occur and implement solutions, including automated checks, that minimize impact on projects and users.
  • Standards, Security, and Technical Quality
  • Ability to define and enforce infrastructure engineering standards, security hardening practices, and documentation for Active Directory, DDI, and Certificate Services, including SOX, PCI, and PII requirements.
  • Focus on high availability concepts, proactive monitoring and alerting, automation, and long-term platform health.
  • Mentoring and Knowledge Sharing
  • Ability to mentor engineers through design discussions, troubleshooting, peer reviews, and documentation.
  • Ability to raise the team's overall technical maturity, consistency, and adoption of automation across Active Directory, DDI, and Certificate Services.
  • Communication and Collaboration
  • Excellent written and verbal communication skills.
  • Ability to work with cross-functional teams, outsourced vendors, and business stakeholders for project planning and issue resolution.
  • Core Domain Expertise: Active Directory
  • Active Directory (multi-forest, multi-domain)
  • Group Policy
  • Core Domain Expertise: DDI
  • DNS
  • DHCP
  • IP Address Management (IPAM)
  • Core Domain Expertise: Certificate Services (PKI)
  • Certificate authority (CA) hierarchy and management
  • Certificate lifecycle management (issuance, renewal, revocation)
  • Certificate templates and auto-enrollment
  • Automation and Scripting Tools
  • PowerShell
  • Python
  • Ansible
  • REST APIs / DDI platform automation interfaces
  • GitHub
  • Additional WINTEL Platforms (Supported as Assigned)
  • Windows Server infrastructure
  • VMware ESXi / vSphere
  • Dell EMC storage platforms
  • SCCM
  • Citrix
  • Azure fundamentals
  • Targeted Supporting Tools
  • ServiceNow
  • Monitoring and alerting platforms
  • Minimum of 15 years of experience in enterprise IT infrastructure engineering or administration in a mid-size to large environment.
  • Minimum of 11 years of hands-on experience designing, administering, and securing Active Directory environments, including multi-forest and multi-domain architectures.
  • Minimum of 8 years of hands-on experience designing and administering enterprise DNS, DHCP, and IP address management (DDI) services.
  • Minimum of 8 years of hands-on experience designing and administering enterprise PKI / Certificate Services, including certificate authority hierarchy and certificate lifecycle management.
  • Experience automating Active Directory, DDI, and PKI administration, such as account/group lifecycle management, DNS record management, DHCP scope provisioning, IPAM workflows, or certificate lifecycle management, using scripting, APIs, or orchestration tools.
  • Working knowledge of broader WINTEL infrastructure, such as Windows Server, virtualization, storage, or endpoint platforms, sufficient to support assigned work outside of core Active Directory, DDI, and PKI responsibilities.
  • Experience leading enterprise Active Directory, DDI, or Certificate Services projects such as domain upgrades, migrations, consolidations, DNS/DHCP/IPAM modernization, or certificate authority modernization.
  • Experience mentoring engineers and setting technical standards across an infrastructure engineering team.
  • Experience supporting compliance and audit requirements such as SOX, PCI, and PII.
  • Experience working in a multiple-site, multiple-vendor team environment.
  • Experience equivalent to the education requirement may be accepted in lieu of the education requirement.
  • How You'll Be Rewarded:
  • We offer a diverse range of comprehensive health and welfare benefits to associates who work 30 or more hours per week to meet your needs and support you throughout your career with us. Certain benefits may be available to associates working fewer hours where required by applicable law. Travel + Leisure Co. benefits include:
  • Note: Temporary and/or seasonal associates are ineligible for Paid Time Off.
  • Medical
  • Dental
  • Vision
  • Flexible spending accounts
  • Life and accident coverage
  • Disability
  • Depending on position, paid time off, parental leave and holidays (speak to your recruiter for additional information)
  • Wish day paid time to volunteer at an approved organization of your choice
  • 401k with employer match (subject to eligibility requirements, including tenure - speak to your recruiter for additional information)
  • Legal and identify theft plan
  • Voluntary income protection benefits
  • Wellness program (subject to provider availability)
  • Employee Assistance Program
  • Where Memories Start with You
  • Hospitality is at the heart of all we do at Travel + Leisure Co. Here, you’ll find an inclusive environment where we deliver excellence and take time to have fun, celebrate together, and support one another. We're always looking ahead to what’s next and how we can strengthen our business, its neighboring communities, and the customer experience. Join our global team and build a career where memories start with you.
  • We are an equal opportunity employer, and all applications will be considered for employment without attention to their membership in any protected class. If you require any reasonable accommodation to complete your application or any part of the recruiting process, please email your request to [email protected], including the title and location of the position for which you are applying.

Preferred Qualifications

  • Bachelor's degree in Computer Science, Information Technology, Information Systems, Engineering, or a related technical field preferred.
  • Microsoft Certified: Windows Server Hybrid Administrator Associate or equivalent Windows Server / Active Directory credential preferred
  • Microsoft Certified: Identity and Access Administrator Associate preferred
  • Vendor certification in DDI/IPAM platforms (e.g., Infoblox, BlueCat, or Microsoft IPAM) preferred
  • Training or formal certification in enterprise PKI / certificate lifecycle management preferred
  • ITIL 4 Foundation or higher ITIL certification preferred
  • Microsoft Certified: Azure Administrator Associate a plus
  • VMware Certified Professional - Data Center Virtualization (VCP-DCV) a plus
  • Certification or formal training in scripting or automation tooling (e.g., PowerShell, Python, or Ansible) a plus

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Travel + Leisure Co.

Account Executive, B2B

, USA

Discovered 2 days agoFull-time

Account Executive, B2B

, USA

Discovered 2 days agoFull-time

Room Attendant

Airlie Beach, AUS

Discovered 4 days agoPart-time

Room Attendant

Sydney, AUS

Discovered 4 days agoPart-time

Guest Experience Host & Face to Face Lead Generator

Merrijig, AUS

Discovered 1 weeks agoFull-time

Outbound Sales Agent, Remote

, USA

Discovered 1 weeks agoFull-time

Director, Public Relations

, USA

Discovered 1 weeks agoFull-time

Virtual Sales Representative

, USA

Discovered 2 weeks agoFull-time