Identity Engineer - Active Directory

Qualifications

• Bachelor's degree recommended; equivalent experience considered.
• 10+ years of experience in cybersecurity, systems administration, or identity and access management, with 5 + years hands-on experience administering Active Directory Certificate Services (AD CS) and enterprise PKI.
• Strong understanding of PKI architecture, including certificate authority hierarchy (root/issuing CAs), certificate templates, CRL/OCSP, and key management.
• Deep working knowledge of Active Directory and LDAP, including forest/domain design, replication, group policy, and schema administration.
• Experience with hybrid identity synchronization (Entra Connect or equivalent) and Microsoft Entra ID, including conditional access and certificate-based authentication.
• Proficiency in DNS, Kerberos/NTLM authentication, and certificate chain troubleshooting across on-premises and cloud environments (AWS, Azure, GCP).
• Experience with SAML, MFA, and SSO authentication and authorization troubleshooting as it relates to directory and certificate trust.
• Scripting experience in PowerShell and Python, with working knowledge of REST APIs and certificate automation tooling.
• Experience with log analysis and SIEM integration, incident response, and root cause analysis for directory and PKI environments.
• Knowledge of compliance frameworks (SOX, PCI-DSS, NIST, ISO 27001) and zero trust security principles.
• Microsoft Certified: Identity and Access Administrator (SC-300) or equivalent certification preferred; cloud platform or security certifications (AWS, Azure, GCP, CISSP, CISM, Security+) a plus.
• Strong communication and documentation skills, with the ability to explain technical concepts to non-technical stakeholders and train end users and application teams.
• Ability to operate effectively across enterprise and OpCo environments, balancing global consistency with local context across multiple time zones and cultures.
• Alignment with Ralliant values and the Ralliant Business System (RBS), including continuous improvement, transparency, and ownership.
• #LI-MG1