Senior Active Directory Engineer

Employment Type: Contract-to-Hire (FTE conversion after 6 months)

Location: Onsite/Hybrid (mostly on-site with some remote days)

• Miami, FL (preferred)
• Fort Lauderdale or Palm Beach area offices also considered

Work Schedule

40 hours/week (8am – 5pm)

Team: Authentication Services

Interview Process

2 rounds (Video > Onsite)

About the Role

Our client, a large enterprise in the energy and utilities sector, is looking for a Senior Active Directory Engineer to join its Authentication Services team on a 6-month contract-to-hire. This person should be able to grow into an architect-level role.

The team owns architecture, engineering, standards, projects and automation for the company's identity infrastructure, while day-to-day operations are handled by an on-prem support team and a managed services partner. You will work directly with the hiring manager and the team's senior architect. The role covers on-prem Active Directory and Azure/Entra ID, plus DNS, DHCP and internal PKI, and offers a chance to shape the next generation of the environment, including domain consolidation and an upcoming M&A integration.

Key Responsibilities

• Architect, engineer and modernize a multi-domain, multi-forest on-prem Active Directory environment, keeping it secure and compliant
• Build automated, monitored, supportable solutions that replace manual work
• Engineer Azure/Entra ID services: SSO, app registrations, secrets and non-human identities
• Own DNS, DHCP and internal PKI/certificate services, extending certificate automation through ServiceNow
• Lead domain consolidation and M&A integration efforts
• Partner with the IAM team on a new identity governance tool and object lifecycle automation
• Delegate and automate operational work with the on-prem support team and managed services partner
• Assess the environment and recommend improvements and next-gen tooling
• Support occasional after-hours changes and business continuity events

Required Qualifications

• 10+ years of experience in enterprise infrastructure, with senior-level Active Directory engineering
• Deep on-prem Active Directory experience: multiple domains and forests, legacy architecture, and keeping it secure, compliant and modernized (Azure-only backgrounds will not be a fit)
• Automation mindset: scripting or coding skills (PowerShell preferred) and a track record of building automated, monitored, supportable solutions instead of manual "click, click" work

Preferred Qualifications

• Azure / Entra ID (SSO, app registrations, secrets, non-human identities)
• DNS, DHCP and internal PKI / certificate services
• PowerShell, Python, Ansible, Terraform
• ServiceNow, especially spoke knowledge of AD, Azure, AWS and GCP connectors
• CyberArk, Tanium, VMware, AWS, Google Cloud
• Domain consolidation, M&A integration, identity governance or object lifecycle automation experience
• Microsoft on-prem certifications (a plus, not required)