Sr Platform Engineer (AD/PAM)

TEKsystems is looking to hire a Senior Platform Engineer (Active Directory & PAM) for one of our media & entertainment clients. Candidates can sit out of the following locations:

Burbank/Orlando/Seattle

Job Description:

Analyze the existing life cycle management of Identities created in Active Directory and Entra and help automate and modernize the process.

Document and guide the operations team with the decommissioning of legacy instances of Active Directory.

Evaluate capabilities of services/products and design solutions to deliver future service

offerings through detailed technical analysis.

Help with compliance and remediation activities of AD, Entra and related technology platforms.

Define engineered designs, including full documentation

Follow structured methodologies for technical analysis of products and solutions

Required Qualifications & Skills

Minimum of 8 years of work experience in Identity & Access Management

Demonstrated experience designing, implementing, and integrating enterprise-level highly connected hybrid IAM solutions including:

o Active Directory

o Azure Active Directory / Entra ID

o Microsoft Identity Manager

o Active Directory Federation

o PAM Solutions

o Integrations between key services and various LDAP providers.

Experience with Cyber Ark / Idira will be a huge plus.

Experience in engineering, designing, and integrating both infrastructure components (domain controllers, sites and services, connectivity, etc.) and logical aspects (GPO management, directory structure, and management toolsets)

Experience working with and directing suppliers in an outsourced environment

infrastructure

Hands-on experience with PAM platforms (e.g., CyberArk), including privileged account vaulting, Tier 0/1/2 credential management, and privileged access workstation (PAW) deployment

Experience designing and enforcing role-based access controls (RBAC) and privileged identity management (PIM) across Active Directory and Entra ID

Experience with PKI architecture, certificate lifecycle management, and certificate authority rationalization or migration

Experience with Active Directory domain consolidation, migration, and legacy domain decommissioning

Familiarity with Entra ID governance, including cross-tenant identity governance models

Experience automating non-human (service) account lifecycle management, including provisioning, ownership enforcement, and deprovisioning

Experience conducting AD/Entra security baseline assessments and remediating identified findings

Project Work:

PAM Onboarding, AD Standardization, Lifecycle Management

Lead consolidation and decommissioning of the legacy MGMT and iDMZ Active Directory domains and their associated PKI infrastructure

Onboard privileged accounts into the PAM platform, vaulting Tier 0/1/2 credentials and enforcing zero standing privileged access across AD domains

Implement role-based access controls (RBAC) and privileged identity management (PIM) across Active Directory and Entra ID, replacing legacy, overly broad permissions

Automate provisioning and deprovisioning of non-human (service) accounts, including ownership enforcement and lifecycle management

Standardize AD architecture and governance across Enterprise Tech and business unit/segment-managed domains, including baseline security assessments

Design and pilot cross-tenant Entra ID governance to extend identity controls across business segments and partners

Deploy Privileged Access Workstations (PAW) and restrict Tier 0 administrative activity to hardened, isolated devices

Remediate high-priority security findings across AD and Entra/M365 tenants to reduce the attack surface ahead of migration

Troubleshooting & Support:

Work with security and infrastructure teams to remediate vulnerabilities.

Document configurations, policies, and procedures for future reference.

Skills

active directory, IAM, Entra ID, automation

Top Skills Details

active directory,IAM,Entra ID,automation

Experience Level

Expert Level

This is a Contract position based out of Burbank, CA.

The pay range for this position is $95.00 - $100.00/hr.

Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.

Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: Medical, dental & vision Critical Illness, Accident, and Hospital 401(k) Retirement Plan Pre-tax and Roth post-tax contributions available Life Insurance (Voluntary Life & AD&D for the employee and dependents) Short and long-term disability Health Spending Account (HSA) Transportation benefits Employee Assistance Program Time Off/Leave (PTO, Vacation or Sick Leave)

This is a hybrid position in Burbank,CA.

This position is anticipated to close on Oct 13, 2026.

About TEKsystems

We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.

The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

About TEKsystems and TEKsystems Global Services

Were a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. Were a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. Were strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. Were building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.

Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.