Senior Directory Infrastructure engineer with 10Yrs experience

Senior Directory Infrastructure Engineer

Role: Senior Directory Infrastructure Engineer

Client: DC Government

Location: Washington, DC (Remote)

Key Responsibilities:

• Design, implement, and maintain enterprise directory services infrastructure

Required Qualifications:

• 5+ years of hands-on experience with enterprise directory services (Active Directory, Entra ID, OKTA Universal Directory, LDAP)
• Demonstrated experience with AD domain lifecycle management including domain creation, upgrades, and decommissioning
• Advanced PowerShell scripting skills with demonstrable experience automating directory management tasks
• Proven experience with Microsoft GraphAPI and REST API integration for directory management
• Experience with directory synchronization technologies (Azure AD Connect, OKTA integration agents, etc.)
• Strong understanding of identity security best practices and compliance requirements
• Experience with multi-forest and hybrid identity environments
• Ability to design and implement complex directory architecture solutions

Preferred Qualifications:

• Relevant certifications (Microsoft 365 Certified: Identity and Access Administrator, OKTA Professional, etc.)
• Experience with Terraform, Ansible, or similar IaC tools for directory infrastructure
• Knowledge of SAML, OAuth, OIDC, and other modern authentication protocols
• Experience with Group Policy design and management
• Expertise in domain controller sizing, placement, and performance optimization
• Experience with domain functional level upgrades and cross-domain migrations
• Familiarity with CI/CD pipelines for infrastructure automation
• Experience with implementing Zero Trust architecture
• Manage the complete lifecycle of AD domains including planning, deployment, maintenance, upgrades, and decommissioning
• Lead domain consolidation, migration, and forest restructuring projects
• Develop domain health monitoring and proactive maintenance procedures
• Create and execute disaster recovery plans for directory services
• Develop and maintain automation scripts using PowerShell for directory management tasks
• Interface with directory services using GraphAPI and REST API for custom integrations
• Implement and maintain security best practices for directory services
• Design and manage trust relationships between domains and forests
• Create and maintain documentation for directory architecture and operational procedures
• Provide escalation support for critical directory service incidents

This is a remote position.

Compensation: $85.00 - $90.00 per hour