IAM Professional (with AD)--Wayzata, MN

Active Directory Infrastructure Engineer Added - a day ago Active Directory Infrastructure Engineer --Hybrid or Remote IT Wayzata , MN | Contract Or Related IT Jobs Marketing Campaign Analyst - Remote MN Help Desk Analyst Indianapolis , IN Senior Cloud Engineer — OTA & Firmware Management Boston , MA Product Analyst - Donor (FTE) MN Product Analyst – Donor Management / Omni-Channel (C2H) Minneapolis , MN View all jobs in this category Location: Hybrid Wazata, MN preferred Contract: about 6 months We are looking for anInfrastructure Engineer with deepActive Directory engineering and securityexperience to helpimprove and modernizetheir AD environment and extend it intoAWS / broader cloud. This person will design and operate AD architecture (domains/forests/trusts/GPO), troubleshoot health and authentication issues (replication/DNS/account lifecycle), and partner with IAM/PAM teams on privileged access controls. The role also supports integrations between AD and identity governance/authentication/certification platforms and builds standards/runbooks for operations.Hybrid near Wayzata, MN preferred. Top 3 skills: Active Directory (AD)(forests/domains/trusts,GPO, Domain Controllers, DNS/replication) Identity & Access Management (IAM)+Privileged Access(PAM, delegation models, privileged group management) AWS + AD integration(AWS Managed Microsoft AD / self-hosted,Kerberos/LDAPauthentication patterns) Nice to have Skills: Automation / modern engineering practices(Infrastructure-as-Code, CI/CD; tools likeTerraform/Ansible/Chef) Experience integrating AD withidentity governanceand/orPAM platforms(beyond basic AD admin) Multi-domain / global / multi-regionAD environments at enterprise scale Strongoperational documentationhabits (runbooks/standards) + change/incident/audit participation Experience enabling app teams to useKerberos (preferred) vs LDAP-onlypatterns Job Description: The Senior Professional, Identity & Access Management job designs, implements and oversees identity and access management systems within the organization. With minimal supervision, this job ensures secure access to resources, minimizes risk exposure, and maintains compliance with security standards. The Cargill Identity Security team is looking for an IAM professional with extensive Active Directory experience to improve our AD implementation and modernize it with extension into our Amazon Web Services (AWS) and broader cloud environment. Responsibilities include but are not limited to:

• Design, engineer, operate, and secure Active Directory forests, domains, trusts, organizational units, Group Policy, and domain controllers.
• Partner with IAM and PAM teams to design and support privileged access controls, including administrative group structures and delegated administration models.
• Monitor, troubleshoot, and remediate Active Directory health issues, including authentication failures, replication, DNS dependencies, domain controller availability, and account state incidents.
• Support integrations between Active Directory and identity governance, access request, authentication, and certification platforms.
• Develop and maintain standards, runbooks, and operational documentation for Active Directory services and domain controller operations.
• Participate in change management, incident response, audits, and continuous improvement initiatives aligned to the IAM roadmap and security strategy.
• Develop integration patterns with AWS to facilitate authentication with AD using LDAP or Kerberos
• Develop application development patterns encouraging app devs to leverage Kerberos over just LDAP

Required Qualifications include:

• Hands?on experience administering Microsoft Active Directory in large, complex enterprise environments.
• Strong understanding of Active Directory security principles, delegation models, and privileged group management.
• Experience operating Active Directory as part of an integrated Identity and Access Management (IAM) ecosystem.
• Proven troubleshooting skills across authentication, replication, DNS, account lifecycle, and access issues.
• Experience working with AWS and any of its Active Directory implementation options (e.g. Managed AD, self-hosted, etc.)
• Experience integrating Active Directory with identity governance or privileged access management platforms.
• Experience supporting global, multi?domain, or multi?region Active Directory environments.

#J-18808-Ljbffr C4 Technical Services