Lead Security Engineer

Lead and manage Citi’s Active Directory and Hybrid Entra ID environment, ensuring secure, stable, and compliant identity services. The role focuses on operations, incident resolution, engineering collaboration, and continuous improvement of enterprise directory services. Primary Responsibilities Manage and maintain Microsoft Active Directory and Azure AD (Entra ID) environments, including AD Connect infrastructure Ensure high availability, security, and compliance of identity platforms Troubleshoot and resolve complex AD/identity-related incidents, performing root cause analysis Drive incident management, repeat issue elimination, and permanent fixes Provide senior‑level support across AD, DNS, Kerberos, LDAP, Group Policies, and Windows Server technologies Collaborate with global engineering and operations teams to deliver next‑gen identity solutions Maintain documentation and improve operational processes and procedures Lead cross‑team coordination calls for incident resolution and project delivery Participate in on‑call rotation for major incidents and outages Partner with risk and compliance teams to enforce identity governance and system standards Identify and implement process improvements and operational efficiencies Deliverables Stable, secure, and compliant identity and directory services platform Effective incident management with long‑term problem resolution Strong cross‑team engineering collaboration and continuous service improvement Required Skills & Expertise 5+ years of hands‑on experience with multi‑domain Active Directory and Microsoft Entra ID 8+ years of experience supporting Windows Server environments Strong expertise in: Active Directory (LDAP, Kerberos, DNS, Sites & Services) Azure AD Connect Conditional Access Policies Azure infrastructure (Subscriptions, Resource Groups, ExpressRoute) AD backup and recovery Performance monitoring and troubleshooting Strong incident and problem management experience in enterprise environments Ability to work across global teams and break organizational silos Strong communication skills for technical and senior stakeholder engagement Preferred Experience PowerShell scripting experience SQL Server knowledge Experience balancing operational stability with strategic identity transformation initiatives #J-18808-Ljbffr