Sr Active Directory Engineer

Position Summary:
We are seeking a highly skilled and experienced Senior Active Directory (AD) Engineer to join our Identity and Access Management (IAM) team. This role will focus on the re-architecture and modernization of our Microsoft Active Directory and related directory services while helping advance our transition to a hybrid identity model with Azure AD and Office 365. The successful candidate will have deep technical expertise, a strong security mindset, and a passion for driving enterprise-wide improvements in identity infrastructure.

Key Responsibilities:

• Architect and Modernize Active Directory: Redesign, optimize, and secure Microsoft Active Directory and related services for performance, scalability, and compliance.
• Cloud Transformation: Support our continued integration with Entra, with a focus on Entra ID (formerly Azure Active Directory) services.
• Privileged Access Best Practices: Implement and maintain Microsoft-recommended approaches for privileged accounts and administrative roles.
• RBAC Model Migration: Lead the planning and execution of migrating to a Role-Based Access Control (RBAC) model across Active Directory and integrated systems, aligning access permissions with user roles to enhance security, reduce overprovisioning, and streamline identity lifecycle management.
• Policy and Documentation: Write and update technical documentation, policies, and procedures related to Active Directory and IAM operations.
• Security Remediation: Remediate AD configuration issues in response to findings from security platforms such as Rapid7, CrowdStrike, and other tools.
• Change Management: Evaluate and implement directory changes in alignment with change control processes and security policies.
• Collaboration: Work with cross-functional teams to support directory-related aspects of broader IT and security initiatives.

Required Qualifications:

• Bachelor's Degree in Information Technology, Computer Science, Computer Information Systems, or a related field preferred
• 7+ years of experience building distributed systems in an enterprise environment
• 5+ years of experience supporting collaboration, identity, and core infrastructure services
• 5+ years of engineering services technical experience
• 5+ years of experience building hybrid cloud infrastructure solutions
• 7+ years of hands-on experience with Microsoft Active Directory, DNS, Group Policy, and directory replication
• Strong experience with Azure AD, AAD Connect, and hybrid identity architectures
• In-depth knowledge of IAM, privileged access, RBAC, and Microsoft security best practices
• Familiarity with identity protocols (e.g., LDAP, SAML, OAuth, OpenID Connect)

Preferred Qualifications:

• Microsoft Certifications: Microsoft 365 or Azure Solutions Architect preferred
• AWS Certifications: AWS Solutions Architect preferred
• Experience with scripting/automation using PowerShell
• Familiarity with compliance frameworks such as HIPAA, HITRUST, or NIST
• IT experience in a multi-facility healthcare environment strongly preferred

Core Competencies:

• Strategic and analytical thinking with a security-first mindset
• Strong verbal and written communication skills
• Proven ability to lead technical initiatives and collaborate across departments
• Excellent problem-solving and troubleshooting skills
• High attention to detail and commitment to continuous improvement

Impellam Group and its brands are equal-opportunity employers committed to diversity and inclusion. All qualified applicants will receive consideration without regard to race, color, religion, gender, sexual orientation, pregnancy or maternity, national origin, age, disability, veteran status, or any other factor determined to be unlawful under applicable law. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application, interview process, pre-employment activity, and the performance of crucial job functions.

If you require additional disability considerations, modifications, or adjustments please let us know by contacting HR-InfoImpellamNA@impellam.com or fill out this form to request accommodations.