Lead Active Directory Services

Job Description

Summary*

As the Lead for Active Directory (AD) Services will be accountable for driving the design, operation, and strategic roadmap of Active Directory (AD) and Azure Active Directory (Azure AD) across global enterprise environment. This role ensures the stability, security, and scalability of directory services while serving as a technical authority and escalation point for complex issues. The Lead will guide engineering teams, manage relationships with managed services, and work with cybersecurity, IT operations, and business stakeholders to deliver robust identity services aligned with compliance, security, and business objectives.

Responsibilities:

1. Strategic Leadership o Define and own the global AD and Azure AD services strategy, ensuring alignment with IAM and overall IT security objectives. o Act as subject matter expert and escalation point for complex technical and operational directory service challenges. 2. Design and Implementation of Directory Services: o Lead the architectural design, deployment, and management of Active Directory (AD) and Azure Active Directory (Azure AD) environments, ensuring they are secure, scalable, and optimized for performance. o Develop and implement policies for directory services that align with organizational security and compliance requirements, including GDPR and HIPAA. 3. Collaboration with IAM Teams: o Work closely with other IAM teams responsible for Identity Lifecycle, Privileged Access Management, Certificate Services, Application Lifecycle, Authentication, and Authorization to ensure seamless integration and consistent application of security policies across all identity-related areas. 4. Integration and Automation: o Develop and implement automation scripts and tools to streamline directory management tasks, domain provisioning, standardization in the OU structure and site provisioning & deprovisioning. o Ensure seamless integration between AD, Azure AD, and other IAM tools, enabling a unified identity and access management platform.

2. Operational Excellence o Oversee directory services operations managed by internal and external partners. o Ensure high availability, disaster recovery readiness, and performance optimization of directory services. 6. Security and Compliance: o Enforce and maintain strict security standards within directory services, ensuring that only authorized users have access to critical systems and data. o Monitor and audit directory services for compliance with internal and external regulations, identifying and mitigating any security risks. 7. Directory Services Optimization: o Continuously evaluate and optimize the performance of directory services, implementing updates and patches as necessary. o Lead efforts to migrate or upgrade directory services, ensuring minimal disruption to business operations. 8. Support and Collaboration with Managed Services: o Work closely with the IAM Managed Service team, providing them with technical guidance and support for the operational management of AD and Azure AD. o Act as an escalation point for complex directory services issues that cannot be resolved by the Managed Service team. 9. Documentation and Training: o Create and maintain comprehensive documentation for directory services architecture, processes, and policies. o Provide training and knowledge transfer to the IAM Managed Service team and other relevant stakeholders. Required Skillset: 10. Technical Expertise in Directory Services: o Extensive hands-on experience with Active Directory (AD) and Azure Active Directory (Azure AD) administration, including designing, deploying, and managing these environments in large-scale, global organizations. o Proficiency in configuring and managing Group Policies, DNS, DHCP, and other AD-related services. 11. IAM Knowledge: o Strong understanding of Identity and Access Management concepts, particularly in relation to directory services, authentication, authorization, and identity lifecycle management. o Familiarity with other IAM domains such as Privileged Access Management (PAM), Certificate Services, and SSO/MFA solutions. 12. Security and Compliance Acumen: o In-depth knowledge of security best practices related to directory services, including access controls, password policies, and audit logging. o Experience ensuring compliance with industry regulations such as GDPR, HIPAA, and other relevant standards. 13. Scripting and Automation Skills: o Proficiency in scripting languages such as PowerShell, Python, or similar, to automate directory management tasks and integrate with other IAM tools. 14. Problem-Solving and Troubleshooting: o Strong analytical skills with the ability to diagnose and resolve complex issues related to directory services. o Experience acting as an escalation point for directory services-related issues.