Chapter Lead, Cybersecurity

Department Overview

Senior IAM Engineer with deep expertise in architecting, transforming, and securing enterprise Active Directory (AD) environments at global scale. Proven leader in driving modernization strategies, strengthening identity security posture, and delivering resilient, highly available directory services. Recognized for influencing architectural direction, leading cross-functional initiatives, and implementing automation-driven solutions that reduce risk and improve operational efficiency

Duties

• Help lead the enterprise architecture, strategy, and roadmap for Active Directory services, aligning identity platforms with organizational security and resilience objectives.
• Own and drive large-scale AD transformation initiatives, including forest design, domain consolidation, and modernization efforts.
• Provide technical leadership and governance for multi-domain, multi-forest AD environments, ensuring scalability, availability, and security at global scale.
• Define and enforce identity security standards, including authentication hardening, legacy protocol remediation, and attack surface reduction.
• Architect and implement enterprise-grade replication topology, DNS integration, and domain controller placement strategies to optimize performance and resiliency.
• Lead the design and execution of privileged access strategies, including tiered administration models, access segmentation, and least privilege enforcement.
• Establish and govern Group Policy frameworks and security baselines, ensuring consistent configuration and regulatory compliance across the enterprise.
• Drive disaster recovery (DR) strategy and execution, including AD forest recovery planning, testing, and continuous improvement of recovery time objectives.
• Oversee identity lifecycle processes and integration with enterprise systems, improving efficiency and access governance consistency.
• Lead and mentor engineers and technical teams, providing guidance on best practices, architecture decisions, and complex incident resolution.
• Partner with security, infrastructure, and application leadership to deliver identity-centric security solutions and enterprise risk reduction initiatives.
• Serve as a senior escalation point for complex AD incidents, performing deep root cause analysis and implementing long-term engineering solutions.
• Drive automation and standardization initiatives, reducing operational overhead and increasing reliability of directory services.
• Establish and maintain engineering standards, documentation, and governance models for AD environments and identity services.
• Support and lead audit, compliance, and regulatory initiatives, ensuring enterprise directory services meet evolving security requirements.

Qualifications

• Bachelor’s Degree in Information Technology, Computer Science, Cybersecurity, or related field
• Advanced Microsoft, identity security, or cloud certifications preferred.

Technical Skills

• Directory Services: Active Directory (AD DS), Large-Scale Multi-Forest Environments, Trust Architecture
• Core AD Services: Group Policy, AD Replication, Sites & Services, DR/Recovery, DNS
• Authentication & Security: Kerberos, NTLM, Privileged Access Management, Tiering Models, Identity Hardening
• IAM Platforms: Saviynt, BeyondTrust
• Automation & Scripting: PowerShell, AD automation frameworks
• Infrastructure & Resiliency: Domain Controllers, Backup/Recovery, AD Health Monitoring
• Security Frameworks: Zero Trust principles, least privilege, enterprise identity governance
• ITSM & Dev Tools: ServiceNow, Jira, Confluence
• Data & Reporting: Directory auditing, access certifications, compliance reporting