Cybersecurity Engineer II

Department Overview

IAM Engineer with advanced experience designing and engineering Active Directory (AD)–centric identity solutions across complex enterprise environments. Strong expertise in directory services, authentication, and access control, with a focus on highly available AD infrastructure, domain/forest architecture, and secure identity operations. Proven ability to modernize and optimize directory services, strengthen authentication security, and improve enterprise resilience through engineering and automation.

Duties

• Help lead the design, implementation, and optimization of Active Directory environments, supporting enterprise identity and authentication services.
• Engineer and maintain multi-domain and multi-forest AD architectures, ensuring high availability, scalability, and security.
• Design and manage AD site topology, replication strategies, and domain controller placement to optimize performance and resilience.
• Administer and enhance authentication mechanisms (Kerberos, NTLM, legacy encryption), strengthening identity security and reducing attack surface.
• Develop and enforce Group Policy (GPO) frameworks to standardize security configurations and ensure compliance across enterprise systems.
• Implement and manage DNS integration with Active Directory, ensuring reliable name resolution and directory service functionality.
• Drive identity lifecycle processes within on-premises systems, improving provisioning, deprovisioning, and access consistency.
• Design and enforce privileged access models, including tiered administration and least privileged access strategies.
• Perform root cause analysis on directory services incidents and implement long-term engineering fixes to improve stability.
• Support and optimize AD-integrated applications and authentication dependencies across enterprise environments.
• Partner with infrastructure, security, and application teams to deliver directory-first security solutions.
• Define and maintain Active Directory standards, policies, and operational procedures aligned with enterprise security requirements.
• Build detailed engineering documentation, including AD architecture, replication design, and authentication flows.
• Support audit and compliance initiatives, ensuring AD configurations meet regulatory and security standards.
• Continuously improve AD platforms through automation, standardization, and modernization initiatives.

Qualifications

Technical Skills

• Directory Services: Active Directory (AD DS), Multi-Forest Environments, Trust Relationships
• Core AD Services: DNS, Group Policy, AD Replication, Sites & Services
• Authentication & Security: Kerberos, NTLM, Privileged Access Management, Tiering Models
• IAM Platforms: Saviynt, BeyondTrust
• Automation & Scripting: PowerShell, AD automation tooling
• Infrastructure & Operations: Domain Controllers, Backup/Recovery, AD Health Monitoring
• Security Frameworks: Least privilege, identity security, enterprise hardening
• ITSM & Dev Tools: ServiceNow, Jira, Confluence
• Data & Reporting: Directory auditing, access reviews, compliance reporting
  
  
  

Education & Certifications

• Bachelor’s Degree in Information Technology, Computer Science, Cybersecurity, or related field
• Relevant Microsoft or identity/security certifications are a plus