Identity & Access Management Subject Matter Expert

Responsibilities: Architect, administer, and secure Active Directory environments, including forests, domains, trusts, organizational units, group policy, and domain controllers. Collaborate with security and infrastructure teams to establish privileged access approaches, delegated administration models, and administrative group structures. Investigate and resolve directory service issues related to authentication, replication, service dependencies, domain controller performance, and account status. Build and support connections between Active Directory and identity governance, access request, authentication, and certification solutions. Create and maintain technical standards, operational procedures, and support documentation for directory services and domain controller management. Contribute to change control activities, security incident response, audit support, and ongoing service improvement efforts aligned with enterprise security goals. Develop authentication integration patterns for applications and platforms connecting to Active Directory, including Kerberos-based approaches where appropriate. Promote modern engineering practices by implementing automation, infrastructure as code, and repeatable deployment methods using tools such as Ansible, Terraform, or Chef. Extend directory service capabilities into AWS and broader cloud environments while maintaining security, resiliency, and compliance standards.