Job Title: Senior Professional, Identity & Access Management
Location: Wayzata, MN (Onsite)
Duration: 6 months plus
Pay Range: $70/hr - $85/hr on W2 (DOE)
The Senior Professional, Identity & Access Management job designs, implements and oversees identity and access management systems within the organization. With minimal supervision, this job ensures secure access to resources, minimizes risk exposure, and maintains compliance with security standards.
The Identity Security team is looking for an IAM professional with extensive Active Directory experience to improve our AD implementation and modernize it with extension into our Amazon Web Services (AWS) and broader cloud environment.
Responsibilities include but are not limited to:
- Design, engineer, operate, and secure Active Directory forests, domains, trusts, organizational units, Group Policy, and domain controllers.
- Partner with IAM and PAM teams to design and support privileged access controls, including administrative group structures and delegated administration models.
- Monitor, troubleshoot, and remediate Active Directory health issues, including authentication failures, replication, DNS dependencies, domain controller availability, and account state incidents.
- Support integrations between Active Directory and identity governance, access request, authentication, and certification platforms.
- Develop and maintain standards, runbooks, and operational documentation for Active Directory services and domain controller operations.
- Participate in change management, incident response, audits, and continuous improvement initiatives aligned to the IAM roadmap and security strategy.
- Develop integration patterns with AWS to facilitate authentication with AD using LDAP or Kerberos
- Develop application development patterns encouraging app devs to leverage Kerberos over just LDAP
Required Qualifications include:- Hands‐on experience administering Microsoft Active Directory in large, complex enterprise environments.
- Strong understanding of Active Directory security principles, delegation models, and privileged group management.
- Experience operating Active Directory as part of an integrated Identity and Access Management (IAM) ecosystem.
- Proven troubleshooting skills across authentication, replication, DNS, account lifecycle, and access issues.
- Experience working with AWS and any of its Active Directory implementation options (e.g. Managed AD, self-hosted, etc.)
- Experience integrating Active Directory with identity governance or privileged access management platforms.
- Experience supporting global, multi‐domain, or multi‐region Active Directory environments.
PrideGlobal and it''s affiliates offers eligible employee''s comprehensive healthcare coverage (medical, dental, and vision plans), supplemental coverage (accident insurance, critical illness insurance and hospital indemnity), 401(k)-retirement savings, life & disability insurance, an employee assistance program, legal support, auto, home insurance, pet insurance and employee discounts with preferred vendors.
Equal Employment Opportunity
PrideGlobal and it''s affiliates are an equal opportunity employer. We do not discriminate on the basis of the race, religious creed, color, national origin, ancestry, physical disability, mental disability, reproductive health decision making, medical condition, genetic information, marital status, sex, gender, gender identity, gender expression, age, sexual orientation, veteran or military status, or any other characteristic protected by applicable federal, state, or local law.
Fair Chance Employment
PrideGlobal and it''s affiliates are a Fair Chance employer. We consider all qualified applicants, including those with criminal histories, in a manner consistent with applicable state and local Fair Chance laws and ordinances, including, the California Fair Chance Act and all applicable local Fair Chance ordinances.
Accommodations
We are committed to providing reasonable accommodations to applicants and employees with disabilities. If you require a reasonable accommodation to participate in the application or interview process, or to perform the essential functions of this role, please contact us.
Only applicable for San Francisco Candidates : Under the San Francisco Lactation in the Workplace Ordinance, we will provide written notice of lactation accommodation rights, and this notice will automatically be given upon hiring, any inquiry of parental leave or lactation accommodation.
Applicant Privacy Disclosure
We collect personal information from applicants during the recruiting, pre-offer, and offer process.
During the recruiting, pre-offer process and offer process, we may collect the following categories of personal information:
- Identifiers, such as name, address, and email address.
- Professional and Employment-Related Information, such as resume, work history, education, and qualifications.
- Information Voluntarily Provided by You in connection with the recruiting and pre-offer process.
- Sensitive Personal Information, where legally permitted and necessary, such as Social Security number and date of birth.
Personal information is collected and used for the following business purposes: evaluating qualifications and eligibility for employment; communication regarding the recruitment and application process; verifying eligibility for employment; and complying with applicable legal, regulatory, and contractual obligations.
Personal information is collected and used only as necessary, and we are committed to data minimization, privacy, and providing equal employment opportunities. We are an international organization, and personal information may be accessed or processed by authorized personnel or service providers located outside the United States, subject to appropriate safeguards. We restrict use and access to personal information to authorized personnel and service providers with confidentiality and data security obligations. We maintain administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, or disclosure.
For information about our privacy practices, please review our Privacy Policy at:
If you do not consent to the collection of such personal information, please advise us immediately in writing at
#RTA
#LI-SK1
Never miss an opportunity! Create an alert based on the job you applied for.
