Senior Active Directory Engineer
Contract-to-Hire | Miami, FL (Hybrid / Mostly On-site)
Employment Type: 6-month contract-to-hire, with conversion to full-time after 6 months
Location: Miami, FL preferred. Fort Lauderdale or Palm Beach area offices considered. Mostly on-site with some remote days.
Schedule: 40 hours/week (8am–5pm). Flexible schedule for occasional after-hours changes.
Start Date: ASAP
Interview Process: 2 rounds (video, then on-site)
About the Role
Our client, a large enterprise in the energy and utilities sector, is looking for a Senior Active Directory Engineer to join its Authentication Services team on a 6-month contract-to-hire. This person should be able to grow into an architect-level role.
The team owns architecture, engineering, standards, projects and automation for the company's identity infrastructure, while day-to-day operations are handled by an on-prem support team and a managed services partner. You will work directly with the hiring manager and the team's senior architect. The role covers on-prem Active Directory and Azure/Entra ID, plus DNS, DHCP and internal PKI, and offers a chance to shape the next generation of the environment, including domain consolidation and an upcoming M&A integration.
Key Responsibilities
- Architect, engineer and modernize a multi-domain, multi-forest on-prem Active Directory environment, keeping it secure and compliant
- Build automated, monitored, supportable solutions that replace manual work
- Engineer Azure/Entra ID services: SSO, app registrations, secrets and non-human identities
- Own DNS, DHCP and internal PKI/certificate services, extending certificate automation through ServiceNow
- Lead domain consolidation and M&A integration efforts
- Partner with the IAM team on a new identity governance tool and object lifecycle automation
- Delegate and automate operational work with the on-prem support team and managed services partner
- Assess the environment and recommend improvements and next-gen tooling
- Support occasional after-hours changes and business continuity events
Required Qualifications
- 10+ years of experience in enterprise infrastructure, with senior-level Active Directory engineering
- Deep on-prem Active Directory experience: multiple domains and forests, legacy architecture, and keeping it secure, compliant and modernized (Azure-only backgrounds will not be a fit)
- Automation mindset: scripting or coding skills (PowerShell preferred) and a track record of building automated, monitored, supportable solutions instead of manual "click, click" work
Preferred Qualifications
- Azure / Entra ID (SSO, app registrations, secrets, non-human identities)
- DNS, DHCP and internal PKI / certificate services
- PowerShell, Python, Ansible, Terraform
- ServiceNow, especially spoke knowledge of AD, Azure, AWS and Google Cloud Platform connectors
- CyberArk, Tanium, VMware, AWS, Google Cloud
- Domain consolidation, M&A integration, identity governance or object lifecycle automation experience
- Microsoft on-prem certifications (a plus, not required)
