Directory Engineer II

Join a team focused on strengthening and modernizing enterprise identity infrastructure. In this hands-on individual contributor role, you'll help operate and improve critical directory and authentication services-supporting secure access at scale while reducing technical debt and increasing automation. You'll work on meaningful, long-term platform improvements (not a constant break/fix environment), partnering with engineering, security, and support teams to deliver reliable, well-documented solutions.
Required Skills

• Strong, hands-on experience administering and engineering Microsoft Active Directory in an enterprise environment
• Experience with Microsoft Entra ID (Azure AD) and identity/access concepts (authentication, authorization, access controls)
• Solid working knowledge of Group Policy, DNS, directory replication, and troubleshooting authentication/directory issues
• PowerShell skills for automation, validation, reporting, and operational improvements
• Experience implementing changes in production environments, including testing, deployment, and post-change verification
• Ability to create and maintain clear documentation (procedures, configuration records, troubleshooting steps, implementation evidence)
• Familiarity with security/compliance expectations in controlled environments (vulnerability remediation, audit support, governance controls)
• Strong communication skills-able to explain technical topics clearly and collaborate across teams
• Willingness to participate in an on-call rotation as needed

Nice to Have Skills

• Experience with Ping Directory (LDAP) and/or broader Ping Identity tooling (e.g., PingFederate, PingAccess)
• Experience with Quest Active Roles Server (ARS)
• Experience supporting Windows Server (2019+ preferred)
• Exposure to cloud/virtualization platforms (e.g., Azure, AWS, VMware, Hyper-V) in support of identity services
• Experience improving recurring operational work through scripting and automation initiatives

Preferred Education and Experience

• Experience: 4+ years in identity engineering, directory services, systems administration, application support, or a related technical discipline (or equivalent hands-on experience)
• Education: Not specified-candidates with equivalent practical experience are encouraged to apply

Other Requirements

• Work location: Hybrid in the Minneapolis, MN area
• Onsite expectations: Currently anticipated 4 days/week onsite beginning in February, with the potential to move to 5 days/week onsite in the future
• Duration: Approximately 6 months (contract) - strong probability to extend.
• Must be comfortable working in an environment that includes technical debt cleanup, modernization efforts, and security remediation work
• We welcome candidates from all backgrounds and experiences and are committed to building an inclusive, respectful workplace where everyone can do their best work

Bring your Active Directory expertise, automation mindset, and passion for making systems better-apply today to be considered.