ARS Active Roles Server Engineer

FTE - Must be willing to work hybrid schedule for onsite (DC) and remote capabilities.cj#

Required Clearance:

· Must have Top Secret Security Clearance

XMS is seeking a Microsoft Active Directory (AD) expert with solid knowledge of Microsoft 365/Entra ID to support advanced identity management platforms. The ideal candidate will have experience with advance identity and access management systems and principles; be able to demonstrate the ability to do problem solving with PowerShell or similar scripting solutions; and be able to communicate complex ideas with business leaders to help meet business needs with technical solutions. The candidate must have prior experience in enterprise environments.

Responsibilities include:

· Learn and master new software platforms and frameworks

· Tier 3 level Active Directory troubleshooting including diagnosing complex replication and multi-forest and multi-domain issues

· Analyze current Active Directory deployments to identify both technical and operational challenges while making recommendations and developing solutions for improvement

· Analysis, design, testing and deployment of Active Directory and domain controllers

· Design, deploy, customize, and troubleshoot Entra ID Connect and Entra ID in complex environments

· Write, modify, and troubleshoot PowerShell scripts

· Develop use cases, standards, roadmaps, effectively communicating and obtaining consensus across architecture, engineering, and operations teams

· Independently manage and perform engineering role for large scale identity efforts and initiatives

· Create, review, and modify detailed architecture, standards, design documentation

Required Education & Experience

· Experience and confidence to be the subject matter expert (SME) Active Directory in large environments with hybrid connectivity to Entra ID

· Strong working knowledge of Windows Servers, domain controllers, DNS, networking fundamentals, network security zones, and tiered security models

· Ability to troubleshoot event logs, errors codes, and typical configuration issues with Windows based software

· Experience working on on-prem and cloud platforms

· Excellent writing and communication skills, including proven experience effectively communicating technical challenges and solutions to peers, customers and senior management

Desired Experience/Skills/Attributes

· Microsoft MSCE certification (Desired)

· Alternative scripting/programming skills (PowerShell, C#, VBScript)

· Experience working in Microsoft cloud (Entra/Azure)

· Experience with Microsoft identity management platforms such as Cayosoft Administrator, Quest Active Roles, ManageEngine, DRA, Adaxes, Netwrix

· Working knowledge of foundational security principles related to identity including Kerberos, SSO, PKI, cryptography, RBAC, zero trust, PAM, SAML, OIDC

· Working knowledge of LDAP and ability to comfortably construct queries

· Excellent interpersonal and team skills.

· Strong writing skills.