Senior Active Directory Engineer

Senior Active Directory Engineer

Contract-to-Hire | Miami, FL (Hybrid / Mostly On-site)

Employment Type: 6-month contract-to-hire, with conversion to full-time after 6 months

Location: Miami, FL preferred. Fort Lauderdale or Palm Beach area offices considered. Mostly on-site with some remote days.

Schedule: 40 hours/week (8am–5pm). Flexible schedule for occasional after-hours changes.

Start Date: ASAP

Interview Process: 2 rounds (video, then on-site)

About the Role

Our client, a large enterprise in the energy and utilities sector, is looking for a Senior Active Directory Engineer to join its Authentication Services team on a 6-month contract-to-hire. This person should be able to grow into an architect-level role.

The team owns architecture, engineering, standards, projects and automation for the company's identity infrastructure, while day-to-day operations are handled by an on-prem support team and a managed services partner. You will work directly with the hiring manager and the team's senior architect. The role covers on-prem Active Directory and Azure/Entra ID, plus DNS, DHCP and internal PKI, and offers a chance to shape the next generation of the environment, including domain consolidation and an upcoming M&A integration.

Key Responsibilities

• Architect, engineer and modernize a multi-domain, multi-forest on-prem Active Directory environment, keeping it secure and compliant
• Build automated, monitored, supportable solutions that replace manual work
• Engineer Azure/Entra ID services: SSO, app registrations, secrets and non-human identities
• Own DNS, DHCP and internal PKI/certificate services, extending certificate automation through ServiceNow
• Lead domain consolidation and M&A integration efforts
• Partner with the IAM team on a new identity governance tool and object lifecycle automation
• Delegate and automate operational work with the on-prem support team and managed services partner
• Assess the environment and recommend improvements and next-gen tooling
• Support occasional after-hours changes and business continuity events

Required Qualifications

• 10+ years of experience in enterprise infrastructure, with senior-level Active Directory engineering
• Deep on-prem Active Directory experience: multiple domains and forests, legacy architecture, and keeping it secure, compliant and modernized (Azure-only backgrounds will not be a fit)
• Automation mindset: scripting or coding skills (PowerShell preferred) and a track record of building automated, monitored, supportable solutions instead of manual "click, click" work

Preferred Qualifications

• Azure / Entra ID (SSO, app registrations, secrets, non-human identities)
• DNS, DHCP and internal PKI / certificate services
• PowerShell, Python, Ansible, Terraform
• ServiceNow, especially spoke knowledge of AD, Azure, AWS and Google Cloud Platform connectors
• CyberArk, Tanium, VMware, AWS, Google Cloud
• Domain consolidation, M&A integration, identity governance or object lifecycle automation experience
• Microsoft on-prem certifications (a plus, not required)