Jobgether
Senior Directory Infrastructure engineer
- Compensation
- $94–$105 / hr
- From job posting
- Location
- US
- Arrangement
- Remote
- Employment type
- Full-time
- Level
- Senior
- Posted
- 2 November 2026 (4 days ago)
Checked 3 days agoApplications go to the employer, never to RoleSprint
About this role
Accountabilities: •
Design, implement, maintain, and optimize enterprise directory services infrastructure across Active Directory, Microsoft Entra ID, Okta Universal Directory, and LDAP environments.
•
Manage the complete lifecycle of Active Directory domains, including planning, creation, deployment, maintenance, upgrades, and decommissioning.
•
Lead complex domain consolidation, migration, and Active Directory forest restructuring initiatives.
•
Design and manage trust relationships between domains and forests to ensure secure and reliable identity operations.
•
Develop domain health monitoring strategies and proactive maintenance procedures to maintain infrastructure availability and performance.
•
Create, implement, and maintain disaster recovery plans for directory services and ensure operational resilience.
•
Develop and maintain advanced PowerShell scripts to automate directory administration, maintenance, and management activities.
•
Integrate directory services with external platforms and applications using Microsoft Graph API and REST APIs.
•
Implement identity security best practices, access management controls, and compliance requirements across enterprise environments.
•
Manage directory synchronization technologies, including Azure AD Connect and Okta integration agents.
•
Support modern identity security approaches, including Just-In-Time access, Privileged Identity Management, continuous validation, and Zero Trust principles.
•
Develop and maintain comprehensive technical documentation covering directory architecture, configurations, and operational procedures.
•
Provide advanced troubleshooting and escalation support for critical directory infrastructure incidents.
•
Collaborate with security, infrastructure, and engineering teams to deliver complex identity solutions and continuously improve enterprise directory services.
Requirements:
•
Bachelor's degree in a relevant technical discipline or equivalent qualifications.
•
At least 6 years of hands-on experience with enterprise directory services, including Active Directory, Microsoft Entra ID, Okta Universal Directory, and LDAP.
•
Minimum 5 years of experience managing the Active Directory domain lifecycle, including domain creation, upgrades, maintenance, and decommissioning.
•
At least 5 years of advanced PowerShell scripting experience , particularly in automating directory management and infrastructure operations.
•
Minimum 5 years of experience integrating directory management solutions through Microsoft Graph API and REST APIs.
•
Strong understanding of identity security best practices, enterprise access management, and regulatory compliance requirements.
•
At least 5 years of experience with directory synchronization technologies, such as Azure AD Connect and Okta integration agents.
•
Minimum 5 years of experience working with multi-forest and hybrid identity environments.
•
At least 5 years of experience designing and implementing complex enterprise directory architecture solutions.
•
Strong knowledge of identity infrastructure administration, domain architecture, and enterprise authentication environments.
•
Ability to troubleshoot complex technical issues and deliver scalable, secure, and reliable infrastructure solutions.
•
Excellent analytical, problem-solving, and technical documentation skills.
•
Strong communication and collaboration abilities, with the capacity to work effectively across security and engineering teams.
Preferred qualifications:
•
Relevant industry certifications, such as Microsoft 365 Certified: Identity and Access Administrator or Okta Professional.
•
Experience with Infrastructure as Code (IaC) tools such as Terraform and Ansible.
•
Knowledge of modern authentication protocols, including SAML, OAuth, and OpenID Connect (OIDC).
•
Experience designing, implementing, and managing Group Policy environments.
•
Expertise in domain controller sizing, placement, capacity planning, and performance optimization.
•
Experience with domain functional level upgrades and cross-domain migrations.
•
Familiarity with CI/CD pipelines for infrastructure automation.
•
Practical experience implementing Zero Trust architecture and modern identity security frameworks.
Benefits:
•
Competitive hourly compensation ranging from $94 to $105 per hour .
•
Fully remote work arrangement within the United States.
•
Opportunity to work on complex enterprise identity and directory infrastructure projects.
•
Exposure to modern technologies, including Microsoft Entra ID, Okta, Active Directory, and cloud-based identity solutions.
•
Opportunity to contribute to enterprise security initiatives and infrastructure modernization.
•
Professional growth through challenging technical projects and advanced identity architecture responsibilities.
How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
Work location
- US
Related jobs
Ready to make a decision?
This role is either worth your time or it isn’t.
Analyze the posting against your experience, see the gaps clearly, and build the right materials only if the opportunity makes sense.
Nothing is submitted automatically. You choose what happens next.
About this listing
Published on Lever under the board identifier Jobgether, which is the name the employer’s own job board carries. RoleSprint has not verified the company’s registered or trading name, so it is shown exactly as published rather than tidied up.
RoleSprint is not the employer and not a recruiter. Applications are made on the employer’s own site and never reach us; what RoleSprint does is help you decide whether a role is worth your time and prepare for it if it is.
Published 2 November 2026, last checked 3 days ago. A posting stops being advertised here 90 days after the employer published it, and one the employer takes down is marked closed rather than quietly removed.