Platform Engineer, Active Directory

Minimum Requirements:

5–10 years of experience as an Active Directory SME
Proven experience owning, maintaining, and administering an enterprise Active Directory Domain, including schema, OUs, and permissions
Experience managing and operating Windows Domain Controllers within an enterprise IDAM environment
Strong knowledge of user management, including attributes beyond basic account and group administration
Proficiency with OU design, nested group/object membership, and domain controller promotion
Working knowledge of Kerberos authentication in Active Directory environments
Proficiency with PowerShell and Bash (Python a plus)
Familiarity with OpenLDAP commands


Key Responsibilities:

Administer, maintain, and enhance enterprise Active Directory and identity services
Manage domain controllers, directory schema, organizational structures, and access controls
Support secure user authentication, authorization, and identity lifecycle management
Configure and promote domain controllers and ensure directory availability and reliability
Collaborate with engineering teams to automate directory and server configurations


Skills and Proficiencies:

Active Directory (Domain/Enterprise administration)
Windows Domain Controllers and IDAM solutions
Access Control Lists (ACLs); programmatic ACL management preferred
Kerberos authentication
PowerShell, Bash; Python preferred
OpenLDAP
Infrastructure automation and orchestration tools
Terraform (nice to have)


Additional Information:

Hybrid work environment; on-site as needed
Primary location: Falls Church, VA