below marketmost similar roles pay hereabove market
This role pays more than
50%
of similar roles. Most pay
$153,670–$215,875
— the blue band above.
At the midpoint, this role pays about
$186k
versus about
$185k
for comparable roles.
Based on 240 similar postings.
Employer
About Pacific Life
Pacific Life is a life insurance company offering a wide range of life insurance, annuity, and investment products and services to individuals, businesses, and pension plans. Industry: Life Insurance & Annuities
Pacific Life currently has
57 open roles
on FindRole.
Listed pay typically runs
$145,080–$177,320
across 36 roles with salary data.
JOB TITLE: Entra ID/ Active Directory Ops Engineer
The Entra ID/ Active Directory Ops Engineer joins the Identity and Access Management department to deliver and support Entra ID and Active Directory services for enterprise infrastructure and business applications. This role involves implementing multi-year plans for workforce authentication using SSO, MFA, and conditional access policies while managing on-premise, cloud-based, and hybrid directory solutions. Key responsibilities include designing and managing AD environments, including forests, domains, GPOs, and trusts, while troubleshooting complex issues related to Kerberos, NTLM, LDAP, and DNS. The engineer will automate processes using PowerShell, Python, MS Graph, and PowerBI to improve resiliency and speed to market. The position requires expertise in MS Office365, Agile methodologies, and ITIL frameworks to ensure security standards and regulatory requirements are met across the enterprise.
Deliver and support Entra ID and Active Directory services for enterprise infrastructure and business applications.
Implement multi-year roadmaps for workforce authentication using SSO, MFA, and conditional access policies.
Develop troubleshooting processes, standards, and reporting metrics to monitor Entra ID service health.
Provide monitoring and support for integrated business applications to ensure uptime and resiliency.
Create automated solutions and self-service tools to improve operational efficiency and speed to market.
Identify and escalate project risks, issues, and roadblocks to ensure timely delivery of IAM initiatives.
Develop a program communications framework and metrics to keep stakeholders informed on IAM progress.
Contribute to the development and maintenance of information security strategy and architecture.
What we're looking for
Must have 10+ years of Information Security experience with a focus on directory services platforms like MS Active Directory, Entra ID, and Office365.
Must possess detailed knowledge in supporting integrated Entra ID applications, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Conditional Access Policies.
Must have experience managing complex Active Directory environments including forests, domains, OUs, GPOs, and trusts.
Must be able to troubleshoot complex AD issues related to authentication, replication, Kerberos, NTLM, LDAP, and DNS.
Must have experience automating processes using PowerShell/Python scripting, MS Graph, and PowerBI.
Experience with Agile methodologies and corresponding tools is required.
Must have a clear understanding of CoBIT and ITIL Frameworks.
A BA/BS in Information Systems or Computer Science and certifications like CISSP, CISM, or CISA are preferred.
IAM
MS Entra ID
MS Active Directory
Okta
Auth0
Netwrix
SAML
OIDC
FIDO2
Passkey
Windows Hello for Business
Conditional Access
ITIL
CoBIT
ISO
NIST
Directory Services
Authentication Services
User Access Management (UAM)
MS Active Directory
MS Entra ID
Azure
MS Office365
ServiceNow
CyberArk
SailPoint
ITSM
Directory Services
ITIL
ISO
NIST
Security Governance
Risk Management
Audit
Agile
Automation