Senior Information Security Engineer, Directory Services

What you'll do

• Design, implement, and maintain secure Active Directory environments including Group Policy, trust relationships, and authentication services.
• Engineer and manage Microsoft Entra ID security controls such as Conditional Access, MFA, and Privileged Identity Management.
• Secure enterprise virtual directory services using Radiant Logic to integrate multiple identity repositories and attributes.
• Manage Linux authentication and authorization integrations including LDAP, Kerberos, SSSD, and certificate-based authentication.
• Develop and maintain hardening baselines, security standards, and control frameworks for all identity platforms.
• Create monitoring and reporting capabilities for sign-in activity, authentication events, and security posture metrics.
• Investigate directory service security incidents and develop detection content using SIEM platforms like Splunk or Microsoft Sentinel.
• Produce technical documentation and architecture diagrams to support audit requirements and regulatory examinations.

What we're looking for

• 4+ years of Information Security Engineering experience or equivalent through work, training, military service, or education.
• 4+ years of experience in Active Directory, Microsoft Entra ID, Radiant Virtual Directory, or Linux security platforms.
• 4+ years of experience in identity governance, authentication technologies, privileged access management, and enterprise security controls.
• Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, or related field (preferred).
• 7+ years of Information Security, Identity Security, or Infrastructure Security experience (preferred).
• Experience with Radiant RBDS platform, LDAP, and directory service architectures (preferred).
• Experience securing Linux platforms and authentication services (preferred).
• Strong understanding of Kerberos, LDAP, SAML, OAuth, and MFA; PowerShell automation and scripting (preferred).