Vice President Active Directory Engineer

Goldman Sachs

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Jersey City, NJ
Salary
$130,000–$250,000 / yr
Posted
75 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $170k
This role $190k
$116k most similar roles pay here $264k

This role pays more than 74% of similar roles. Most pay $142,400–$197,750 — the shaded band above. At the midpoint, this role pays about $190k versus about $170k for comparable roles.

Based on 240 similar postings.

Employer

About Goldman Sachs

Goldman Sachs is a leading global investment banking, securities, and investment management firm providing financial services to corporations, financial institutions, governments, and individuals.

Goldman Sachs currently has 134 open roles on FindRole.

Listed pay typically runs $137,000–$250,000 across 55 roles with salary data.

Most-posted roles

View all roles at Goldman Sachs

At a glance

TL;DR · Vice President Active Directory Engineer

Vice President - Active Directory Engineer joins the Workforce Identities Engineering team within the Identity and Access Management function to support on-premises and cloud-hosted Active Directory environments. This role involves designing, engineering, and deploying solutions to ensure security, resiliency, and high availability for critical infrastructure. The engineer will manage systems lifecycles, perform vendor management, conduct product benchmarking, and coordinate with infrastructure teams for various projects. Key responsibilities include integrating applications with Active Directory Domain Services, managing Single Sign On and Federated Identity protocols, and automating tasks using PowerShell and Pester. Technical requirements include expertise in LDAP, Kerberos, Entra ID, Office 365, and Certificate Services. The role addresses the challenge of securing complex environments involving multiple forests and trust relationships across firewalled networks while ensuring performance and scalability for diverse internal and external use cases.

What you'll do

  • Design, engineer, and deploy solutions to ensure the security and resiliency of Active Directory platforms.
  • Manage the lifecycle of systems while evaluating existing solutions for performance optimizations and enhancements.
  • Coordinate with infrastructure teams to execute large-scale projects and manage vendor relationships.
  • Perform industry analysis and product benchmarking to promote new standards and tools.
  • Automate Active Directory management tasks and detect abnormal system behavior using PowerShell.
  • Implement business continuity, recovery strategies, and hardening protocols for Domain Services environments.
  • Integrate diverse services such as Exchange, Entra ID, and Office 365 into the Active Directory environment.
  • Develop and test automated scripts using frameworks like Pester to improve operational efficiency.

What we're looking for

  • Minimum of five years of experience managing Active Directory infrastructure in medium to large enterprise environments.
  • Experience with projects in the Single Sign On and Federated Identity space.
  • Deep technical knowledge of complex Active Directory environments including multiple forests, trust relationships, and firewalled networks.
  • Experience architecting and implementing business continuity, recovery, and hardening strategies for Active Directory Domain Services.
  • Proficiency in designing, developing, and testing software in PowerShell using frameworks like Pester.
  • Protocol-level expertise with LDAP and Kerberos.
  • Experience integrating solutions such as Exchange, Entra ID, Office 365, Certificate Services, and smartcard authentication.
  • Knowledge of Identity Management products or SSO/Federated Identity products (preferred); experience with ADLDS or Microsoft Defender ecosystem (preferred).

More like this

Similar roles

Active Directory Services / Entra Engineer

AbbVie

Chicago, IL 45 days ago $84,500$162,000
Microsoft Entra ID Azure AD Active Directory PowerShell Certificate Services AD CS MFA SSO Zero Trust RBAC SCEP NDES SpecOps LastPass AWS Cloud Platform PKI NIST ISO 27001
5+ yrs exp Hybrid

Active Directory Services / Entra Engineer

AbbVie

Chicago, IL 45 days ago $84,500$162,000
Microsoft Entra ID Azure AD Active Directory PowerShell Certificate Services AD CS MFA SSO Zero Trust RBAC SCEP NDES SpecOps LastPass AWS Cloud Platform PKI NIST ISO 27001
5+ yrs exp Hybrid

Senior Ping Identity Engineer

Booz Allen Hamilton

Scott AFB, IL 3 days ago $86,800$198,000
Ping Federate Entra ID ADFS SAML 2.0 OAuth 2.0 OpenID Connect RBAC ABAC Active Directory LDAP Zero Trust MFA AWS Azure Google Cloud SCIM Okta Workflows Python PowerShell Bash

Ping Identity Engineer

Booz Allen Hamilton

Scott AFB, IL 3 days ago $86,800$198,000
Ping Federate Entra ID ADFS SAML 2.0 OAuth 2.0 OpenID Connect SSO RBAC ABAC Active Directory LDAP Zero Trust MFA SCIM Okta Workflows Python PowerShell Bash AWS Azure

Senior Identity Security Engineer

CoStar Group

Arlington, VA +1 17 days ago $133,000$203,000
Okta Microsoft Entra ID PingID Active Directory SAML OAuth OIDC Kerberos FIDO2 Python PowerShell Bash SIEM CI/CD MDM Intune Jamf JumpCloud PKI Zero Trust
4+ yrs exp

IAM Federation Services Engineer

AbbVie

Remote 9 days ago $84,500$162,000
Microsoft Entra ID Okta Ping Federate SAML 2.0 OIDC OAuth 2.0 PowerShell MFA FIDO2 Active Directory CIAM SSO Identity and Access Management NIST ISO 27001
5+ yrs exp Remote