This role pays more than
52%
of similar roles. Most pay
$158,782–$235,187
— the shaded band above.
At the midpoint, this role pays about
$192k
versus about
$197k
for comparable roles.
Based on 240 similar postings.
Employer
About Blackstone Inc
Blackstone Inc. operates as a global investment firm specializing in real estate, private equity, credit, infrastructure, and life sciences, focusing on creating long-term value for institutional and individual investors.
Blackstone Inc currently has
19 open roles
on FindRole.
Listed pay typically runs
$160,000–$200,000
across 19 roles with salary data.
The Workforce Identity and Directory Services, VP - Enterprise Technology serves as the primary owner of all Active Directory infrastructure and strategy across on-premises, hybrid, and cloud environments. This leader designs, governs, and modernizes the enterprise identity platform by developing long-term roadmaps, implementing tiering models, and migrating workloads to Microsoft Entra ID. The role involves managing AD DS, DNS, DHCP, PKI, and Group Policy architecture while enforcing zero trust principles and moving toward modern authentication standards. Key technical requirements include expertise in Microsoft 365, PowerShell, Terraform, and the Microsoft Graph API. Candidates must be proficient in protocols like SAML, OAuth 2.0, and OpenID Connect, while utilizing tools such as BloodHound or PingCastle. The role addresses critical security and scalability challenges within a highly regulated financial services environment to ensure resilient identity infrastructure.
Own the strategy, infrastructure, and operations for all Active Directory environments across on-premises and cloud platforms.
Execute a long-term roadmap to modernize identity systems, including forest consolidation and migration to Microsoft Entra ID.
Architect and govern core directory services including AD DS, DNS, DHCP, and PKI for high availability and security.
Manage hybrid identity configurations, including Azure AD Connect, SSO, and automated directory synchronization.
Design and enforce Group Policy architecture, security baselines, and policy inheritance across complex organizational units.
Implement zero trust principles by enforcing modern authentication standards and migrating away from legacy protocols like NTLM.
Oversee identity governance for external collaborations, including B2B guest accounts and application permission management.
Ensure identity infrastructure complies with regulatory requirements such as SOX and NIST through proactive risk management.
What we're looking for
10+ years of experience in IT infrastructure with a focus on Active Directory and identity management.
At least 5 years of experience in an architect or senior engineering capacity.
Deep knowledge of Microsoft 365 from an identity and access management perspective, including Entra ID and M365 Defender.
Fluency in authentication and federation protocols such as SAML, OAuth 2.0, OpenID Connect, Kerberos, and LDAP.
Experience implementing passwordless authentication strategies, including FIDO2, Windows Hello for Business, and PKI.
Hands-on experience with Active Directory security assessment tools like BloodHound, PingCastle, or Purple Knight.
Proficiency in PowerShell, Terraform, DSC, and Microsoft Graph API for infrastructure automation.
Relevant certifications such as Microsoft Certified: Identity and Access Administrator Associate, Azure Solutions Architect Expert, or Cybersecurity Architect Expert.
Remote (Falls Church, VA)35 days ago
$170,000–$230,000
Active Directory
AD FS
Microsoft Azure
SAML 2.0
OAuth 2.0
OpenID Connect
WS-Federation
MFA
SSO
PKI
LDAP
PowerShell
Docker
Kubernetes
Zero Trust Architecture
Agile
Linux
Windows Server
Remote (Falls Church, VA)35 days ago
$170,000–$230,000
Active Directory
AD FS
Microsoft Azure
SAML 2.0
OAuth 2.0
OpenID Connect
WS-Federation
MFA
SSO
PKI
LDAP
Windows Server
Linux
PowerShell
Docker
Kubernetes
Zero Trust Architecture
Agile