Senior Identity System Engineer

Responsibilities: Design and implement enterprise identity infrastructure across hybrid environments Lead domain topology, forest structures, and global replication architectures Adopt and implement authentication protocols (Kerberos, OAuth, OpenID Connect, SAML) Lead initiatives around just-in-time access, privileged session monitoring, and automated access governance Integrate systems via API calls (REST, SOAP, JSON) and manage PKI lifecycle Enforce security baselines (Group Policy) and ensure regulatory compliance (SOX, HIPAA, GDPR) Mentor junior engineers and foster team knowledge growth Align identity services with zero-trust principles and evolving business needs

Key requirements: Minimum 3–4 years of relevant experience Supporting Active Directory, Domain Services, Hybrid Identities, and Entra ID Implementing SSO/MFA with SAML 2.0 and/or OIDC Maintaining Public Key Infrastructure (PKI) Identity Lifecycle & Access Governance workflows and technical integrations Experience with information security standards and procedures (HIPAA, PCI); relevant certifications are desirable Collaboration and cross-functional communication Mentoring and knowledge sharing Strong problem-solving and analytical thinking Active Directory Entra ID SSO/MFA using SAML 2.0 and/or OIDC