Lead Active Directory Engineer (Antioquia)

About the client Our customer is the European online car market with over 30 million monthly users, with a market presence in 18 countries. As a Lead Active Directory Engineer, you will play a pivotal role in shaping the future of online car markets and enhancing the user experience for millions of car buyers and sellers. Project Overview We require a Lead Active Directory Engineer to assess, clean up, and harden multiple inherited single‑forest, single‑domain Active Directory environments. These environments require standardization, security hardening, and alignment with current best practices. The focus will be on improving AD structure, security posture, Group Policy hygiene, and operational consistency, while also evaluating long‑term viability and integration with enterprise IAM platforms. This is a hands‑on senior role requiring deep expertise in Active Directory architecture, security, identity integration, and remediation of legacy configurations, including alignment with industry audit and compliance standards (e.g., PCI DSS). Requirements
- EDT Timezone work hours
- Extensive hands‑on experience (typically 7+ years) with Active Directory engineering and administration
- Proven experience performing AD clean‑up, consolidation, or post‑transition integration work
- Strong expertise in:
- Active Directory (single‑domain environments at scale)
- Group Policy design, cleanup, and optimization
- OU design and delegation models
- Demonstrated experience with:
- AD security hardening (tiered admin model, least privilege, attack surface reduction)
- Identifying and remediating:
- Stale objects (users, computers, groups)
- Legacy permissions and misconfigurations
- GPO sprawl and conflicts
- Experience integrating Active Directory with IAM/IdP platforms, including:
- Azure AD / Entra ID, Okta, etc
- SSO, federation, and identity synchronization (e.g., AAD Connect or equivalent)
- Role‑based access control (RBAC) and identity lifecycle management
- Experience working Postúlate en Kit Empleo: kitempleo.com.co/empleo/1axxz8