- Company Name
- Goldman Sachs
- Job Title
- Workforce Identities Engineering - Active Directory Engineer - Associate - London
- Job Description
-
Job Title: Workforce Identities Engineering – Active Directory Engineer – Associate
Role Summary: Design, develop, and maintain secure, high‑availability on‑premises and cloud‑hosted Active Directory environments. Collaborate with global engineering teams and external stakeholders to integrate AD services with Microsoft and other enterprise platforms, automate operations, and enforce security best practices.
Expectations: Minimum 4 years of Active Directory infrastructure management in medium‑to‑large enterprises; experience in Single Sign‑On and Federated Identity solutions; strong knowledge of enterprise security, resilience, and compliance standards.
Key Responsibilities:
* Architect, implement, and evolve AD Domain Services across on‑premises and Microsoft Entra ID environments.
* Design and enforce business continuity, disaster recovery, and hardening strategies for AD infrastructure.
* Integrate AD with Exchange, Office 365, Azure AD, AD CS, SCCM, SCOM, and other key applications.
* Automate AD administration and monitoring using PowerShell scripts, including automated testing (Pester).
* Collaborate with cross‑functional teams and external partners (e.g., Microsoft) to optimize AD performance, security, and operational excellence.
* Manage lifecycle of AD components, evaluate and recommend platform enhancements, and conduct vendor/product assessments.
* Communicate technical solutions and best practices to internal clients and peers, including presentations and documentation.
Required Skills:
* Deep expertise in Active Directory (Domain Services, Lightweight Directory Services).
* Strong command of LDAP, Kerberos, and IPSec protocols.
* Advanced PowerShell development and automation, including testing frameworks.
* Experience with business continuity, recovery planning, and security hardening for AD.
* Familiarity with Microsoft Entra ID, Azure AD, and related cloud‑based identity services.
* Ability to handle multiple concurrent projects and deliver under tight timelines.
* Excellent written and verbal communication, influencing, and collaboration skills in a global setting.
Required Education & Certifications:
* Bachelor’s degree in Computer Science, Information Technology, or related field (or equivalent work experience).
* Industry certifications preferred: Microsoft Certified: Azure AD Solutions Architect Expert, Microsoft Certified: Identity and Access Administrator, or relevant AD/Identity certifications.