The Workforce Identities Engineering team within the Identity and Access Management function of Foundation Engineering is looking for an experienced Active Directory systems engineer. This position will be working with a global team responsible for the architecture, design and development of systems supporting a combination of on-premises and cloud-hosted Active Directory environments for Goldman Sachs.
The Active Directory infrastructure supports wide and varied services that require high availability and performance in a secure environment. This position will help design, engineer, and deploy solutions to help ensure the security and resiliency of the Active Directory platforms within Goldman Sachs.
Responsibilities will also include coordinating with various technology infrastructure teams for infrastructure projects, managing systems lifecycle and evaluating existing solutions for optimizations or enhancements. The position will also be engaged in vendor management, industry analysis, product benchmarking, and contributing to the technical understanding and promotion of new and existing standards, solutions, and tools.
The ideal candidate will have a minimum of five years in management of an Active Directory infrastructure, as well as projects in the Single Sign On and Federated Identity space in medium to large enterprise environments.
How will you fulfill your potential:
- Work with a global team of highly motivated platform engineers and software developers delivering solutions specializing in a range of technologies with a remit to define and build integrated architectures for secure, scalable infrastructure services serving a diverse set of internal and external use cases
- Collaborate with Active Directory engineers across Goldman Sachs and Microsoft to optimize and enhance the security and runtime operations of different on-premises and cloud-hosted Active Directory instances within Goldman Sachs
- Engage with Active Directory consumers to collaborate on efficient and secure integration approaches for their application requirements
- Leverage PowerShell to automate tasks for Active Directory management to increase efficiency of the team and detect abnormal behavior of the systems
Basic Qualifications:
- Deep technical knowledge of complex Active Directory environments in medium to large enterprises that include multiple forests and trust relationships across the forests in firewalled networks
- Experience architecting and implementing business continuity plans, recovery strategies, and hardening strategies for Active Directory Domain Services environments
- Implementing controls to ensure appropriate security, performance, scalability and monitoring guidelines are achieved for the Active Directory instances.
- Experience integrating solutions with an Active Directory Domain Services environment, including scenarios such as Exchange, Entra ID, Office 365 Hosted solutions, Active Directory Certificate Services, and smartcard authentication scenarios.
- Protocol-level expertise with LDAP and Kerberos
- Working knowledge of Identity Management, Single Sign On and Federated Identity principles
- Proficiency in designing, developing, and testing software in PowerShell, leveraging automated testing frameworks such as Pester.
- Fundamental understanding of secure application and environment design and management concepts
- Strong understanding of systems development lifecycle best practices
- Must be able to sustain a high rate of workflow and work on multiple projects
- Good verbal and written communication skills. Able to collaborate, communicate and deliver in a global environment
- Ability to present to management, internal client audiences or professional peers, and ability to work independently on problem solving and investigation
Preferred Qualifications:
- Experience implementing and managing Active Directory Lightweight Directory Services (ADLDS) instances.
- Good development knowledge or product expertise with Identity Management products (e.g., Microsoft Identity Manager)
- Development knowledge or product expertise with Single Sign On or Federated Identity products (e.g., ADFS, PingFederate)
- Familiarity with Microsoft Defender product ecosystem, including Microsoft Defender for Identity and Microsoft Defender for Endpoint
- Experience integrating on-premise resources with Entra
The expected base salary for this Jersey City based position is $130000-$250000. In addition, you may be eligible for a discretionary bonus if you are an active employee as of fiscal year-end.