Senior IAM / AD Specialist – L3

• B2B contract via Devire
• 100% remote work
• Benefits package

• 5 or more years in IT and Systems engineering or systems administration
• Experience of IAM technologies and frameworks, including Active Directory (Entra ID), LDAP, SAML, OAuth, and others.
• Previous Level 3 experience hands on supporting a business
• Excellent problem-solving and troubleshooting skills.
• Skilled in managing complex multi forest directory Services and Cloud Identity platforms
• Strong communication and interpersonal skills.

Responsibilities

• Manage and maintain the hybrid Active Directory environment, including domain controllers, OUs, GPOs, DNS, DHCP, AD Connect, and FSMO roles.
• Design, maintain, and secure forest structures and domain trusts in line with best practices.
• Monitor Active Directory service health, replication, and authentication, ensuring business continuity, backups, and disaster recovery.
• Configure and maintain auditing and logging for security, compliance, and troubleshooting purposes.
• Operate and maintain PKI infrastructure, including certificate authorities, templates, and cryptographic configurations.
• Strengthen security through system hardening, disabling legacy protocols, and maintaining Kerberos and NTLM policies.
• Define and enforce access policies, including MFA, proper delegation of rights, and regulatory compliance.
• Manage identity federation, single sign-on, and application onboarding to improve security and productivity.
• Oversee Privileged Access Management, RBAC, and the proper assignment of privileged roles.
• Ensure IAM systems comply with organizational security standards and stay current with IAM-related threats and trends.
• Collaborate with IT teams, application owners, vendors, and provide training and support to the Service Desk as part of the Shift-Left strategy.
• Work closely with architects, engineers, management, and customers to support technical planning and business project implementations.