Senior Identity and Access Management (IAM) / Active Directory Engineer

• B2B contract via Devire
• 100% remote work
• Benefits package

• Over 5 years of experience in IT, systems engineering, or systems administration.
• Strong expertise in Identity and Access Management (IAM) technologies and frameworks, including Active Directory (Entra ID), LDAP, SAML, OAuth, and related protocols.
• Hands-on Level 3 support experience, delivering advanced technical support for business-critical systems.
• Excellent analytical, problem-solving, and troubleshooting skills.
• Proven ability to manage complex, multi-forest directory services and cloud-based identity platforms.
• Strong communication and interpersonal skills, with the ability to collaborate effectively across technical and non-technical teams.

Responsibilities

• Administration and maintenance of a hybrid Active Directory environment (AD DS, Entra ID).
• Management of forest and domain structures, trust relationships, and GPOs.
• Active Directory health monitoring: replication, authentication, and service availability.
• Ensuring business continuity, backups, and disaster recovery procedures.
• Configuration of logging and auditing for security and compliance purposes.
• Operation and maintenance of PKI infrastructure (CAs, certificates).
• Strengthening security through system hardening, Kerberos and NTLM policies, and disabling legacy protocols.
• Access management including MFA, RBAC, and PAM.
• Configuration of SSO and identity federation, application integrations.
• Collaboration with IT teams, architects, and Service Desk support (L3).