Senior Directory Services analyst modernizing enterprise identity platform for Bank of America. Securing access in a highly-regulated environment while collaborating with security and application teams.
Responsibilities
Lead architecture, engineering, and operations for Active Directory forests, domains, and Group Policy in a multi-site, highly regulated environment.
Design and drive adoption of hybrid identity solutions integrating on-prem and cloud-based services.
Implement and optimize authentication and authorization controls: SSO, MFA, Conditional Access, identity protection, and modern protocols (SAML, OAuth2, OIDC).
Define and enforce standards for identity lifecycle: joiner/mover/leaver processes, automated provisioning/deprovisioning, access reviews, and role-based access control (RBAC).
Partner with stakeholders and business teams to implement least-privilege, privileged access management (PAM), and Zero Trust-aligned identity controls.
Lead and support AD and identity-related projects: domain/forest consolidation, mergers/acquisitions, cloud migrations, and re-platforming.
Enhance monitoring, alerting, and reporting for directory and identity health, security posture, and compliance (audit trails, SOX, GLBA, PCI, etc.).
Develop and maintain scripts and automation (primarily PowerShell) to drive consistency, efficiency, and security in identity operations.
Serve as a senior SME and escalation point for complex identity incidents, outages, and security events.
Produce and maintain technical documentation, runbooks, standards, and architecture diagrams for AD and cloud identity services.
Mentor and guide junior engineers, analysts, and admins and contribute to identity and access strategy and roadmap.
Requirements
10+ years of hands-on experience administering and engineering enterprise Active Directory in a large, multi-site environment.
Strong expertise in: AD forest/domain design, trusts, DNS, Group Policy, replication, and AD security hardening.
5+ years working with Azure AD/Entra ID and hybrid identity.
Deep understanding of identity and access management concepts: authentication, authorization, RBAC, least privilege, PAM, Zero Trust.
Strong experience with MFA, Conditional Access, SSO, and identity federation using SAML, OAuth2, and OpenID Connect.
Proficiency with PowerShell for automation, reporting, and bulk operations in AD and Azure AD.
Experience operating in regulated environments (preferably banking/financial services) with audit, risk, and compliance requirements.
Solid understanding of networking and security fundamentals (TCP/IP, firewalls, TLS, certificates, PKI as it relates to identity).
Excellent communication skills and ability to translate technical identity risks and solutions for non-technical stakeholders.
Benefits
Industry-leading benefits
Access to paid time off
Resources and support
Job title
Senior Active Directory - Cloud Identity Specialist
As a Relationship Manager in Wealth Management, you will build and maintain long term client relationships. Responsible for providing investment solutions and ensuring compliance with regulatory requirements.
CNA Instructor overseeing the educational delivery and evaluation of student learning in the CNA program. Facilitating instruction and maintaining compliance with Michigan standards.
Associate Director leading Organizational Change Management initiatives to drive Digital Transformation at Pratt & Whitney. Providing strategic guidance and executing tailored change frameworks for complex business processes.
Director, Underwater Systems leading technical authority on underwater propulsion systems at Royal Caribbean. Overseeing maintenance, optimization, and compliance of underwater systems across the fleet.
Food Service Worker assisting with food preparation and maintaining kitchen safety standards in the William Penn School District. Ensuring cleanliness and organization in the kitchen environment.
Food Service Director managing dining solutions and dining operations for Aramark. Leading teams and ensuring client satisfaction in food service delivery.
Director of Facilities overseeing 24/7 operations for Aramark at a 3,000 - person residential community. Leading a team, ensuring client satisfaction, and meeting financial targets.
Texas/Louisiana Gulf Coast Regional Director for Fuels & Natural Resources at Black & Veatch. Fostering client relationships and managing service project portfolios with significant travel requirements.
Sr. Azure Active Directory Engineer I delivering enterprise ICAM solutions supporting a security - sensitive mission within federal government. Integrating identity services into operational environments through Agile methodologies.
Philanthropy Officer managing donor relationships and fundraising strategies for Nemours’ Institutional Advancement Team. Supporting mid - level donor relationships and increasing fundraising capacity in central Florida.