L

Lincoln Financial

Insurance, retirement, and financial services provider

Lead Identity Infrastructure Engineer

System AdministrationPosted on Nov 6
Full-time

About the Job

Requirements

  • At least 5 years of experience managing and supporting enterprise identity services, with hands-on experience in Active Directory, public key infrastructure (PKI), and Entra ID application registrations.
  • Advanced knowledge of Active Directory architecture, including forests, domains, trusts, organizational units, replication, sites and services, DNS dependencies, and Group Policy.
  • Advanced enterprise PKI experience, including Certificate Services, certificate templates, enrollment workflows, certificate lifecycle management, and Keyfactor or comparable platforms.
  • Deep experience with Microsoft Entra ID application registrations, enterprise applications, Entra ID Connect, and Microsoft Graph APIs.
  • Troubleshooting skills across Active Directory, LDAP, Kerberos, NTLM, DNS, Windows Server, certificates, and authentication issues.
  • Expert knowledge of legacy and modern directory and authentication protocols, including LDAP, Kerberos, NTLM, SAML, OAuth, and OpenID Connect.
  • Proficiency in scripting and automation using PowerShell and Microsoft Graph.
  • Experience with Active Directory security hardening, role-based access control, privileged access, forest and domain trust management, and secure administration practices.
  • In-depth experience with Active Directory disaster recovery, recovery testing, and operational resilience planning.
  • Experience designing and operating monitoring, alerting, and health validation for directory, authentication, and PKI services.
  • Ability to collaborate with Agile teams and use Jira and Confluence to track engineering work and maintain technical documentation.
  • A four-year/bachelor’s degree or equivalent work experience; four years of experience may substitute for a bachelor’s degree.

Responsibilities

  • Serve as a technical expert for the architecture, engineering, administration, and operational health of enterprise Active Directory and Domain Services.
  • Provide subject matter expertise and strategic recommendations for projects involving Active Directory and Microsoft Entra ID application registrations, covering legacy and modern authentication methods.
  • Provide technical expertise in public key infrastructure, including Keyfactor PKIaaS, certificate templates, enrollment services, certificate lifecycle processes, and Keyfactor integrations.
  • Apply an AI-agentic mindset to automation, continuous improvement, and modernization opportunities that enhance the Domain Services service portfolio.
  • Design, manage, and secure Active Directory forests, domains, trusts, sites and services, replication, DNS dependencies, and domain controller lifecycle activities.
  • Build and improve monitoring, alerting, health checks, and operational dashboards for Active Directory, authentication services, and PKI using Splunk and enterprise monitoring platforms.
  • Contribute to Active Directory security hardening, identity threat detection and response, privileged access controls, disaster recovery planning, and recovery exercises.
  • Lead troubleshooting and incident resolution for complex, high-severity Active Directory, Entra ID authentication, and PKI incidents, including root cause analysis and corrective actions.
  • Use PowerShell Desired State Configuration and GitLab for infrastructure configuration, source control, and automation.
  • Work with Security and Enterprise Architecture to design compliant, resilient, and supportable identity solutions.
  • Develop and implement PowerShell-based automation to improve security, consistency, monitoring, and operational efficiency.
  • Partner with and guide cross-functional teams, application owners, and Managed Service Providers to integrate and support authentication and directory services.
  • Provide advanced support for Microsoft Entra application registrations, enterprise applications, OAuth, OpenID Connect, and SAML integrations as needed.
  • Create and maintain architecture, operational, and recovery documentation, and share knowledge with the team.
  • Build and present engineered solutions to Architecture and Peer Review Boards.

Desired Qualifications

  • Splunk search and dashboard experience is preferred.

About the Company

Lincoln Financial

Insurance, retirement, and financial services provider

Lincoln Financial Group offers life insurance, annuities, and retirement income products through its network of affiliated companies, and also provides securities and investment advisory services via affiliated broker-dealers. Its products combine insurance coverage or retirement-focused contracts with investment options, where customers fund premiums, choose subaccounts or riders, and receive benefits such as death benefits, living benefits, or guaranteed income in retirement. The company differentiates itself with a family of affiliated brands and distributors that coordinate life, annuity, and advisory products under one umbrella. Its goal is to help individuals and families protect loved ones, plan for retirement, and achieve financial security through integrated protection and investment solutions.

Company size
Not listed
Company stage
Not listed
Total funding
$128.8M
Headquarters
Radnor Township, Pennsylvania
Founded
1905

Recently Posted Jobs

Explore more opportunities at Lincoln Financial

See more jobs