Impact:

The Workforce Identities Engineering team within the Identity and Access Management function of Core Engineering is looking for an experienced Active Directory systems engineer. This position will be working with a global team responsible for the architecture, design and development of systems supporting a combination of on-premises and cloud-hosted Active Directory environments for Goldman Sachs. 

The Active Directory infrastructure supports wide and varied services that require high availability and performance in a secure environment.  This position will help design, engineer, and deploy solutions to help ensure the security and resiliency of the Active Directory platforms within Goldman Sachs. 

Responsibilities will also include coordinating with various technology infrastructure teams for infrastructure projects, managing systems lifecycle and evaluating existing solutions for optimizations or enhancements.  The position will also be engaged in vendor management, industry analysis, product benchmarking, and contributing to the technical understanding and promotion of new and existing standards, solutions, and tools.

The ideal candidate will have a minimum of five years in management of an Active Directory infrastructure, as well as projects in the Single Sign On and Federated Identity space in medium to large enterprise environments.

How will you fulfill your potential:

• Work with a global team of highly motivated platform engineers and software developers delivering solutions specializing in a range of technologies with a remit to define and build integrated architectures for secure, scalable infrastructure services serving a diverse set of internal and external use cases
• Collaborate with Active Directory engineers across Goldman Sachs and Microsoft to optimize and enhance the security and runtime operations of different on-premises and cloud-hosted Active Directory instances within Goldman Sachs
• Engage with Active Directory consumers to collaborate on efficient and secure integration approaches for their application requirements
• Leverage PowerShell to automate tasks for Active Directory management to increase efficiency of the team and detect abnormal behavior of the systems

Basic Qualifications:

• Strong technical knowledge of complex Active Directory environments in medium to large enterprises 
• Experience implementing business continuity plans, recovery strategies, and hardening strategies for Active Directory Domain Services environments across both on-premises and cloud-hosted scenarios
• Implementing controls to ensure appropriate security, performance, scalability, and monitoring guidelines are achieved for the Active Directory instances
• Experience integrating solutions with an Active Directory Domain Services environment, including scenarios such as Exchange, Entra ID, Office 365 Hosted solutions, Active Directory Certificate Services, Microsoft Configuration Manager, Systems Center Operations Manager
• Familiarity with LDAP, Kerberos, and IPSec protocols
• Experience in designing, developing, and testing software in PowerShell
• Understanding of systems development lifecycle best practices
• Must be able to sustain a high rate of workflow and work on multiple projects
• The person will need good verbal and written communication skills. He/she needs to show past experience in utilizing various influencing skills and be able to collaborate, communicate and deliver in a global environment
• Ability to present to internal client audiences or professional peers, and ability to work independently on problem solving and investigation

Preferred Qualifications:

• Experience implementing and managing Active Directory Lightweight Directory Services (ADLDS) instances.
• Familiarity with PowerShell automated testing frameworks such as Pester
• Familiarity with leveraging Microsoft Entra ID cloud-based security, management, and monitoring solutions.