Staff Platform Engineer – Active Directory & Identity Services

About the role

As a Staff Platform Engineer you will own the technical direction of enterprise Active Directory across a complex hybrid identity environment, spanning on‑premises infrastructure, AWS and Microsoft Entra ID. This senior individual‑contributor role combines deep directory expertise with a strong identity‑security mindset.

Key responsibilities

• Act as senior technical authority for Active Directory across on‑premises, AWS‑hosted and AWS‑managed directory environments.
• Design and engineer hybrid directory topologies, including domain controller placement, replication, DNS, network connectivity and trust patterns.
• Strengthen identity security through privileged‑access controls, tiered administration, hardening standards and credential protection.
• Lead transitions toward modern identity architectures, including cloud migration, hybrid integration and retirement of legacy authentication.
• Shape the technical roadmap for identity products and translate strategic priorities into executable engineering plans.
• Champion automation, infrastructure‑as‑code and reusable patterns across identity services.
• Mentor engineers and align identity designs and standards across technical teams.

Required profile

• Extensive practical Active Directory experience (forest/domain design, Group Policy, DNS, DFS, replication, trusts, delegation, schema management).
• Hands‑on experience operating hybrid AD estates on‑premises and in AWS (EC2‑hosted DCs, AWS Directory Service/Managed Microsoft AD).
• Strong identity‑security knowledge (least‑privilege, tiered admin, Kerberos/NTLM hardening, LDAP security, attack‑path reduction).
• Working knowledge of Microsoft Entra ID, hybrid identity sync, Conditional Access and modern authentication.

Required skills

• Active Directory, Microsoft Entra ID
• AWS services (EC2, Directory Service, Managed AD)
• Infrastructure‑as‑code tools: Terraform, AWS CDK, CloudFormation, Ansible
• CI/CD platforms: GitHub, GitHub Actions
• Scripting/automation (PowerShell, Bash, Python)
• Observability tools: Grafana, Prometheus