The final salary or hourly wage, as applicable, paid to each candidate/applicant for this position is ultimately dependent on a variety of factors, including, but not limited to, the candidate’s/applicant’s qualifications, skills, and level of experience as well as the geographical location of the position.

Applicants must be legally authorized to work in the United States. Sponsorship not available.

Our client is seeking a Senior Active Directory Engineer in Burbank, CA/ Hybrid.

Role Description

• Lead the consolidation and cleanup efforts of multiple legacy directory systems.
• Manage and maintain Active Directory, domain controllers, and related Microsoft services.
• Perform migration tasks, including PKI certification storage and other directory-related migrations.
• Collaborate closely with the IT Team Access Management Engineering organization.
• Ensure cybersecurity measures are integrated into directory management.
• Participate in solution design and brainstorming sessions to optimize the new AD environment.
• Work on-site four days a week for effective collaboration
• Lead the assessment and analysis of the Domain controllers in the AD forest.
• Document and guide the operations team with the decommissioning, upgrade and migration of domain controllers.
• Analyze the existing use of PKI certificates in legacy directories and help migrate them into Microsoft’s PKI service.
• Evaluate capabilities of services/products and design solutions to deliver future service
• offerings through detailed technical analysis.
• Define engineered designs, including full documentation
• Follow structured methodologies for technical analysis of products and solutions

Skills & Requirements

• Extensive experience with Microsoft services, including ADFS and domain controllers.
• Proven track record in managing large-scale directory systems (preferably with 250,000+ accounts).
• Strong background in cybersecurity.
• Experience with Azure and cloud migration is a plus.
• Ability to design and implement solutions, considering long-term operational impacts.
• Minimum of 5 years of related work experience
• Demonstrated experience designing, implementing, and integrating enterprise-level highly connected hybrid LDAP solutions with at least 40,000 users, including:
• Active Directory
• Azure Active Directory
• Microsoft Identity Manager
• Active Directory Federation
• Services / AADC
• Integrations between key services and various LDAP providers.
• Experience in engineering, designing, and integrating both infrastructure components (domain controllers, sites and services, connectivity, etc.) and logical aspects (GPO management, directory structure, and management toolsets)
• Experience in project management of large IT initiatives
• Experience working with and directing suppliers in an outsourced environment infrastructure

Preferred Qualifications:
• Project Work:
o Domain Controller Consolidation:
o Assess existing domain controllers, identify consolidation opportunities, and develop a migration strategy.
o Perform domain controller upgrades, decommissioning etc.
o Ensure replication integrity and domain health during consolidation.

• PKI Certificate Migration & Cleanup:
o Analyze existing PKI infrastructure and certificates.
o Migrate certificates to a modern PKI infrastructure with minimal disruption.
o Revoke, renew, and replace legacy or non-compliant certificates.
o Ensure compliance with security policies and best practices.

• Active Directory Administration & Cleanup:
o Identify and remove stale objects, orphaned accounts, and unused policies.
o Optimize AD replication, site topology, and group policy objects (GPOs).
o Implement best practices for AD security, auditing, and hardening.
o Troubleshooting & Support:
o Diagnose and resolve AD, DNS, and PKI-related issues.
o Work with security and infrastructure teams to remediate vulnerabilities.
o Document configurations, policies, and procedures for future reference.

Benefits/Other Compensation

This position is a contract/temporary role where Hays offers you the opportunity to enroll in full medical benefits, dental benefits, vision benefits, 401K and Life Insurance ($20,000 benefit).

Why Hays?

You will be working with a professional recruiter who has intimate knowledge of the industry and market trends. Your Hays recruiter will lead you through a thorough screening process in order to understand your skills, experience, needs, and drivers. You will also get support on resume writing, interview tips, and career planning, so when there’s a position you really want, you’re fully prepared to get it.

Nervous about an upcoming interview? Unsure how to write a new resume?

Visit the Hays Career Advice section to learn top tips to help you stand out from the crowd when job hunting.

Hays is committed to building a thriving culture of diversity that embraces people with different backgrounds, perspectives, and experiences. We believe that the more inclusive we are, the better we serve our candidates, clients, and employees. We are an equal employment opportunity employer, and we comply with all applicable laws prohibiting discrimination based on race, color, creed, sex (including pregnancy, sexual orientation, or gender identity), age, national origin or ancestry, physical or mental disability, veteran status, marital status, genetic information, HIV-positive status, as well as any other characteristic protected by federal, state, or local law. One of Hays’ guiding principles is ‘do the right thing’.
We also believe that actions speak louder than words.
In that regard, we train our staff on ensuring inclusivity throughout the entire recruitment process and counsel our clients on these principles. If you have any questions about Hays or any of our processes, please contact us.

In accordance with applicable federal, state, and local law protecting qualified individuals with known disabilities, Hays will attempt to reasonably accommodate those individuals unless doing so would create an undue hardship on the company. Any qualified applicant or consultant with a disability who requires an accommodation in order to perform the essential functions of the job should call or text 813.336.5570.

Drug testing may be required; please contact a recruiter for more information.

#LI-DNI