CDW is seeking an Active Directory Engineer for a contract to hire opportunity in Evanston, IL.

Job Type: 6-month contract to hire

Location: Hybrid onsite in Evanston, IL and remote

Start: ASAP

Pay: $70/ hour

Salary: $145k

Job Summary

The (AD) Active Directory Lead Engineer provides support for a complex environment. They provide expert knowledge, skillsets and subject matter expertise (SME) of Microsoft AD Architecture, infrastructure and identity integrations with various technologies and services.

In this role, you will apply your knowledge and skillsets to lead the MS team that provides support, consultation, design services, testing, documentation and implementation for Microsoft Active Directory, Cayosoft, CyberArk, Azure AD, Unity Sync and Windows based systems. That will include configuration/implementation of new functionality, versioning, modify existing set ups, and providing Tier 3 support for troubleshooting various issues or incidents.

You will assist with strategic planning and will work to ensure that IAM systems/solutions are both resilient and adaptive to an evolving Identity landscape. You will work with stakeholders to implement IAM best practices and controls.

Minimum Qualifications:

• Successful completion of a full 4-year course of study in an accredited college or university leading to a bachelor s or higher degree in a major such as computer science, information technology, or related: OR appropriate combination of education and experience.
• 8 years MS Active Directory server experience thorough understanding of Windows 2008, 2012, and 2016. (Both server level and FFL).
• Hands on experience installing, configuring, upgrading AD configuration changes, schema extensions/modifications, set up of GPO s, OU s, trusts,etc.
• Experience with MS AD in multi-domain and multi-forest environments.
• Advanced hands on experience with Powershell scripting and use of Splunk.
• Solid understanding of IAM software and technologies (i.e. ADS, Azure AD/Entra, SSO, LDAP, Federation/SAML, OAuth, MFA,Cyberark, Crowdstrike Identity, etc).
• Proficient with technical troubleshooting, incident management, root cause analysis and problem solving.
• Experience with monitoring and performance tuning for Windows operating systems to include connectivity synchronization, replication, netlogon, time services, schema, database partitions, DNS settings, SRV records and certificate authorities and trust relationships.
• Experience with multi-faceted environment (On Premise, Cloud & SAAS)
• Demonstrated experience coordinating resources on multiple teams and leading projects.
• Must have time management skills and ability to prioritize tasks and lead a team in this area.

Preferred Qualifications:

• Expert/Experienced Architect level expertise in Active Directory ADS (on premise or vm), ADFS, andAzure AD.
• MS AD Expert - knowledge Domains, Sub-domains, 1way trusts/2way trusts, PS scripting, Migration tools(Quest), SCCM, O365 and Intune.
• MS AD Migration expert - inter forest migration (history info) and/or intra forest migration.
• Someone who has lead, planned and executed migrations (preferable back into central domain)
• Work experience with IAM technologies including: SailPoint IdentityIQ, Shibboleth, OpenAM, LDAP, Duo for MFA, Active Directory, Radiant Logic, Cayosoft, Grouper.
• Experience in higher education or public sector IAM processes and technology.
• Experience leveraging message queues, API managers and web services to build application integration services and Dev Ops.
• Entra/Azure AD Expert Azure Service fabric, Workflows, Access certification, Entitlements/role management, IGA.
• Experience MS Hello or other biometric tools and how they work.
• Experience in a higher education institution.
• Powershell expert & experience with splunk, CyberArk, and Crowdstrike Identity.