Specialist, Technology Engineer (IAM)

Job Description

Req 100913 | Specialist, Technology Engineer (IAM)- Active Directory

Position Summary

The Specialist, Technology Engineer (IAM) supports the availability, health, maintenance, and security of Nationwide s directory and identity infrastructure. The role is primarily operational, with a strong focus on on-premises Microsoft Active Directory and supporting hybrid identity capabilities with Microsoft Entra ID. The associate helps maintain critical directory services, remediate vulnerabilities, support application teams, and ensure the reliability and security of identity services serving a large enterprise environment.

Key Responsibilities

• Administer and maintain Active Directory domains, forests, organizational units (OUs), groups, user accounts, computer accounts, and directory objects.
• Monitor domain controller health, directory service availability, replication, and performance; investigate and resolve operational issues.
• Manage and support Group Policy Objects (GPOs), directory configuration, and related identity infrastructure.
• Support authentication and directory protocols, including Kerberos, NTLM, and LDAP, and troubleshoot related issues.
• Perform routine maintenance, health checks, reporting, and operational hygiene for Active Directory services.
• Identify, assess, and remediate directory-related vulnerabilities and security risks in collaboration with relevant teams.
• Support application and infrastructure teams that depend on directory services; investigate and resolve directory-related incidents and service issues.
• Support hybrid identity integration and synchronization between on-premises Active Directory and Microsoft Entra ID.
• Follow identity security practices, including least privilege, separation of duties, privileged access controls, and secure configuration standards.
• Maintain operational documentation, procedures, and configuration records.
• Support backup, recovery, and disaster recovery activities for directory services as required.

Required Skills and Experience

• Hands-on experience administering and maintaining Microsoft Active Directory in an enterprise environment.
• Practical understanding of Active Directory objects and structure, including domains, forests, OUs, groups, and accounts.
• Experience supporting domain controller health, directory service operations, Group Policy, and troubleshooting.
• Understanding of authentication and directory protocols such as Kerberos, NTLM, and LDAP.
• Working knowledge of cybersecurity fundamentals relevant to identity infrastructure, including least privilege, separation of duties, patching, and vulnerability remediation.
• Ability to investigate operational issues, perform routine maintenance, and support business-critical services.

Strongly Preferred Skills

• PowerShell scripting experience, including building and executing scripts for administrative tasks and automation. This is a strong preference and close to a must-have but should not automatically disqualify an otherwise suitable Active Directory candidate.
• Experience with Microsoft Entra ID and hybrid identity synchronization.
• Experience supporting enterprise-scale directory environments serving a large employee and contractor population.
• Exposure to identity stores, non-human identities (NHIs), or the use of AI/agents in relevant operational workflows.

Role Context

This is a run/operations-focused role rather than a project-build position. The immediate priority is strong Active Directory capability; Microsoft Entra ID experience is beneficial but can be learned on the job. The associate will help maintain critical identity services and support routine operations, risk remediation, service health, and application-team needs.

Additional / Nice-to-Have Knowledge

• Active Directory Forest recovery and disaster recovery approaches.
• Microsoft Defender, Conditional Access, Privileged Identity Management (PIM), and related identity security controls.
• Cloud platforms such as Azure or AWS.
• PowerShell automation and operational reporting.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.