.png){kind=logo}
Be an Early Applicant
Reimagining what's possible for food and agriculture
The Role
Administer and support Microsoft Active Directory, Entra ID, and hybrid identity services. Resolve L2/L3 authentication, authorization, replication, synchronization, SSO, MFA, and access incidents. Manage security configurations, GPOs, trusts, recovery, hardening, audits, and compliance activities. Develop PowerShell and Microsoft Graph automation, support CI/CD identity changes, maintain certificates and secrets, and contribute to migrations, documentation, and service improvements.
Summary Generated by Built In
Job Purpose and Impact
We are looking for an Active Directory / Entra ID Consultant to support day-to-day operations, incident resolution, security activities and automation. The role will primarily focus on Microsoft Active Directory, with additional responsibility for Microsoft Entra ID and hybrid identity services.
Key Accountabilities
Active Directory
Microsoft Entra ID
Other Expectations
Qualifications
We are looking for an Active Directory / Entra ID Consultant to support day-to-day operations, incident resolution, security activities and automation. The role will primarily focus on Microsoft Active Directory, with additional responsibility for Microsoft Entra ID and hybrid identity services.
Key Accountabilities
Active Directory
- Administer Active Directory users, groups, computers, OUs, delegation, GPOs, domain trusts, and related security configurations.
- Provide L2/L3 support for domain controllers, authentication, authorization, replication, DNS, service availability, and overall AD health.
- Troubleshoot complex issues involving login failures, account lockouts, access errors, GPO processing, replication, Kerberos, and domain connectivity.
- Perform AD object restoration and support account, group, computer, and directory recovery activities.
- Support the engineering and implementation of OU structures, OU-level delegations, subnet additions, domain trusts, Kerberos constrained delegation, and process-account password settings.
- Support domain controller promotions and demotions, server capacity and uptime issues, backups, restores, disaster recovery, and business continuity activities.
- Support AD security reviews, audits, password policies, hardening, remediation, and related compliance activities.
- Implement and manage AD changes in line with approved engineering practices, request procedures, security requirements, and operational standards.
- Develop and maintain PowerShell scripts for AD administration, reporting, auditing, health monitoring, object management, and operational automation.
- Participate in AD migrations, upgrades, domain registrations, and service-improvement initiatives while maintaining accurate procedures, technical documentation, and knowledge articles.
Microsoft Entra ID
- Support Microsoft Entra ID users, groups, roles, permissions, Enterprise Applications, App Registrations, SSO, MFA, Conditional Access, and application access.
- Support Entra Connect and hybrid identity synchronization, including filtering, attribute mapping, synchronization health, and error resolution.
- Support SAML and OAuth/OIDC-based SSO integrations, including metadata exchange, claims and attribute mapping, certificates, secrets, and authentication troubleshooting.
- Support SSO secret and certificate-renewal activities, including monitoring expiry, coordinating renewals, updating approved configurations, and validating application connectivity.
- Work with Microsoft Graph and other approved APIs for identity administration, reporting, application integration, and operational automation.
- Support CI/CD based Entra and SSO configuration changes using GitHub, YAML configuration files, branches, pull requests, peer reviews, approvals, and controlled deployments.
- Perform Entra ID health checks and review sign-in logs, audit logs, service health, and application connectivity to support incident resolution and continuous improvement.
Other Expectations
- Own assigned incidents, service requests, changes, and project tasks through to completion, demonstrating accountability and a bias for action within the assigned scope.
- Work independently on routine activities and seek guidance for complex or high-risk changes.
- Communicate clearly and proactively with technical teams, stakeholders, and service owners.
- Share knowledge with other team members and contribute to consistent operating practices.
Qualifications
- Minimum requirement of 3-6 years of relevant work experience with Active Directory and Entra.
- Good to have experience with Identity Governance and Administration (IGA) platforms such as SailPoint or Saviynt, ServiceNow for identity-related requests, incidents, changes, and workflow management, and Microsoft SC-300 or an equivalent Microsoft identity certification.
Skills Required
- 3-6 years of relevant work experience with Active Directory and Microsoft Entra ID
- Experience with Identity Governance and Administration platforms such as SailPoint or Saviynt
- Experience with ServiceNow for identity-related requests, incidents, changes, and workflow management
- Microsoft SC-300 or equivalent Microsoft identity certification
What the Team is Saying
Gaby
Data Engineering Lead
Landon
North America Service Assurance Manager
Navita
Software Engineering Senior Supervisor
.jpg)
William Orgertrice
Data Engineer
Kayode D.
Principal Data Engineer
Patricia
Supply Chain Learning & Development and Digital Support Lead
Heather W.
Software Engineer
Kristen K.
Factory of the Future Digital Product Manager
Shrey B.
Senior Software Engineer
Madhuri P.
Senior Data Scientist
William Orgertrice
Data Engineer — Data Function, Platforms and Product Engineering
Navita S.
Software Engineering Senior Supervisor
Heather W.
Software Engineer
.jpg)
Cargill Compensation & Benefits Highlights
-
Healthcare Strength — Health coverage includes comprehensive medical, dental, and vision options, with broad networks, mental-health/EAP resources, and wellness incentives. Feedback suggests plan choice and advocacy resources provide strong support for navigating care.
-
Retirement Support — Retirement programs feature a 401(k) with company matching alongside an ESOP and an additional retirement account. Feedback suggests these elements are widely regarded as a strong long‑term value.
-
Leave & Time Off Breadth — The published PTO structure scales from 15 to 30 days with tenure, alongside paid holidays and paid family leave. Feedback suggests the breadth of time off supports work‑life needs, especially for longer‑tenured employees.
Cargill Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
We are a family company providing food, ingredients, agricultural solutions and industrial products to nourish the world in a safe, responsible and sustainable way. We connect farmers with markets so they can prosper. We connect customers with ingredients so they can make meals people love. And we connect families with daily essentials— from eggs to edible oils, salt to skincare, feed to flooring. By providing customers with products that are vital for living, we help businesses grow, communities prosper and consumers live well in their daily lives.
Why Work With Us
The decision to join Cargill can open the door to a world of possibility. As part of our Digital, Technology & Data team, you’ll get to be part of a large and diverse group full of unique perspectives united by a common, higher purpose while building a rewarding career full of opportunity, growth and the satisfaction of knowing your work matters.
Gallery
.JPG)
Cargill Teams
Cargill Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
Typical time on-site:
Not Specified
