Directory Services Engineer

Our Story

At Alight, we believe a company’s success starts with its people. Alight embraces values that come directly from our people – purposeful, human, united and growth-minded – reflecting our inclusive culture and promise that our clients expect. We are passionate about connecting purpose with impact.  Alight empowers clients to build a healthier and more financially secure workforce by unifying the benefits ecosystem across health, wealth, wellbeing, navigation, and absence management.

Our Benefits

With a comprehensive total rewards package, Alight offers programs and plans that support your mind, body, wallet, and life. Benefits include health, starting Day One. Additionally, Alight colleagues enjoy wellbeing programs, retirement plans, and career growth opportunities – all within a thriving global organization.

Great Place to Work

Thanks to the work of every colleague, Alight has received multiple awards of recognition including “Great Place to Work” for the past 7 years and Fortune’s “Best Companies to Work For.” To learn more about our company culture and awards Click Here.

We invite you to join our team!  Learn more at careers.alight.com. 

Application and Interview

By applying for a position with Alight, you understand that, should you be made an offer, it will be contingent on your undergoing and successfully completing a background check consistent with Alight’s employment policies. Background checks may include some or all the following based on the nature of the position: Government ID validation , education verification, employment verification, and criminal check, search against global sanctions and government watch lists, credit check, and/or drug test. You will be notified during the hiring process which checks are required by the position.

Alight requires all virtual interviews to be conducted on video.  Please be aware that Alight is a camera-on culture and may require occasional travel to one of our physical office locations.

Our commitment to Inclusion

We celebrate differences and believe in fostering an environment where everyone feels valued, respected, and supported. We know that diverse teams are stronger, more innovative, and more successful.

At Alight, we welcome and embrace all individuals, regardless of their background, and are dedicated to creating a culture that enables every employee to thrive. Join us in building a brighter, more inclusive future.

As part of this commitment, Alight will ensure that persons with disabilities are provided with reasonable accommodation for the hiring process. If reasonable accommodation is needed, please contact [email protected].

--------------------------------------------------------------------------------------------------------------------------------
The AD Engineer is a key member of the Identity Governance and Administration Team within the Alight Security organization. They will work closely with other members of the Identity Team, Information Security Team, Development Team, and Business owners towards a goal of designing, implementing, and supporting a cloud centric Active Directory environment. The right candidate is a self-starter with high learning agility and the ability to translate complex requirements into working solutions.

This role requires an in-depth knowledge with Active Directory, Azure AD, Virtual Directory solutions, as well as hands on experience with cloud infrastructure platforms (ex: AWS/Azure).  
Key Responsibilities:

• Work with the Architecture team to implement and integrate technical solutions.
• Ensure Directory Services platforms are secure, compliant, and highly available.
• Create and maintain system documentation and operational runbooks for Directory platforms and technologies.
• Prioritize and protect privileged identities – leverage RBAC, ACLs, etc. to uphold least privilege and Just-In-Time access.
• Deliver timely incident response during aligned shift and on-call assignment (Level 3).
• Provide leadership and technical assistance to the Operational support team members.
• Direct the installation, configuration, and maintenance of the Directory platforms.
• Own Root Cause Analysis and Problem Management.
• Assist with security and compliance audits.
• Manage customer satisfaction through effectively communicating and managing customer expectations.

Basic Qualifications:

• B.S. degree in a computer science, information technology, computer related discipline and/or 5+ years IT work experience in a global information technology infrastructure environment.

Preferred Skills/Experience:

• Extensive experience managing complex and disparate directories (ex: Active Directory/eDirectory/Radiant Logic/Azure AD/AWS Managed AD/etc.).
• Practical experience with core identity technologies and concepts (ex: Identity Governance/Privileged Access Management/SSO/Federation/MFA/etc.).
• Familiarity with IT security practices and fundamentals.
• Extensive experience with Cloud service providers (ex: AWS/Azure/etc.) and understanding of cloud service models (IaaS/PaaS/SaaS).
• PowerShell/MSGraph scripting or other (ex: JavaScript/Python/Bash/etc.).
• Familiarity and experience with CI/CD pipelines and Infrastructure-as-Code (ex: Terraform).
• Experience with Group Policy Management (GPO), including leveraging GPOs to enforce security settings, configuration standards, and software deployments.
• Knowledge of Microsoft ADCS/PKI/KMS.
• Experience with Microsoft Azure AD Connect.
• Windows/Linux engineering proficiency - familiarity with DNS, DHCP, TCP/IP, UDP, Failover Clustering, SIEM, IIS/Tomcat, Virtualization (VMWare/Hyper-V), Load Balancing, etc.
• Understanding of Disaster Recovery models, supporting performance, resilience, and availability of Tier 0/Tier 1 systems.

Professional Skills/Experience:

• Must demonstrate security focused approach to problems.
• Must possess deep troubleshooting technical skills that follow security and engineering principles.
• Must understand agile processes and concepts.
• Must understand how to identify and instill industry best practices.
• Ability to translate technical issues into understandable business language for end users.
• Team player with proven leadership, communication, organizational, and strong interpersonal skills. The role requires significant interaction with many different teams across a global company.
• Self-motivated, with keen attention to detail and excellent judgment skills.
• Ability to establish new standards for quality, performance or productivity.
• Must have excellent writing and communication skills, strong communicator with ability to maintain open communication with internal employees, contractors, managers, 3rd parties, and customers as needed.
• Able to integrate and apply feedback in a professional manner.

Able to prioritize and drive to results with a high emphasis on quality.
 

Equal Opportunity Policy Statement

Alight is an Equal Employment Opportunity employer and does not discriminate against anyone based on sex, race, color, religion, creed, national origin, ancestry, age, physical or mental disability, medical condition, pregnancy, marital or domestic partner status, citizenship, military or veteran status, sexual orientation, gender, gender identity or expression, genetic information, or any other legally protected characteristics or conduct covered by federal, state, or local law.   In addition, we take affirmative action to employ disabled persons, disabled veterans, and other covered veterans.

Alight provides reasonable accommodation to the known limitations of otherwise qualified employees and applicants for employment with disabilities and sincerely held religious beliefs, practices and observances, unless doing so would result in undue hardship. Applicants for employment may request reasonable accommodations/modifications by contacting their recruiter.

Authorization to work in the Employing Country

Applicants for employment in the country in which they are applying (Employing Country) must have work authorization that does not, now or in the future, require sponsorship of a visa for employment authorization in the Employing Country and with Alight.

Note, this job description does not restrict management's right to assign or reassign duties and responsibilities of this job to other entities; including but not limited to subsidiaries, partners, or purchasers of Alight business units.

We offer you a competitive total rewards package, continuing education & training, and tremendous potential with a growing worldwide organization.
 

DISCLAIMER:

Nothing in this job description restricts management's right to assign or reassign duties and responsibilities of this job to other entities; including but not limited to subsidiaries, partners, or purchasers of Alight business units.