Senior Active Directory Engineer

Denver, CO, United States

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Software Engineering Job Details

About Salesforce

We’re Salesforce, the Customer Company, inspiring the future of business with AI+ Data +CRM. Leading with our core values, we help companies across every industry blaze new trails and connect with customers in a whole new way. And, we empower you to be a Trailblazer, too — driving your performance and career growth, charting new paths, and improving the state of the world. If you believe in business as the greatest platform for change and in companies doing well and doing good – you’ve come to the right place.

As an Active Directory IAM Engineer in the Security organization you will join the team responsible for designing, building and maintaining innovative infrastructure solutions that support the needs of our Salesforce employees! This includes, but is not limited to: Single Sign-On, authentication services, directory services, logging services and general IT application design, architecture, capacity planning, operations and DR.

This role's primary technical area is Active Directory, Azure, and automation, however you will be involved in many of the other infrastructure projects involving deploying and integrating technologies for the global corporate environment. You will also be responsible for maintaining these critical AD and Auth services. You will build relationships and interact with various business, engineering, security, and operational teams.

The AD Engineer will contribute to the overall success of the engineering organization by providing recommendations and key insight into the technological path of corporate IT!

Responsibilities:

Establish close working relationships with Infrastructure Operations, and Product Management

Participate in ongoing technology evaluations and keep up with technology trends and industry standards

Operate as a technical expert on infrastructure projects pertaining to Directory Services, AD Audit tools and certificates, Systems Management, Capacity Planning, and DR

Perform infrastructure service implementations, performance analysis and optimization, monitoring, problem resolution, upgrade planning and execution, and process creation and documentation

Large enterprise Domain consolidation and decommission experience from acquisitions

Automation and CI/CD is a must. Powershell, Python and GoLang are preferred scripting languages

Continually analyze and work to improve the quality of services offered by Corporate IT

Ensure new Directory Service technologies are adequately tested and integrated with Infrastructure and Application Services

Optimize or re-design existing infrastructure services as needed

Ensure service availability & reliability of all infrastructure services

Test lab development

Suggest improvements based on technology, standard processes, or changing requirements

Provide regular management updates on advantages and potential opportunities for new technologies and automation

Assist Infrastructure Operations with testing & implementation of new technologies and/or services including methods, policies and procedures for installation, management, monitoring and support

Work with and manage outside consulting technical domain experts, as needed

Help resolve complex IT issues in a Tier 3 capacity

Train/Mentor junior staff members as appropriate

Required Skills/Experience:

7+ years of design/support of Enterprise environments with over 50,000+ users

Demonstrated ability to think and complete long-term and big-picture in an environment with a short-term focus.

7+ years experience as a Domain Administrator with large Microsoft Active Directory: Designing, Implementing, Maintaining, Troubleshooting

7+ years of experience as Azure Administrator (Microsoft Entra ID)

7+ years of experience working with Windows Server environments

5+ years of PowerShell and other scripting language experience

5+ years experience an Identity organization

Deep knowledge of Authentication and AD Security

Proficiency in DNS, DHCP, PKI, LDAP

Directory integration with 3rd Party Applications and hosted services

Experience with critically important services and applications in a global enterprise environment

Customer service oriented with strong interpersonal and leadership skills

Excellent time management and prioritizing skills

Desired Skills/Experience:

Experience with Okta and other IDPs

Experience with the VMware Platform

Experience with Agile Development Methodology

Experience with SAAS and PAAS applications

Experience managing large-scale cloud infrastructure hosted on multiple OS platforms

One or more industry certifications (eg, MCSE)

Accommodations

If you require assistance due to a disability applying for open positions please submit a request via this Accommodations Request Form.

Posting Statement

At Salesforce we believe that the business of business is to improve the state of our world. Each of us has a responsibility to drive Equality in our communities and workplaces. We are committed to creating a workforce that reflects society through inclusive programs and initiatives such as equal pay, employee resource groups, inclusive benefits, and more. Learn more about Equality at www.equality.com and explore our company benefits at www.salesforcebenefits.com.

Salesforce is an Equal Employment Opportunity and Affirmative Action Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. Salesforce does not accept unsolicited headhunter and agency resumes. Salesforce will not pay any third-party agency or company that does not have a signed agreement with Salesforce.

Salesforce welcomes all.

Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records. For Colorado-based roles, the base salary hiring range for this position is $114,200 to $189,800. For Washington-based roles, the base salary hiring range for this position is $125,700 to $208,800. For California-based roles, the base salary hiring range for this position is $137,100 to $227,700. Compensation offered will be determined by factors such as location, level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, benefits. More details about our company benefits can be found at the following link: https://www.salesforcebenefits.com.