Senior Identity Infrastructure Engineer | AWS & Active Directory

Job Description

Job DescriptionTitle: Senior Identity Infrastructure Engineer (AWS & Active Directory)
Location: Wayzata, MN
Job Type: Contract (5 Months)
Compensation: $75 - $90 p/h W2 (no C2C)
Industry: Food & Beverage Manufacturing

---
About the Role
Our client, a global leader in the food, agriculture, and supply chain industry, is seeking a Senior Identity Infrastructure Engineer to join its Identity & Access Management (IAM) team. This role is ideal for a seasoned infrastructure professional who combines deep enterprise Active Directory expertise with AWS cloud engineering, automation, and modern infrastructure practices.
This position plays a key role in designing, securing, and modernizing identity infrastructure that supports a large-scale global environment. The ideal candidate will bring a strong understanding of Active Directory architecture, cloud integration, infrastructure automation, and operational resiliency while helping drive identity modernization initiatives across hybrid environments.
This role aligns approximately to 60% AWS/Infrastructure Engineering and 40% Active Directory Engineering. Job Description
The Senior Identity Infrastructure Engineer is responsible for designing, implementing, maintaining, and securing identity infrastructure services that support enterprise access management and authentication. This role works closely with IAM, Privileged Access Management (PAM), cloud engineering, and security teams to ensure reliable and secure access to business-critical systems.
Key Responsibilities

• Design, engineer, administer, and secure Active Directory environments, including:
  • Forests
  • Domains
  • Trusts
  • Organizational Units (OUs)
  • Group Policy Objects (GPOs)
  • Domain Controllers
• Monitor, troubleshoot, and resolve Active Directory issues related to:
  • Authentication
  • Replication
  • DNS services
  • Domain controller health and availability
  • Account lifecycle management
• Partner with IAM and PAM teams to develop and support privileged access controls, delegated administration models, and administrative group structures.
• Support integrations between Active Directory and enterprise identity platforms, including:
  • Identity governance solutions
  • Authentication platforms
  • Access request systems
  • Access certification tools
• Develop integration patterns between Active Directory and AWS environments using technologies such as LDAP and Kerberos.
• Create scalable authentication solutions that enable cloud-hosted applications to leverage enterprise identity services.
• Promote modern authentication and access management practices across application development teams.
• Design and implement infrastructure automation solutions using Infrastructure-as-Code (IaC) and configuration management tools.
• Develop and maintain operational documentation, standards, procedures, and runbooks.
• Participate in:
  • Change management activities
  • Incident response efforts
  • Security audits
  • Disaster recovery planning and testing
  • Continuous improvement initiatives
• Support infrastructure modernization programs focused on security, resiliency, scalability, and cloud adoption.

Qualifications
Required Qualifications:

• Extensive hands-on experience administering Microsoft Active Directory in large, complex enterprise environments.
• Strong knowledge of:
  • Active Directory forests, domains, trusts, and domain controllers
  • Active Directory Sites and Services
  • Group Policy administration
  • Authentication protocols and directory services
• Experience troubleshooting:
  • Authentication issues
  • Replication failures
  • DNS-related dependencies
  • Account access problems
  • Domain controller health and performance concerns
• Experience supporting Active Directory within large-scale, global, multi-domain, or multi-region environments.
• Strong understanding of:
  • Active Directory security architecture
  • Delegated administration
  • Privileged access models
  • Security hardening best practices
• Experience working with Active Directory as part of a broader Identity and Access Management ecosystem.
• Experience integrating Active Directory with:
  • Identity Governance and Administration (IGA) platforms
  • Privileged Access Management (PAM) solutions
  • Authentication and access management systems
• Hands-on experience with AWS infrastructure and Active Directory deployment models, including:
  • AWS Managed Microsoft AD
  • Self-managed Active Directory implementations
  • Hybrid identity architectures
• Experience developing infrastructure automation solutions using tools such as:
  • Terraform
  • Ansible
  • Chef
  • Similar automation frameworks
• Experience implementing Infrastructure-as-Code (IaC) and CI/CD methodologies.
• Proven experience supporting disaster recovery, operational resiliency, and incident response activities.
• Experience assessing and remediating audit findings, security gaps, and compliance risks within identity infrastructure.
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related field, or equivalent professional experience.

Preferred Qualifications:

• Experience supporting enterprise environments with globally distributed users and mission-critical authentication requirements.
• Experience leading Active Directory modernization or cloud transformation initiatives.
• Knowledge of Kerberos-based authentication design and implementation patterns.
• Experience developing standards and best practices for enterprise identity infrastructure.
• Background supporting cloud-hosted application authentication services and hybrid identity solutions.
• Experience conducting disaster recovery exercises, recovery validation testing, and operational readiness assessments.
• Experience improving enterprise identity security posture through:
  • Authentication modernization
  • Security hardening initiatives
  • Risk reduction programs
  • Audit remediation efforts
• Current cloud, infrastructure, security, or IAM-related certifications.

Benefits
Dahl Consulting is proud to offer a comprehensive benefits package to eligible employees that will allow you to choose the best coverage to meet your familys needs. For details, please review the DAHL Benefits Summary:https://www.dahlconsulting.com/benefits-w2fta/. How to Apply
Take the first step on your new career path!To submit yourself for consideration for this role, simply click the apply button and complete our mobile-friendly online application. Once weve reviewed your application details, a recruiter will reach out to you with next steps! Equal Opportunity Statement
As an equal opportunity employer, Dahl Consulting welcomes candidates of all backgrounds and experiences to apply. If this position sounds like the right opportunity for you, we encourage you to take the next step and connect with us. We look forward to meeting you!

#LI-CF1
#LI-Hybrid
#ZR #IT.Indeed

\nCompany Description

Our promise is simple. DAHL has proven year after year that we are flexible, consistent and easy to work with, which is why our clients and consultants have stayed with us, and we've continued to grow throughout the years.

Our clients know they can depend on our efforts, as we hold their priorities in high regard. We genuinely care about each and every relationship and promise to work with the utmost of respect, integrity and high energy, as we continually strive to build long-term relationships.

Company Description

Our promise is simple. DAHL has proven year after year that we are flexible, consistent and easy to work with, which is why our clients and consultants have stayed with us, and we've continued to grow throughout the years.\r\n \r\nOur clients know they can depend on our efforts, as we hold their priorities in high regard. We genuinely care about each and every relationship and promise to work with the utmost of respect, integrity and high energy, as we continually strive to build long-term relationships.