Senior Platform Engineer

Description Hybrid 4 Days a week on-site in either Burbank, CA or Orlando, FL or Seattle, WA

Our client seeks a Senior Platform Engineer to drive identity modernization initiatives across Active Directory, Entra ID, and Privileged Access Management. The role will focus on identity lifecycle automation, Active Directory standardization, security remediation, and PAM onboarding within a complex hybrid environment.

Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance. Rate: $88.00 to $96.99/hr. w2

JN -102026-108935

Responsibilities

• Analyze and modernize identity lifecycle management across Active Directory and Entra ID.
• Automate provisioning, ownership enforcement, and deprovisioning for service and non-human accounts.
• Design and implement enterprise IAM solutions and integrations.
• Lead Active Directory consolidation and decommissioning of legacy domains.
• Support PAM onboarding including privileged account vaulting and credential management.
• Implement RBAC and PIM strategies.
• Conduct AD and Entra security assessments and drive remediation.
• Design and support PKI modernization, certificate lifecycle management, and certificate authority rationalization.
• Develop technical designs, architecture documentation, and operational procedures.
• Collaborate with security, infrastructure, and operations teams to improve identity governance and compliance.
• Onboard Tier 0, Tier 1, and Tier 2 privileged accounts into CyberArk or equivalent PAM platforms.
• Enforce Zero Standing Privilege principles and deploy Privileged Access Workstations.
• Consolidate and decommission legacy MGMT and iDMZ AD domains and standardize AD baselines.
• Automate service account lifecycle, improve ownership controls, and enhance cross-tenant governance in Entra ID.

Experience Requirements

• 8+ years of IAM engineering experience.
• Expertise in Active Directory architecture, administration, and engineering.
• Entra ID / Azure AD and Microsoft Identity Manager (MIM).
• Active Directory Federation Services (ADFS) and LDAP integrations.
• CyberArk or other enterprise PAM platforms.
• RBAC and PIM implementation.
• PKI architecture and certificate management.
• AD domain migrations and legacy domain decommissioning.
• Identity governance and compliance remediation.
• Vendor and supplier management in outsourced environments.
• Preferred: CyberArk expertise, Idira experience, cross-tenant Entra ID governance, security baseline assessments, and enterprise-scale identity modernization.

Education Requirements