Principal Active Directory Security Engineer
About the position When you join Verizon, you want more out of a career. A place to share your ideas freely — even if they're daring or different. Where the true you can learn, grow, and thrive. At Verizon, we power and empower how people live, work and play by connecting them to what brings them joy. We do what we love — driving innovation, creativity, and impact in the world. Our V Team is a community of people who anticipate, lead, and believe that listening is where learning begins. In crisis and in celebration, we come together — lifting our communities and building trust in how we show up, everywhere & always. Want in? Join the V Team Life. You'll be doing work that matters alongside other talented people, transforming the way people, businesses and things connect with each other. Beyond powering America's fastest and most reliable network, we're leading the way in broadband, cloud and security solutions, Internet of Things and innovating in areas such as video entertainment. Of course, we will offer you great pay and benefits, but we're about more than that. Verizon is a place where you can craft your own path to greatness. Whether you think in code, words, pictures or numbers, find your future at Verizon. You will be an agent for change driving the modernization of business-critical infrastructures. As a Senior Directory Services engineer within our Verizon Cyber Security Organization, you will be working with our Active Directory Security engineering team to secure, support and modernize our Global Directory Architecture. This specific position will have an emphasis on AD Future state Architecture, AD Security, Certificate Infrastructure, Zero Trust and MFA integration all while maintaining Verizon security policies and meeting SOX/PCI/GDPR compliance requirements. Responsibilities • Advising security and application teams on best ways to leverage AD securely and efficiently in our specific environments. • Architecting, engineering and securing Onprem Active Directory and AD LDS infrastructures. • Architecting, engineering, securing and modernizing Active Directory Certificate Services. • Supporting all Tier Zero Infrastructure - AD, ADLDS, ADCS, HyperV, backups, etc. • Engineering AD future state, migrating, cleaning up and decommissioning legacy directories. • Consulting on AD/IAM in the cloud, especially Microsoft Entra ID. • Architecting and engineering Zero Trust Directory Strategy. • Other duties as assigned. Requirements • Bachelor's degree or four or more years of work experience. • Six or more years of relevant work experience. • Windows Server Administration experience. • Active Directory engineering and support experience. • Experience with leading technical projects. • Active Directory Certificate Services experience. • Advanced PowerShell experience. Nice-to-haves • Experience with Microsoft Entra Connect, Entra ID security and federation. • Experience with Windows Hyper-V Management. • Experience with AD Health Monitoring. • Experience troubleshooting at the network level via Wireshark/Netsh/TCPDump. • Microsoft ESAE / Tier Zero engineering experience. • Smartcard/MFA/Zero Trust experience. • SIEM Experience - specifically Splunk, Chronicle/Sec Ops, Elastic. • SQL experience. • AWS - EC2, ENI and security group understanding. • Familiarity with identity and access management processes and systems. • Quest Recovery Manager and Change Auditor experience. • Excellent collaboration skills and the ability to effectively work in a team environment among resources with a varying degree of technical competencies. • Strong organizations and time management skills working in a rapid software development environment. • Excellent written, verbal, presentation and interpersonal skills. • Microsoft certification. • CISSP or other Security certifications. Apply tot his job