Role: Senior Software Engineer (Active Directory & PAM)
Industry: Entertainment / Technology
Location: Burbank, CA or Seattle, WA or Orlando, FL
Duration: 11+ months, possibility for extension or conversion
Rate Range: $90-$102/hr
Work Requirements: US Citizen, GC Holders or Authorized to Work in US
Job Description:- Analyze the existing life cycle management of Identities created in Active Directory and Entra and help automate and modernize the process.
- Document and guide the operations team with the decommissioning of legacy instances of Active Directory.
- Evaluate capabilities of services/products and design solutions to deliver future service offerings through detailed technical analysis.
- Help with compliance and remediation activities of AD, Entra and related technology platforms.
- Define engineered designs, including full documentation
- Follow structured methodologies for technical analysis of products and solutions
Required Qualifications & Skills- Minimum of 8 years of work experience in Identity & Access Management
- Demonstrated experience designing, implementing, and integrating enterprise-level highly connected hybrid IAM solutions including:
- Active Directory
- Azure Active Directory / Entra ID
- Microsoft Identity Manager
- Active Directory Federation
- PAM Solutions
- Integrations between key services and various LDAP providers.
- Experience with Cyber Ark / Idira will be a huge plus.
- Experience in engineering, designing, and integrating both infrastructure components (domain controllers, sites and services, connectivity, etc.) and logical aspects (GPO management, directory structure, and management toolsets)
- Experience working with and directing suppliers in an outsourced environment infrastructure
- Hands-on experience with PAM platforms (e.g., CyberArk), including privileged account vaulting, Tier 0/1/2 credential management, and privileged access workstation (PAW) deployment
- Experience designing and enforcing role-based access controls (RBAC) and privileged identity management (PIM) across Active Directory and Entra ID
- Experience with PKI architecture, certificate lifecycle management, and certificate authority rationalization or migration
- Experience with Active Directory domain consolidation, migration, and legacy domain decommissioning
- Familiarity with Entra ID governance, including cross-tenant identity governance models
- Experience automating non-human (service) account lifecycle management, including provisioning, ownership enforcement, and deprovisioning
- Experience conducting AD/Entra security baseline assessments and remediating identified findings
Project Work:
PAM Onboarding, AD Standardization, Lifecycle Management
- Lead consolidation and decommissioning of the legacy MGMT and iDMZ Active Directory domains and their associated PKI infrastructure
- Onboard privileged accounts into the PAM platform, vaulting Tier 0/1/2 credentials and enforcing zero standing privileged access across AD domains
- Implement role-based access controls (RBAC) and privileged identity management (PIM) across Active Directory and Entra ID, replacing legacy, overly broad permissions
- Automate provisioning and deprovisioning of non-human (service) accounts, including ownership enforcement and lifecycle management
- Standardize AD architecture and governance across Enterprise Tech and business unit/segment-managed domains, including baseline security assessments
- Design and pilot cross-tenant Entra ID governance to extend identity controls across business segments and partners
- Deploy Privileged Access Workstations (PAW) and restrict Tier 0 administrative activity to hardened, isolated devices
- Remediate high-priority security findings across AD and Entra/M365 tenants to reduce the attack surface ahead of migration
Troubleshooting & Support:- Work with security and infrastructure teams to remediate vulnerabilities.
- Document configurations, policies, and procedures for future reference.
About INSPYR Solutions
Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients' business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.
INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, or any other protected status. INSPYR Solutions complies with all applicable laws governing nondiscrimination in employment in every location in which the company has facilities.Applicants requiring reasonable accommodation during the application or interview process should contact HR@inspyrsolutions.com
for assistance.
Information collected and processed through your application with INSPYR Solutions (including any job applications you choose to submit) is subject to INSPYR Solutions' Privacy Policy and INSPYR Solutions' AI and Automated Employment Decision Tool Policy: https://www.inspyrsolutions.com/policies/. By submitting an application, you are consenting to being contacted by INSPYR Solutions through phone, email, or text.