Senior Directory Services IAM Engineer

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Job Details

About Salesforce

We're Salesforce, the Customer Company, inspiring the future of business with AI Data CRM. Leading with our core values, we help companies across every industry blaze new trails and connect with customers in a whole new way. And, we empower you to be a Trailblazer, too - driving your performance and career growth, charting new paths, and improving the state of the world. If you believe in business as the greatest platform for change and in companies doing well and doing good - you've come to the right place.

*****This candidate must be a U.S. citizen (U.S. born or naturalized) who does not hold dual citizenship and agrees to complete a U.S. federal government Minimum Background Investigation (MBI) for a Moderate Public Trust position.

As a Senior Directory Services IAM Engineer in the Security organization, you will be an enterprise expert at Microsoft Entra ID and Active Directory. This job requires large enterprise-level experience designing, building, managing, and supporting these environments as a Domain Administrator and Global Administrator. Including automation skills and mindset.

This role would join the team responsible for the Identity and Access Management solutions that support the needs of our Salesforce employees. This includes, but is not limited to: Directory Services, design, architecture, capacity planning, operations, and DR.

You will also be responsible for maintaining these mission critical Directory and Auth services. You will build relationships and interact with various business, engineering, security, and operational teams.

This position will partner with and support our CMMC (Cybersecurity Maturity Model Certification) Directory program. The CMMC environment is designed to ensure contractors meet specific cybersecurity requirements to protect sensitive information like Federal Contract Information (FCI) and Controlled Unclassified Information (CUI).

The Senior Directory Services Engineer will contribute to the overall success of the engineering organization by providing recommendations and key insight into the technological path of corporate IT.

Responsibilities:

• Establish close working relationships with other Security teams, Infrastructure Operations, and Product Management teams

• Participate in ongoing technology evaluations and keep up with technology trends and industry standards

• Operate as a technical expert on infrastructure projects pertaining to Entra ID, Active Directory, AD Audit tools and certificates, Monitoring and Logging, Systems Management, Capacity Planning, and DR

• Perform infrastructure service implementations, performance analysis and optimization, monitoring, problem resolution, upgrade planning and execution, and process creation and documentation

• Large enterprise Domain consolidation and decommission experience from acquisitions

• Automation and CI/CD is a must. Powershell, Python and GoLang are preferred scripting languages

• Continually analyze and work to improve the quality of services offered by Corporate IT

• Ensure new Directory Service technologies are adequately tested and integrated with Infrastructure and Application Services

• Optimize or re-design existing infrastructure services as needed

• Ensure service availability & reliability of all infrastructure services

• Test lab development

• Suggest improvements based on technology, best practices, or changing requirements

• Provide regular management updates on advantages and potential opportunities for new technologies and automation

• Assist Infrastructure Operations with testing & implementation of new technologies and/or services including methods, policies and procedures for installation, management, monitoring and support

• Work with and manage outside consulting technical subject matter experts, as needed

• Help resolve complex IT issues in a Tier 3 capacity

• Train/Mentor junior staff members as appropriate

Required Skills/Experience:

• 7 years of design/support of Enterprise environments with over 50,000 users

• Demonstrated ability to think and execute long-term and big-picture in an environment with a short-term focus.

• 5 years experience as a Domain Administrator with large Microsoft Active Directory: Designing, Implementing, Maintaining, Troubleshooting

• 7 years experience as a Global Administrator with large Microsoft Entra ID (Azure AD): Designing, Implementing, Maintaining, Troubleshooting

• 7 years of enterprise security experience

• 7 years of experience working with Windows Server environments

• 5 years of PowerShell and other scripting language experience

• 5 years experience with an Identity organization

• Deep knowledge of Authentication and AD Security

• Python software development experience

• Object-oriented programming

• Proficiency in DNS, PKI, LDAP

• Directory integration with 3rd Party Applications and hosted services

• Experience with mission-critical services and applications in a global enterprise environment

• Customer service oriented with strong interpersonal and leadership skills

• Excellent time management and prioritizing skills

• Self-motivator able to take tasks or projects and run with them

• Great oral and written communication skills

• Ability to work well and collaborate with other teams of various skills

• Strong analytical skills coupled with technical creativity and vision

Desired Skills/Experience:

• Experience with Okta and other IDPs

• Experience with AWS

• Experience with the VMware Platform

• Experience with Agile Development Methodology

• Experience with SAAS and PAAS applications

• Experience with Terraform Configuration Management

• Experience managing large-scale cloud infrastructure hosted on multiple OS platforms

• Background in Information Security

• One or more industry certifications (eg, MCSE)

Accommodations

If you require assistance due to a disability applying for open positions please submit a request via this Accommodations Request Form.

Posting Statement

Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that's inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications - without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.