Senior Sre - Identity & Directory Services
Genesis10 is currently seeking a Senior SRE - Identity & Directory Services for a hybrid position (minimum 3 days per week onsite) with a Global Financial Institution located in Charlotte, NC and Plano, TX. This is a 12+ month contract opportunity.
The Senior SRE for Identity & Directory Services is responsible for ensuring the availability, security, resilience, and operational excellence of enterprise identity platforms. This role acts as a subject matter expert for Active Directory, identity tooling, and cloud identity services, working closely with engineering, security, and platform teams to continuously improve identity reliability. This is a senior, hands-on role requiring deep technical expertise, strong engineering discipline, and the ability to influence platform standards and remediation strategies at scale.
Responsibilities:
- Serve as primary SRE and technical SME for Active Directory, identity services, and supporting tooling
- Design and operate highly available, resilient AD and identity architectures, including backup, restore, and disaster recovery capabilities
- Partner with security and engineering teams to remediate identity vulnerabilities, misconfigurations, and legacy/non-permitted technologies
- Implement site reliability engineering practices for identity platforms, including SLIs/SLOs, error budgets, proactive monitoring, and resiliency testing
- Lead automation efforts for identity operations using Infrastructure as Code and configuration management
- Support multi-cloud identity integrations across Azure, AWS, and GCP, ensuring secure authentication, authorization, and secrets handling
- Provide technical leadership during incidents, root cause analysis, and post-incident remediation
- Establish and enforce engineering standards, patterns, and guardrails for identity platforms
- Act as a trusted advisor to engineering teams on secure identity design and operational reliability
Requirements:
- Deep expertise in Active Directory (AD) architecture, replication, DNS, trusts, GPOs, and security hardening
- Experience with AD backup, recovery, forest/domain restoration, and incident response
- Experience applying Site Reliability Engineering (SRE) principles to infrastructure platforms (availability, resilience, observability)
- Experience operating Tier 0 or mission-critical systems
- Strong understanding of Identity & Access Management (IAM) including authentication, authorization, federation, and privileged access
- Hands-on experience with Azure, AWS, and GCP identity and security services
- Experience identifying and remediating identity-related vulnerabilities, misconfigurations, and legacy tools
- Scripting and automation skills (PowerShell, Python, Bash)
- Knowledge of Infrastructure as Code concepts (Terraform or equivalent)
Desired Skills:
- Experience with Identity Threat Detection & Response (ITDR) concepts
- Experience with Privileged Access Management (PAM) solutions (e.g., vaulting, session monitoring)
- Knowledge of secrets management and key management systems
- Familiarity with Policy as Code and configuration compliance frameworks
- Experience integrating identity platforms with CI/CD and platform engineering teams
- Strong background in incident management, root cause analysis, and continuous improvement
- Ability to influence standards and mentor engineers across teams
Only candidates available and ready to work directly as Genesis10 employees will be considered for this position.
If you have the described qualifications and are interested in this exciting opportunity, please apply!