At Stefanini we are more than 30,000 geniuses, connected from more than 40 countries, we co-create a better future.

Apply Directory Services Engineer!

Requirements

- Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field; a master's degree is preferred.
- 4 years of experience in IT engineering, with strong expertise in Active Directory, Directory Services, and/or Azure identity solutions.
- Advanced experience with Microsoft Active Directory Domain Services (AD DS), including domain management, Group Policy Objects (GPOs), organizational units, users, and groups.
- Strong knowledge of LDAP connectivity, Kerberos/NTLM authentication, PKI integration, network ports and protocols, and firewall communications.
- Hands-on experience with Active Directory security, privileged access management, security monitoring, and backup and recovery processes.
- Experience with Microsoft Entra ID (formerly Azure Active Directory), Azure AD Connect, Pass-through Authentication (PTA), and Password Hash Synchronization (PHS).
- Knowledge of Azure Role-Based Access Control (RBAC), Privileged Identity Management (PIM), Multi-Factor Authentication (MFA), Conditional Access Policies, and Microsoft Authenticator.
- Experience with Microsoft Intune, device management policies, Azure AD Join/Hybrid Join, and identity integration across on-premises and cloud environments.
- Familiarity with Azure Policies, Azure Blueprints, Azure Resource Manager (ARM) templates, Bicep, and/or Terraform.
- Strong analytical, diagnostic, troubleshooting, and technical documentation skills.




- Experience working in large, complex, and general enterprise environments, collaborating with cross-functional engineering and operations teams.
- Proven ability to manage technical projects, implement infrastructure enhancements, improve operational processes, and mentor junior engineers.
- Strong communication skills and fluent English proficiency.
- Preferred certifications: CISSP, Microsoft Azure Administrator Associate,

Responsibilities

- Design, engineer, implement, and maintain enterprise directory services and identity infrastructure across on-premises and cloud environments.
- Manage and enhance Active Directory services, including domain creation, Group Policy administration, user and group management, and organizational unit configuration.
- Configure, maintain, and troubleshoot identity synchronization and authentication between on-premises Active Directory and Microsoft Entra ID.
- Implement and maintain identity security controls, including MFA, Conditional Access, RBAC, PIM, and privileged access management.
- Evaluate and strengthen Active Directory security through configuration reviews, security enhancements, monitoring, backup and recovery,



and access control improvements.
- Test directory service enhancements and application integrations in laboratory environments before promoting changes to UAT and production.
- Support application teams in establishing secure LDAP connectivity and Active Directory integrations while ensuring that applications do not negatively impact directory functionality.
- Troubleshoot complex authentication, connectivity, password, account lockout, Kerberos, NTLM, and directory service issues.
- Review network traffic, ports, protocols, firewall configurations, and authentication flows to identify and resolve infrastructure issues.
- Manage and support directory service infrastructure, including lab servers, post-patching validation, and infrastructure readiness.
- Automate infrastructure provisioning and configuration using Terraform, Bicep, ARM templates, or other relevant tools, where applicable.
- Serve as a technical subject matter expert, contribute to technology roadmaps, recommend system enhancements, and ensure compliance with corporate security standards.
- Identify root causes, assess business and technical impacts, and implement sustainable solutions to improve service reliability and security.
- Provide technical guidance and mentorship to junior engineers while maintaining clear technical documentation and supporting continuous improvement initiatives.

Fully remote

- Company Equipment
- Personnel Days
- Multicultural experience
- Path Career
- Mentoring/Learning Platforms

📌 Directory Services Engineer (México)
🏢 Stefanini LATAM
📍 México