At Stefanini we are more than 30,000 geniuses, connected from more than 40 countries, we co-create a better future. Apply Directory Services Engineer Requirements
• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field; a master's degree is preferred.
• 4 years of experience in IT engineering, with strong expertise in Active Directory, Directory Services, and/or Azure identity solutions.
• Advanced experience with Microsoft Active Directory Domain Services (AD DS), including domain management, Group Policy Objects (GPOs), organizational units, users, and groups.
• Strong knowledge of LDAP connectivity, Kerberos/NTLM authentication, PKI integration, network ports and protocols, and firewall communications.
• Hands-on experience with Active Directory security, privileged access management, security monitoring, and backup and recovery processes.
• Experience with Microsoft Entra ID (formerly Azure Active Directory), Azure AD Connect, Pass-through Authentication (PTA), and Password Hash Synchronization (PHS).
• Knowledge of Azure Role-Based Access Control (RBAC), Privileged Identity Management (PIM), Multi-Factor Authentication (MFA), Conditional Access Policies, and Microsoft Authenticator.
• Experience with Microsoft Intune, device management policies, Azure AD Join/Hybrid Join, and identity integration across on-premises and cloud environments.
• Familiarity with Azure Policies, Azure Blueprints, Azure Resource Manager (ARM) templates, Bicep, and/or Terraform.
• Strong analytical, diagnostic, troubleshooting, and technical documentation skills.




• Experience working in large, complex, and integral enterprise environments, collaborating with cross-functional engineering and operations teams.
• Proven ability to manage technical projects, implement infrastructure enhancements, improve operational processes, and mentor junior engineers.
• Strong communication skills and fluent English proficiency.
• Preferred certifications: CISSP, Microsoft Azure Administrator Associate, Responsibilities
• Design, engineer, implement, and maintain enterprise directory services and identity infrastructure across on-premises and cloud environments.
• Manage and enhance Active Directory services, including domain creation, Group Policy administration, user and group management, and organizational unit configuration.
• Configure, maintain, and troubleshoot identity synchronization and authentication between on-premises Active Directory and Microsoft Entra ID.
• Implement and maintain identity security controls, including MFA, Conditional Access, RBAC, PIM, and privileged access management.
• Evaluate and strengthen Active Directory security through configuration reviews, security enhancements, monitoring, backup and recovery,



and access control improvements.
• Test directory service enhancements and application integrations in laboratory environments before promoting changes to UAT and production.
• Support application teams in establishing secure LDAP connectivity and Active Directory integrations while ensuring that applications do not negatively impact directory functionality.
• Troubleshoot complex authentication, connectivity, password, account lockout, Kerberos, NTLM, and directory service issues.
• Review network traffic, ports, protocols, firewall configurations, and authentication flows to identify and resolve infrastructure issues.
• Manage and support directory service infrastructure, including lab servers, post-patching validation, and infrastructure readiness.
• Automate infrastructure provisioning and configuration using Terraform, Bicep, ARM templates, or other relevant tools, where applicable.
• Serve as a technical subject matter expert, contribute to technology roadmaps, recommend system enhancements, and ensure compliance with corporate security standards.
• Identify root causes, assess business and technical impacts, and implement sustainable solutions to improve service reliability and security.
• Provide technical guidance and mentorship to junior engineers while maintaining clear technical documentation and supporting continuous improvement initiatives. Fully remote
• Company Equipment
• Personnel Days
• Multicultural experience
• Path Career
• Mentoring/Learning Platforms

📌 Directory Services Engineer (Guadalajara)
🏢 Stefanini LATAM
📍 Guadalajara