At Stefanini we are more than 30,000 geniuses, connected from more than 40 countries, we co-create a better future.RequirementsBachelor's degree in Computer Science, Information Technology, Engineering, or a related field; a master's degree is preferred.4 years of experience in IT engineering, with strong expertise in Active Directory, Directory Services, and/or Azure identity solutions.Advanced experience with Microsoft Active Directory Domain Services (AD DS), including domain management, Group Policy Objects (GPOs), organizational units, users, and groups.Strong knowledge of LDAP connectivity, Kerberos/NTLM authentication, PKI integration, network ports and protocols, and firewall communications.Hands-on experience with Active Directory security, privileged access management, security monitoring, and backup and recovery processes.Experience with Microsoft Entra ID (formerly Azure Active Directory), Azure AD Connect, Pass-through Authentication (PTA), and Password Hash Synchronization (PHS).
Knowledge of Azure Role-Based Access Control (RBAC), Privileged Identity Management (PIM), Multi-Factor Authentication (MFA), Conditional Access Policies, and Microsoft Authenticator.Experience with Microsoft Intune, device management policies, Azure AD Join/Hybrid Join, and identity integration across on-premises and cloud environments.Familiarity with Azure Policies, Azure Blueprints, Azure Resource Manager (ARM) templates, Bicep, and/or Terraform.Strong analytical, diagnostic, troubleshooting, and technical documentation skills.Experience working in large, complex, and integral enterprise environments, collaborating with cross-functional engineering and operations teams.Proven ability to manage technical projects, implement infrastructure enhancements, improve operational processes, and mentor junior engineers.Strong communication skills and fluent English proficiency.Preferred certifications: CISSP, Microsoft Azure Administrator Associate,ResponsibilitiesDesign, engineer, implement,



and maintain enterprise directory services and identity infrastructure across on-premises and cloud environments.Manage and enhance Active Directory services, including domain creation, Group Policy administration, user and group management, and organizational unit configuration.Configure, maintain, and troubleshoot identity synchronization and authentication between on-premises Active Directory and Microsoft Entra ID.Implement and maintain identity security controls, including MFA, Conditional Access, RBAC, PIM, and privileged access management.Evaluate and strengthen Active Directory security through configuration reviews, security enhancements, monitoring, backup and recovery, and access control improvements.Test directory service enhancements and application integrations in laboratory environments before promoting changes to UAT and production.Support application teams in establishing secure LDAP connectivity and Active Directory integrations while ensuring that applications do not negatively impact directory functionality.Troubleshoot complex authentication, connectivity, password, account lockout, Kerberos, NTLM, and directory service issues.Review network traffic, ports, protocols, firewall configurations, and authentication flows to identify and resolve infrastructure issues.Manage and support directory service infrastructure, including lab servers, post-patching validation, and infrastructure readiness.Automate infrastructure provisioning and configuration using Terraform, Bicep, ARM templates, or other relevant tools, where applicable.Serve as a technical subject matter expert, contribute to technology roadmaps, recommend system enhancements, and ensure compliance with corporate security standards.Identify root causes, assess business and technical impacts, and implement sustainable solutions to improve service reliability and security.Provide technical guidance and mentorship to junior engineers while maintaining clear technical documentation and supporting continuous improvement initiatives.
#J-*****-Ljbffr

📌 Directory Services Engineer (Jalisco)
🏢 Stefanini LATAM
📍 Jalisco