CISO Technical Lead – Directory Services Engineer
Lead and manage Citi's Active Directory and Hybrid Entra ID environment, ensuring secure, stable, and compliant identity services. The role focuses on operations, incident resolution, engineering collaboration, and continuous improvement of enterprise directory services.Primary ResponsibilitiesManage and maintain Microsoft Active Directory and Azure AD (Entra ID) environments, including AD Connect infrastructureEnsure high availability, security, and compliance of identity platformsTroubleshoot and resolve complex AD/identity-related incidents, performing root cause analysisDrive incident management, repeat issue elimination, and permanent fixesProvide senior-level support across AD, DNS, Kerberos, LDAP, Group Policies, and Windows Server technologiesCollaborate with global engineering and operations teams to deliver next-gen identity solutionsMaintain documentation and improve operational processes and proceduresLead cross-team coordination calls for incident resolution and project deliveryParticipate in on-call rotation for major incidents and outagesPartner with risk and compliance teams to enforce identity governance and system standardsIdentify and implement process improvements and operational efficienciesDeliverablesStable, secure, and compliant identity and directory services platformEffective incident management with long-term problem resolutionStrong cross-team engineering collaboration and continuous service improvementRequired Skills & Expertise5+ years of hands-on experience with multi-domain Active Directory and Microsoft Entra ID8+ years of experience supporting Windows Server environmentsStrong expertise in:Active Directory (LDAP, Kerberos, DNS, Sites & Services)Azure AD ConnectConditional Access PoliciesAzure infrastructure (Subscriptions, Resource Groups, ExpressRoute)AD backup and recoveryPerformance monitoring and troubleshootingStrong incident and problem management experience in enterprise environmentsAbility to work across global teams and break organizational silosStrong communication skills for technical and senior stakeholder engagementPreferred ExperiencePowerShell scripting experienceSQL Server knowledgeExperience balancing operational stability with strategic identity transformation initiatives