System Engineer, Active Directory

Job Description

Activision Blizzard's IT Enterprise Services division is looking for an experienced and
talented Active Directory engineer to join our Identity and Access Management Operations
team. The IAM Ops team is responsible for engineering and administration of the
applications and services which support identity management along with on-prem and cloud
authentication.

This role augments our team of System Engineers responsible for Microsoft Active
Directory/Azure AD (AD/AAD) services across the Activision, Blizzard, and King
organizations. The ideal candidate is well-versed in identity management principles and is
specifically experienced in designing, deploying, operating, and troubleshooting AD/AAD
implementations in a secure fashion and according to industry's best practices. If you dream
about optimized OUs and delegations, spent a week getting your end-to-end replication
time down to a couple minutes, and converted all your service accounts to GMSAs, then we
want to hear from you!

A good System Engineer is a self-starter who watches for every area of improvement and
proactively drives new solutions to stay ahead of the company's needs. Working directly
with our project management and other IT teams, this role will drive decisions which shape
our services for years to come. This role also works directly with our Information Security
team to review proposed configurations before implementing, and to address any issues
with existing infrastructure and resolve any issues with existing policies and configurations.

Responsibilities
• Design, deploy, operate and optimize new and existing AD/AAD solutions and
services.
• Leverage PowerShell and Azure Automation and other tools to standardize and
automate common tasks.
• Drive secure services toward Infrastructure as Code using tools like Powershell
DSC.
• Provide guidance to AD/AAD integration teams and other administrators from across
the business.
• Monitor service health and improve monitoring toolkits for better service insight and
alerting.
• Create documentation such as Standard Operating Procedures, Knowledge Base
articles, and Troubleshooting Guides which promote user and administrator
self-service.
• Support our AD/AAD infrastructure during business hours and participate in an
on-call rotation providing 24/7 support.
• Support legacy auth configurations such as LDAP.
• Perform other related duties as assigned.

Requirements
• Experience designing, deploying, and managing on premise Active Directory
in an enterprise environment.
• Experience using Powershell for automation of system and user
management.
• Experience engineering new enterprise solutions from requirements
gathering through implementation, documentation, and operational handoff.
• Experience designing, deploying, and managing MS Group Policy Objects.
• Experience designing and managing Azure AD and Azure AD Connect
including, but not limited to Azure AD Connect upgrades, configuration changes,
enterprise applications, conditional access policies, Azure AD hardening, auditing
and logging.
• Advanced knowledge of computer security systems, applications, procedures, and
techniques.
• Expert knowledge of Windows Operating system and authentication mechanisms
used by Active Directory and Azure AD.
• Strong interpersonal and communication skills.
• Excellent English written and verbal communication skills.
• Willing to travel occasionally.

Bonus Points For
• A degree in computer science, Information Technology or related field.
• Relevant Microsoft Certifications.
• Experience with tools like Quest Recovery Manager for AD and GPOADmin.
• Experience troubleshooting PKI and AD's use of it.
• Experience in administration of Office 365, Microsoft Partner Portal, Azure
infrastructure as a service.
• Experience with cross-tenant collaboration and guest identities in Azure AD.
• Experience with SAML and OIDC applications as it relates to Azure AD.
• Virtualization experience with VMware.
• Experience working in a DevOps environment, or knowledge of DevOps principles.
• Understanding of ITIL framework.
• Love for video games.

Jobcode: Reference SBJ-d5nbx3-18-116-69-195-42 in your application.