Senior Identity Access Management Specialist

Company Overview: Global Technology Services is a rapidly expanding organization situated in Medellín, Colombia. We pride ourselves on possessing one of the most influential networks within software development and IT services for the entertainment, financial, and logistics sectors. Our corporate projections offer a multitude of opportunities for professionals to elevate their careers and experience substantial growth. Joining our team means engaging with expansive engineering teams across Latin America, Philippines and the United States, contributing to cutting-edge developments in multiple industries. Position Title: Identity Access Management Specialist. Category: Cybersecurity & Risk Management Seniority: Senior Location: Colombia and Mexico - Remote What you will be doing: We are seeking an experienced Senior IAM Engineer to join our Infrastructure team. This role is ideal for a highly technical engineer with deep expertise in Active Directory, PKI, Microsoft 365, and AWS infrastructure. You will be responsible for designing, maintaining, securing, and automating enterprise identity and infrastructure services while contributing to cloud modernization and disaster recovery initiatives. This is a hands-on engineering position requiring strong architectural knowledge, production troubleshooting skills, and a passion for automation and operational excellence. Key Responsibilities Active Directory & Identity Management Serve as the subject matter expert for enterprise Active Directory architecture and administration. Design, implement, and maintain on-premises Active Directory environments, including forest and domain services. Manage hybrid identity solutions using Microsoft Entra ID (Azure AD) and Azure AD Connect. AD DNS architecture including SRV records and _msdcs zones Administer Azure Conditional Access policies and identity security controls. Maintain Active Directory security through RBAC, Privileged Identity Management (PIM), stale object remediation, and least-privilege access practices. Troubleshoot complex authentication, replication, DNS, trust, and directory service issues. Kerberos and NTLM authentication fundamentals Public Key Infrastructure (PKI) Design, administer, and maintain Microsoft Active Directory Certificate Services (ADCS) or equivalent PKI infrastructure. Manage the complete certificate lifecycle, including issuance, renewal, revocation, and expiration monitoring. Maintain CA hierarchy health, CRL/OCSP publishing, AIA/CDP configuration, and certificate templates. Proactively identify and remediate certificate-related risks before they impact production. Develop and maintain PKI documentation, architecture diagrams, and operational procedures. Microsoft 365 & Infrastructure Services Administer Microsoft 365 services, including Exchange Online, Teams, and hybrid identity. Manage email security technologies including ProofPoint, DKIM, SPF, and DMARC. Monitor infrastructure health using LogicMonitor or similar enterprise monitoring platforms. Automation & Documentation Develop and maintain PowerShell automation for infrastructure provisioning, reporting, and operational tasks. Produce comprehensive technical documentation, including runbooks, architecture diagrams, and standard operating procedures. Identify opportunities to improve operational efficiency through automation and process improvements. Required Skills & Experience 7+ years of enterprise systems engineering experience supporting complex production environments. Strong experience with enterprise Active Directory architecture and administration. Expertise managing Microsoft Entra ID (Azure AD) and hybrid identity environments. Hands-on experience administering Microsoft ADCS or enterprise PKI solutions. Experience administering Microsoft 365, including Exchange Online and hybrid identity. Advanced PowerShell scripting skills with the ability to independently develop production-quality automation. Excellent troubleshooting and problem-solving abilities. Strong written communication skills with experience producing high-quality technical documentation. Nice to Have Skills AWS certification at any level (Cloud Practitioner or higher); Solutions Architect Associate preferred Microsoft certifications relevant to Azure, M365, or Windows Server administration Familiarity with enterprise monitoring platforms — LogicMonitor or equivalent Experience with ProofPoint or comparable email security platform Familiarity with Azure Conditional Access policy design and enforcement Experience with PowerShell scripting for automation and infrastructure management Comfort working in a remote-first environment with distributed teams Soft Skills Strong problem-solving and debugging skills Excellent communication and collaboration abilities Ability to work independently and take ownership of projects Leadership mindset