Sr. IAM Engineer - Active Directory

Job Description This is a remote position. Role: Sr. IAM Engineer – Active Directory (AD) Services Location: Remote Duration: 6+ Months Contract JOB SUMMARY The Sr. IAM Engineer Directory Services (Contractor) is responsible for supporting, maintaining, securing, and modernizing the organization's Active Directory and hybrid identity environment. This role serves as a key contributor to directory services operations, recovery readiness, identity security, and future modernization efforts. The ideal candidate possesses strong Active Directory expertise, an Identity and Access Management (IAM) mindset, and the ability to balance operational support with long-term strategic initiatives. This individual must be adaptable, capable of learning new technologies quickly, and comfortable working across multiple identity-related disciplines. Experience with Quest and One Identity solutions is highly desirable. KEY ACCOUNTABILITIES / JOB FUNCTIONS · Maintain and enhance Active Directory resiliency by supporting backup, recovery, disaster recovery planning, recovery testing, and operational readiness activities. (55%) · Provide advisory support and guidance on Active Directory standards, architecture design, and security best practices, including developing and maintaining policies, design guidelines, and governance frameworks for enterprise directory services. (20%) · Partner with IAM, Infrastructure, Security, and application teams to support authentication, authorization, identity lifecycle, and access management initiatives. (15%) · Maintain and enhance Active Directory resiliency by supporting backup, recovery, disaster recovery planning, recovery testing, and operational readiness activities. (5%) · Research, evaluate, and adopt new technologies, tools, and processes that improve directory services, security posture, operational efficiency, and user experience. (5%) · Performs other duties as assigned. (5%) Adheres to Corporate Policies and Procedures, including Code of Conduct, Audit Procedures and any control related responsibility for financial data entered, stored, or reported via business systems within employee's control (list not exhaustive). Ongoing Obligation KNOWLEDGE, SKILLS & ABILITIES NEEDED · Strong understanding of Microsoft Active Directory architecture, administration, security, and troubleshooting. · Knowledge of hybrid identity environments, including Microsoft Entra ID integration. · Experience administering and troubleshooting Group Policy Objects (GPOs). · Understanding of Active Directory backup, recovery, and resiliency concepts. · Familiarity with IAM principles, including authentication, authorization, identity lifecycle management, and access governance. · Strong analytical and problem-solving skills. · Ability to work independently while effectively collaborating across technical and business teams. · Adaptable and quick learner with the ability to understand both tactical requirements and strategic objectives. · Strong verbal and written communication skills. · Experience with PowerShell or other automation technologies preferred. HESS RESPONSIBILITIES · Lead by example by "respecting and protecting" the health and safety of yourself and others. · Ensure your team and colleagues speak up and report all accidents, "near miss" incidents and work related ill health conditions. · Help your team follow HESS rules and procedures by promoting the HESS Golden Rules. · Attend HESS training and conduct risk assessments where required. · Demonstrate HESS leadership in accordance with our Heroes of Safe & Well programme. ESSENTIAL/MINIMUM QUALIFICATIONS · Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or equivalent work experience. · Minimum of 5-7 years of hands-on Active Directory experience within medium-to-large enterprise environments. · Experience supporting hybrid identity solutions involving Active Directory and Microsoft Entra ID. · Working knowledge of Active Directory recovery and disaster recovery concepts. · Ability to participate in operational support and project-related activities as needed. ESSENTIAL EXPERIENCE REQUIRED · 5-7 years of enterprise Active Directory administration and engineering experience. · Experience supporting Active Directory security, operations, maintenance, and troubleshooting. · Experience working with Group Policy administration and troubleshooting. · Experience supporting Active Directory recovery, resiliency, backup, or disaster recovery initiatives. · Experience working in an Identity and Access Management (IAM) environment or supporting IAM-related initiatives. · Experience collaborating with infrastructure, security, and application teams on identity-related projects. PREFERRED EXPERIENCE · Experience with Quest Change Auditor. · Experience with Quest Recovery Manager for Active Directory. · Experience with One Identity solutions. · Experience consolidating or migrating multiple Active Directory forests. · Experience supporting Active Directory modernization programs. · Experience with PowerShell automation and scripting. · Experience supporting large, distributed, or global enterprise environments.