Domain Services Lead

We are seeking a Domain Services Lead to spearhead the strategy, architecture, and governance of our Identity and Access Management (IAM) ecosystem. In this role, you will bridge the gap between technical execution and high-level governance, ensuring our hybrid identity infrastructure is secure, compliant, and scalable.

You will lead a team of identity engineers while serving as the ultimate subject matter expert (SME) for Active Directory (AD), Microsoft Entra ID, and connected domain tools.

OBJECTIVES OF THIS ROLE

The Domain Services Lead is responsible for the stability, security, and performance of infrastructure application platforms including Active Directory, IT ticketing systems, and unified endpoint management tools. The Lead ensures that the foundational systems required for user authentication, endpoint control, and service automation are healthy, secure, and operational at all times. The role includes managing performance, facilitating cross-team collaboration, and mentoring team members.

KEY RESPONSIBILITIES

• Manage configuration, monitoring, and troubleshooting of AD forests, GPOs, DHCP, DNS, and domain replication.
• Oversee the health of infrastructure platforms supporting ITSM, endpoint management, and directory services.
• Work with security and endpoint teams to manage identity lifecycle and device policies.
• Perform periodic health checks, vulnerability remediation, and integration testing.
• Lead service onboarding for new domains, tenants, or platform integrations.
• Track platform updates, patches, and releases; validate compatibility.
• Represent Domain Services in CRB meetings, audit walkthroughs, and operational reviews.
• Mentor Specialists and Analysts; support their development through hands-on coaching and planning.

SKILLS AND QUALIFICATIONS

• Bachelor's in IT, Systems Administration, or a related field.
• At least 5 years in Active Directory and domain management roles, including team leadership.
• Skilled in domain hardening, AD group management, and troubleshooting replication and policy issues.
• Familiarity with endpoint tools (ManageEngine, SCCM, Intune), ITSM platforms, and SSO/MFA integration.