Directory Services Engineer / LDAP Administrator

Role & responsibilities

• Administration & Maintenance: Perform daily administration, monitoring, and maintenance of PingDirectory, ForgeRock DS, or OpenDS servers.
• Installation & Upgrades: Install, configure, patch, and upgrade directory server environments.
• High Availability & Replication: Configure and manage multi-master replication to ensure high availability and disaster recovery across multiple data centers.
• Security & Access Control: Implement and enforce robust security policies, including Attribute-Based Access Control (ABAC), Role-Based Access Control (RBAC), and encryption for data at rest and in transit.
• Troubleshooting: Serve as a subject matter expert for troubleshooting complex issues related to LDAP, directory synchronization, and performance bottlenecks.
• Performance Tuning: Monitor system performance and fine-tune server parameters, indexes, and JVM settings to optimize for high-volume workloads and ensure sub-millisecond response times.
• Integration: Integrate directory services with other IAM components and enterprise applications, utilizing LDAP, REST, and SCIM protocols.
• Automation: Develop scripts and leverage DevOps tools (e.g., Ansible, Terraform) for automating tasks like installation, configuration management, and monitoring.
• Backup & Recovery: Implement and test backup and restore procedures to ensure data integrity and disaster recovery preparedness.
• Schema Management: Manage and extend the directory schema to support new applications and attributes without downtime.
• Collaboration: Work with cross-functional teams, including developers, network engineers, and security teams, to support business requirements.

Preferred candidate profile

The Directory Services Engineer is responsible for the design, implementation, and administration of the organization's directory service infrastructure. This role ensures the directory's security, performance, and reliability using industry-leading solutions such as PingDirectory, ForgeRock DS, or OpenDS. The engineer will manage user and application identities, enforce access controls, and integrate directory services with other critical enterprise systems.