Sr. Systems Engineer (Active Directory)
Berkley · Wilmington, DE, US ·
- Seniority
- Senior
- Employment
- Full time
- Category
- Software engineering
- Experience
- 5+ years
- Visa sponsorship
- No
- Company size
- 1000+
- Salary
- USD 107,000 – 198,000
Berkley · Wilmington, DE, US ·
Senior engineer designs, secures, and automates a multi-forest Active Directory and Microsoft Entra hybrid environment, acting as the identity source of truth for a large corporation.
"Thoughtful Minds | Empowering Possibilities"W. R. Berkley Corporation is comprised of 60+ businesses alongside Berkley Technology Services (BTS) and other shared services groups. Here at Berkley Technology Services, the core of our success is our people. Our teams bring their own unique perspective and experiences which enables us to translate the needs of our business to deliver adaptable, secure solutions while providing an unmatched user-focused experience.At BTS, our teams thrive in Berkley’s decentralized model, leveraging the power of being part of a long-standing, heritage brand with extensive expertise while innovation and being entrepreneurial is encouraged. Internally, we operate as a relatively flat organization valuing communication and feedback. We pride ourselves in an open-door policy where no one is treated differently based on title, fostering a culture of trust, transparency, and engagement.Mission:We Believe in the value of every voiceTranslate needs into capabilitiesSecure the future of BerkleyVision:Be the foundation of Berkley through adaptable solutions, resilient environments, and an unmatched experience.Come join us as we push forward into the future of industry-leading technological solutions.
The Company is an equal employment opportunity employer.
At Berkley Technology Services, we believe AI-assisted ways of working are becoming a foundational part of how excellent engineering work gets done - much like the way digital communication tools did a generation ago. We expect every member of our team to actively integrate AI tools into their daily work, not as a substitute for expertise, but as a natural extension of it. Candidates who bring genuine curiosity about AI, and a demonstrated habit of using it to work smarter, will find themselves at home here.
The Sr. Systems Engineer (Active Directory) is an experienced Active Directory specialist to design, implement, and manage our enterprise-wide Active Directory/Entra Hybrid infrastructure. This is a highly technical, senior-level position requiring expertise in AD architecture, security best practices, and automation. This is not an administrator role. The ideal candidate will be a subject matter expert in AD technologies, with a proven track record of designing scalable, secure, and resilient AD solutions for complex environments. Experience with Active Directory Integrated DNS and Domain Controller administration is essential. This position is on the Platform Identity Management team with a focus on owning Active Directory as a Source of Truth (SOT) for Identity. This team is also responsible for Entra and Auth0 identity services, AD CS PKI, and Identity authN/authZ.
Active Directory Architecture: Extensive, hands-on experience in designing, implementing, and managing large, complex, multi-forest Active Directory environments (Minimum 5 years of experience). Deep expertise in AD components such as DNS, DC, GPOs, Sites and Services, and trusts.
Netwrix Directory Manager (NDM): Proven experience implementing, configuring, and managing NDM (or similar products) to provide a policy-based delegated AD administration and governance model within a least-privileged security framework.
Windows Platforms: In-depth knowledge of Windows Server operating systems (2016, 2019, 2022, 2025) and their roles within an enterprise environment.
Security Expertise: Strong understanding of AD security best practices, including privileged access management (PAM), role-based access control (RBAC), and security hardening techniques. Previous experience with server hardening within an AD environment is preferred.
Identity & Access Management (IAM): Ability to integrate Active Directory with IAM solutions aligned with Zero Trust, identity governance, and adaptive authentication concepts. Previous experience with Okta/Auth0, Microsoft Entra ID, MFA, LDAPS preferred.
Communication: Excellent written and verbal communication skills, with the ability to document and convey complex technical concepts to both technical and non-technical audiences.
Disaster Recovery: Experience with disaster recovery and business continuity planning for AD and its role within the organization's technology stacks.
AI Tools: Demonstrate comfort using AI-assisted tools in a professional context; approach AI as a standard part of modern workflow rather than a specialized or optional capability. Demonstrated comfort using AI-assisted tools in a professional context;approaches AI as a standard part of modern workflow rather than a specializedor optional capability
Education Requirement
• Bachelor’s degree in Computer Science, Information Technology, Information Systems, or a related discipline.• Equivalent experience and/or alternative qualifications will be considered.