The engineer serves as a subject matter expert for Active Directory Domain Services (AD DS), Entra ID integration, Group Policy, LDAP services, Active Directory Certificate Services (AD CS), and identity-related automation. The role supports modernization efforts, operational excellence, platform resiliency, and identity security initiatives aligned to the organization's IAM strategy and Platform Engineering objectives.
Responsibilities
Active Directory Platform Administration
Install, configure, administer, and maintain
Active Directory Domain Services (AD DS)
Active Directory Lightweight Directory Services (AD LDS)
Microsoft Entra ID integration
Active Directory Certificate Services (AD CS)
Group Policy infrastructure
DNS and DHCP services supporting AD
Hybrid identity synchronization services
Perform platform upgrades, migrations, patch management, and lifecycle management.
Monitor AD health, replication, authentication services, and directory performance.
Manage domain controllers, forests, domains, trusts, sites, and services.
Support directory consolidation, modernization, and cloud identity initiatives.
Develop standards for directory services architecture and operational support.
Directory Services & Identity Infrastructure
Administer users, groups, organizational units (OUs), and directory permissions.
Design and implement Group Policy Objects (GPOs).
Maintain Active Directory delegation models.
Support enterprise authentication services relying on LDAP, Kerberos, NTLM, and SAML.
Administer service accounts and managed service accounts.
Support certificate-based authentication and PKI integrations.
Maintain naming standards, OU structures, and directory governance.
Automation & Engineering
Develop PowerShell-based automation solutions.
Create and maintain automation for
User lifecycle management
Group management
Service account governance
GPO deployment
AD health monitoring
Certificate lifecycle management
Develop integrations using
PowerShell, REST APIs, LDAP and Microsoft Graph APIs
Support Infrastructure-as-Code and platform automation initiatives where applicable.
Service Now Developer a plus
Compliance & Governance
Support SOX, HIPAA, PCI, NIST, and internal security controls.
Assist with audit evidence collection and compliance reviews.
Maintain technical documentation, standards, and operational procedures.
Participate in risk assessments and remediation efforts.
Support policy enforcement through Group Policy and directory controls.
Emerging Identity Capabilities
Support Zero Trust identity initiatives.
Enable passwordless authentication.
Support Entra ID modernization and cloud identity transformation.
Enhance automation of directory services operations.
Support identity telemetry, security analytics, and operational reporting.
Participate in Non-Human Identity (NHI) governance initiatives where directory services are involved.
Directory Services
Active Directory Domain Services (AD DS)
Active Directory Lightweight Directory Services (AD LDS)
LDAP, Kerberos, NTLM
Forest and Domain Administration
Trust Relationships
Replication and Sites & Services
Automation
PowerShell (Advanced), Microsoft Graph APIs, REST APIs, JSON/XML
Infrastructure Automation and Workflow Automation
Qualifications
4-8 years of experience, preferred
Bachelor's degree in related field, or equivalent work experience, preferred
Typical KPIs
Active Directory platform availability (99.9%+)
Domain controller health and replication success rate
GPO compliance rate
AD-related incident reduction and resolution times
Successful completion of platform upgrades and modernization efforts
Service account governance compliance
Audit findings related to directory services
Mean Time to Resolve (MTTR) for AD incidents
Entra synchronization success rate
Reduction in manual directory administration activities
Automation adoption and time savings
Future-State Focus for IAM Organization The Active Directory Engineer role is expected to focus on:
Active Directory and Entra platform engineering.
Directory modernization and cloud identity integration.
AD and IAM platform resiliency.
Identity infrastructure automation and PowerShell development.
LDAP and directory service lifecycle management.
AD integration with Okta, SailPoint, CyberArk, and enterprise applications.
Platform operational excellence, governance, and compliance.
AD support for Zero Trust, passwordless authentication, and identity modernization initiatives
What is expected of you and others at this level
Applies comprehensive knowledge and a thorough understanding of concepts, principles, and technical capabilities to perform varied tasks and projects
May contribute to the development of policies and procedures
Works on complex projects of large scope
Develops technical solutions to a wide range of difficult problems
Solutions are innovative and consistent with organization objectives
Completes work; independently receives general guidance on new projects
Work reviewed for purpose of meeting objectives
May act as a mentor to less experienced colleagues
Anticipated salary range: $96,300 - $137,600
Bonus eligible: No
Benefits: Cardinal Health offers a wide variety of benefits and programs to support health and well-being.
Medical, dental and vision coverage
Paid time off plan
Health savings account (HSA)
401k savings plan
Access to wages before pay day with myFlexPay
Flexible spending accounts (FSAs)
Short- and long-term disability coverage
Work-Life resources
Paid parental leave
Healthy lifestyle programs
Application window anticipated to close: 11/23/2026 *if interested in opportunity, please submit application as soon as possible.
The salary range listed is an estimate. Pay at Cardinal Health is determined by multiple factors including, but not limited to, a candidate’s geographical location, relevant education, experience and skills and an evaluation of internal pay equity
Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.
To read and review this privacy notice click here
