SAML 2.0
OAuth 2.0
OpenID Connect (OIDC)
WS-Federation
Kerberos
LDAP
Architect and support integrations between on-premises Active Directory, Entra ID, SaaS applications, cloud platforms, and enterprise applications.
Establish and maintain authentication patterns and standards for workforce, application, and service identities.
Design and support highly available and resilient authentication infrastructure, including disaster recovery and business continuity capabilities.
Provide technical leadership for identity modernization initiatives, including hybrid identity, cloud migration, passwordless authentication, and Zero Trust architectures.
Troubleshoot complex authentication, federation, directory, and SSO issues across enterprise environments.
Develop and maintain IAM architecture documentation, standards, technical procedures, and operational runbooks.
Establish and enforce security best practices for identity infrastructure, privileged access, authentication, and directory services.
Partner with cybersecurity teams to identify and remediate identity-related vulnerabilities and risks.
Collaborate with application and engineering teams to onboard applications to enterprise authentication and SSO platforms.
Provide technical guidance and mentorship to IAM engineers and administrators.
Participate in architecture reviews, technology evaluations, and strategic IAM roadmaps.
Support incident response and root-cause analysis for critical identity and authentication incidents.
Evaluate emerging identity technologies and recommend solutions that improve security, resiliency, user experience, and operational efficiency.
Required Qualifications
8+ years of experience in Identity and Access Management, authentication, directory services, infrastructure engineering, or a related discipline.
Extensive hands-on experience designing and administering Microsoft Active Directory in large enterprise environments.
Strong understanding of Active Directory architecture, including
Forests and domains
Domain controllers
AD replication
DNS
Group Policy
Trust relationships
Kerberos authentication
LDAP
Active Directory security and hardening
Extensive experience with Microsoft Entra ID (Azure AD) and hybrid identity architectures.
Strong experience implementing and troubleshooting SSO and federation technologies, including SAML, OAuth 2.0, and OpenID Connect.
Experience integrating enterprise applications with Active Directory and/or Entra ID.
Strong understanding of authentication, authorization, federation, identity lifecycle, and access control concepts.
Experience with Microsoft Entra Connect / Azure AD Connect and hybrid identity synchronization.
Experience with Conditional Access, MFA, identity protection, and modern authentication.
Strong troubleshooting and root-cause analysis skills across complex identity environments.
Experience working with security, infrastructure, cloud, and application engineering teams in large enterprise environments.
Demonstrated ability to lead technical initiatives and provide direction to engineers and administrators.
Preferred Qualifications
Experience with Privileged Identity Management (PIM) and privileged access management concepts.
#LI-AB1
Benefits – How We’ll Support You
Numerous development opportunities offered to build your skills
Be part of a company with a higher purpose and contribute to making the world a better place
Health benefits for you and your family on your first day of employment
Four weeks of paid time off and two weeks of well-being pay per year, plus paid holidays
Excellent parental leave which includes a minimum of 16 weeks for mother and father
Future planning with our competitive retirement savings plan and tuition reimbursement program
Learn more about our total rewards package here - Corteva Benefits
Check out life at Corteva! www.linkedin.com/company/corteva/life
Are you a good match? Apply today! We seek applicants from all backgrounds to ensure we get the best, most creative talent on our team.
Corteva Agriscience is an equal opportunity employer. We are committed to embracing our differences to enrich lives, advance innovation, and boost company performance. Qualified applicants will be considered without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, military or veteran status, pregnancy related conditions (including pregnancy, childbirth, or related medical conditions), disability or any other protected status in accordance with federal, state, or local laws.
