Lead Directory Services Engineer, Vice President

BlackRock is one of the world’s preeminent asset management firms andis a premierprovider of global investment management, riskmanagementand advisory services to institutional, intermediary, and individual investors around the world. BlackRock’s mission is to create a better financial future for our clients. We have a responsibility to be the voice of the investor, and werepresenteach client fairly and equally. Constant communication with a diverse team of partners strengthens us and delivers better results for our clients. Continuous innovation helps us bring the best of BlackRock to our clients. BlackRock offers a range of solutions — from rigorous fundamental and quantitative active management approaches aimed at maximizing outperformance to highly efficient indexing strategies designed to gain broad exposure to the world’s capital markets. Our clients can access our investment solutions through a variety of product structures, including individual and institutional separate accounts, mutual funds and other pooled investment vehicles, and the industry-leading iShares® ETFs.

Are you interested in building innovative technology that shapes the financial markets? Do you like working at the speed of a startup, but want to solve some of the world’s most complex problems? Do you want to work with, and learn from, hands-on leaders in technology and finance?

At BlackRock, we are looking for Platform Engineers wholiketo innovate and solve complex problems. We recognize that strength comes from diversity, and will embrace your unique skills, curiosity, drive, and passion while giving you the opportunity to grow technically and as an individual.

With over USD$14trillionof assets, we have an exceptional responsibility: our technology empowers millions of investors to save for retirement, pay for college, buy a home, and improve their financialwell-being.

We are looking for aDirectory ServicesEngineerwho willbe responsible fordesigning and buildingActive Directory, Azure AD (EntraID),Active Directory Federation Services, Conditional Access,PublicKeyInfrastructureandOIDC/SAML based authentication systems.

The ideal candidate will have a strong background in systems engineering, a proventrack recordofmaintaininghigh availability and performance, familiarity with NIST cybersecurity standards, and experience in managing systems & licensing.

Responsibilities:

• Design, build, andmaintainDirectory Servicesenvironments across various hosting platformsbothon-premandincloud(Azureand AWS), ensuring system reliability, efficiency, and compliance with security standards.

• Design and managemultiple Active Directoryforests and domainsas well as Azure AD (Entra ID)across multiple tenants.

• Executeintegrations ofnew domains arising from M&A activity.

• Implement and manageOIDC / SAMLauthfor systems and applicationaccess with SSO.

• Assistin migration of PKIfrom Windows CA toKeyFactor.

• Maintain and enhancetheCyberArk password vaultinfrastructure.

• Develop andmaintaindocumentation related tovarious Directory Servicesconfigurations, processes, and service records.

• Collaborate with IT security teams toestablishand maintain security baselines, respond to security incidents, and ensure compliance with NIST cybersecurity standards.

• Develop and execute PowerShell scripts for automation of tasks, system management, and troubleshooting.

• Manage relevant licensing forDirectory Servicessystems, ensuring compliance with legal and contractual obligations.

• Experience with infrastructure as code using Terraformand Azure DevOps.

Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, or related field.

• Minimum of 5 years of experience inDirectory Servicesadministration and engineering.

• Strong experience withActive Directory, Azure AD(Entra ID), ADFS,Group Policy,OIDC / SAMLandPKI technologies.

• Proficiencyin using Azure DevOps, Splunk,Okta, and PowerShell for system management.

• Knowledge of ITIL practices, experience in inventory management, familiarity with NIST cybersecurity standards, and experience in managing system licensing.

• Experience with continuous integration anddeploymentpipelines using Azure Pipelines and Terraform.

• Excellent problem-solving skills and the ability to work in a fast-paced environment.

• Strong communicationand collaboration skills.