Global Directory Services Engineer

Role Purpose

The Global Directory Services Engineer is a senior technology leader and SME for Global Directory Services, to include on-premises and cloud Active Directory, Microsoft Entra, and related products and utilities which support AD/Entra.

This position will function as an enabler across IT Architecture, Engineering, Operations, Security, Strategic partners, Technology vendors and Project management teams to facilitate the successful delivery of complex Corning initiatives and priorities.

A core accountability of this position is a strong engineering mindset that focuses on keeping the environment organized, secure, while flexible, while ensuring the time spent on manual tasks is minimized, preferring the implementation of standards-driven automation. Responsibilities include evaluation of the current Corning Active Directory and Entra environments, making recommendations for continuous improvement and alignment with best practices.

As a core member of the Corning Multi-Cloud team, this position will be responsible for helping direct and guide the delivery of key priorities across multiple stakeholders, with the assistance of the Project Manager and Technical Support teams. While being predominantly internally focused, this position will require strong communication to bridge between various Infrastructure and Application teams as well as an excellent ability to navigate within a background of relative ambiguity.

Key Responsibilities

• Design, install, configure, operate Active Directory (AD), Entra, and supporting utilities and products.
• Establish standards, policies & guidelines for Active Directory and Entra in collaboration with service line owner, information security, and technology teams.
• Develop, configure, and support Active Directory and Entra solutions that meet business needs and align with Corning technology standards.
• Support IT project startup though technical consultation, charter definition, benefit and analysis, requirements gathering and formal PMO approval.
• Partner with all members of project team as a technical lead in the planning, design, coordination and execution of comprehensive, realistic and effective work plans.
• Help promote a consistent vision and strategy throughout the organization.
• Build relationships that foster collaboration and partnerships to drive better strategies, priorities, and service to the customer.
• Assist and oversee quality change control according to Corning Change Management, Incident Management, Problem Management and Disaster recovery Methodology.
• Mentor members of the infrastructure team on architectural, engineering and operational best practices related to Active Directory.
• Communicate design at strategy at all levels of the organization.
• Provide escalated support for Business-Critical problems.

Experiences/Education - Required

• Bachelor's degree or equivalent from four-year college in computer science or related field.
• 10+ years of experience in Active Directory / Windows system administration, with a focus on private cloud and public cloud platforms. (Experience in both Active Directory and Entra).
• 10+ years’ experience in a production IT environment managing enterprise IT infrastructure, hardware, hosting services and cloud infrastructure.
• Active Directory Design and Migration experience at an enterprise level (multiple forests and domains, trust relationships).

• Active Directory Security Best Practice Implementation (e.g., tiered services, GPOs, Privileged Access Workstations, AD Health Monitoring).
• Active Directory Backup / Restore Testing, Ransomware Protection.
• In depth knowledge of Active Directory and Windows Servers, including all or most of the following: Active Directory on Prem, Azure AD, ADFS, M365 Integration, Multi-factor Authentication, Windows Server Core.
• Experience engineering, building, and supporting a global active directory environment.
• A holistic understanding of IT infrastructure inclusive of server, storage, network, virtualization, database, DR/business recovery and continuity practices, etc.
• Understanding of public cloud models (IaaS, PaaS, SaaS) and providers (AWS, Azure).
• Demonstrated expertise in operational improvement and excellence.
• Experience influencing and interacting effectively with peers and IT leaders.
• Strong communication and presentation skills.

Experiences/Education - Desired

• Experience with Microsoft AD partitioning and tiering mechanisms, such as Red Forest and Tier 0/1/2, Privileged Access Workstations (PAW), Netwrix Password Policy Enforcer, Quest Recovery Manager.
• Manufacturing industry experience.
• Active Directory in a High Security / Regulated environment.
• Lead by Example: Professional, big picture thinker, accountable, committed and well respected by team; can contribute significantly to Mission, Vision and Strategy of the organization; show strong alignment of work and priorities to vision and strategy.
• Inspire Others: Exhibit a wide breath of technical, operational and team leadership skills; excellent command and control; develop strong talent through good situational management skills; possess a passion for excellence.
• Get it done: Consistently achieve quality results on a timely basis; deliver on commitments; superior follow through.
• Strong crisis management skills.

Travel

• • Up to 10%, domestic and international.