Active Directory Expert
Irving, TXFull-timeSeen 6 days agoSeen in employer's feed 6 days ago
Most applications go out cold — see where you stand first. No sign-up to start.
You apply on the employer's site, with no Olive account needed.
Watch jobs like this. New roles like this one near Irving, TX, by email.
Don't just apply. Show up ready.
Olive works from this exact posting.
At a glance
Olive lists jobs from US employers, including remote roles you can work from the United States.
Job overview
The Active Directory Expert supports, implements, and designs Microsoft Active Directory and Windows-based identity services for Safran USA. The role applies Group governance, architecture standards, and security baselines while adapting implementations to U.S. regulatory requirements, including ITAR and CMMC Level 2 / NIST SP 800-171. It provides Level 3 support and contributes to architecture, security, compliance, and disaster recovery across regulated environments.
Skills & qualifications
Skills
Qualifications
Full job description
Active Directory Expert
Job details
General information
Entity
Safran is an international high-technology group operating in the fields of aerospace (propulsion, equipment and interiors), space and defense. Its mission is to contribute sustainably to a safer world, where air transport becomes ever more environmentally friendly, comfortable and accessible. Present on every continent, the Group employs 110,000 people and generated €31.3 billion in revenue in 2025. Safran holds, either independently or through partnerships, leading global or European positions in its markets.
Safran was ranked second in the Aerospace & Defense sector in TIME magazine's ""World's Best Companies 2025"" ranking.
Reference number
2026-191034
Job details
Domain
Performance and Support
Job field / Job profile
IT - Methods and tools / quality / security expert
Job title
Active Directory Expert
Employment type
Permanent
Professional category
Employees / Staff
Part time / Full time
Full-time
Job description
The Active Directory Expert provides support, implementation, and design services for Microsoft Active Directory and Windows-based systems, including directory and identity management solutions. The role sits within Safran USA Cloud & Infrastructure, with a dotted-line relationship to the Safran Group Central Active Directory Team.
Active Directory governance, architecture standards, and security baselines are defined at the Safran Group level. The incumbent champions their adoption across Safran USA and adapts their implementation to U.S. regulatory requirements (ITAR, CMMC Level 2 / NIST SP 800-171), positioning Safran USA as the Group's service provider for Active Directory in U.S. regulated environments.
But what else? (advantages, specificities, etc.)
Required Qualifications
-
Bachelor's degree (undergraduate) or equivalent.
-
5+ years of practical experience as an Active Directory and EntraID expert in multi-domain AD environment.
-
In-depth knowledge of Active Directory, Active Directory Federation Services (AD FS), and Windows Server 2019/2022.
-
Strong command of Windows security, Group Policy (GPO), DNS, and networking fundamentals.
-
Working knowledge of ITIL incident and change management.
Preferred Qualifications
-
Microsoft MCSE/MCSA (legacy) or current Microsoft certifications — e.g., AZ-800/AZ-801 (Windows Server Hybrid Administrator) or SC-300 (Identity and Access Administrator).
-
Hands-on experience with Tenable.AD (Tenable Identity Exposure), PingCastle, Quest Change Auditor, and One Identity Active Roles.
-
Implementation experience with the AD Tiering Model and ANSSI Active Directory hardening guidance.
-
Experience with AD forest recovery and enterprise DR exercises.
-
Experience in a regulated environment (ITAR, CMMC Level 2 / NIST SP 800-171).
-
Experience operating within a global governance model adopting central standards locally while managing regulatory exceptions.
Candidate skills & requirements
Group Alignment & Governance
-
Serve as Safran USA's referent to the Group Central Active Directory Team; champion adoption of Group AD governance, architecture standards, and security baselines across Safran USA and supported U.S. entities.
-
Translate Group standards into compliant implementations for U.S. regulated environments; document where ITAR or CMMC requirements call for additional or stricter controls, and route any deviations through Group governance.
-
Build and operate Safran USA's Active Directory services as the Group's delivery capability for U.S. regulated environments, consumable by other Safran entities in the U.S.
-
Feed U.S. regulatory requirements and lessons learned back into Group standards so they remain fit for regulated use.
Level 3 Support & Operations
-
Provide Level 3 support for Active Directory and associated Windows-based identity services; own escalations from L1/L2 through root-cause analysis and permanent fix.
-
Handle incidents, problems, and changes in accordance with ITIL processes, including change records, risk assessment, and post-implementation review.
-
Support project teams on Active Directory integrations, including LDAP/LDAPS binds, service accounts, application onboarding, and directory-dependent connections.
Architecture & Engineering
-
Design, build, and manage Active Directory architectures across multi-domain and multi-forest environments, including trusts, sites and replication, and FSMO placement.
-
Engineer and administer associated services: AD FS, Dell OpenManage, Tenable.AD, PingCastle, Quest Change Auditor, and One Identity Active Roles.
-
Manage Microsoft Entra ID connectors (Entra Connect / Cloud Sync), including synchronization health, scoping, and hybrid identity configuration.
Security & Compliance
-
Ensure all directory processes follow security and quality best practices, including the AD Tiering Model (Tier 0/1/2 administrative separation) and ANSSI (French Cybersecurity Agency) recommendations.
-
Use Tenable.AD and PingCastle to identify and remediate directory exposures; track findings to closure.
-
Maintain Windows security baselines, Group Policy hardening, and privileged group hygiene; produce audit evidence through Quest Change Auditor as required.
Resilience & Disaster Recovery
-
Own and execute the Active Directory Disaster Recovery Plan, including forest recovery procedures, backup validation, and periodic DR testing.
-
Maintain current runbooks, architecture documentation, and configuration records.
Continuous Improvement
-
Stay current with Active Directory and Entra ID technology, threats, and vendor guidance; recommend and lead improvements to the directory service.
-
Collaborate with Group and global team members in France and India, including periodic on-site travel.
Annual salary
TBD
Job location
Job location
North America, United States, Texas
City (-ies)
2201 W. Royal Lane Irving, TX 75063 Irving
Applicant criteria
Minimum education level achieved
Bachelor's Degree
Minimum experience level required
More than 5 years
Additional Languages preferred
-
English (Fluent)
-
French (Intermediate)
ITAR Controlled Position: Select "Yes" if role requires U.S. citizenship/permanent residency
Yes
How this job compares
Set against the 800 open Identity and Access Management jobs on Olive Jobs, counted November 3, 2026.
- Pay
- This postingNot listed
- Texas median$105–232K/yr53 salary ranges
- Openings
- Olive Jobs lists 68 open Identity and Access Management jobs in Texas and 800 across the US. 4% of them nationwide are listed as remote or flexible.
- Experience
- This posting asks for at least 5 years of experience; Identity and Access Management postings that state a minimum ask for 5 years at the median (703 postings).
- Education
- 297 of the 800 open Identity and Access Management jobs (37%) ask for a bachelor's degree or higher.
Counted across the open, public US postings on Olive Jobs on November 3, 2026. Pay medians are the middle values of the low ends and of the high ends of postings that list both ends of a range in the same cadence (a yearly salary or an hourly rate); a range's midpoint is halfway between its ends. Pay and experience figures resting on fewer than 20 postings are left out.
Prepare for this role
You've read the whole posting — now see how you match it.
