Active Directory Expert
Full-time
Posted on Nov 9, 2026
Métier / Emploi : Systemes d'informations/Expert methode et outil / qualite / securite
Type contrat : CDI
Description du poste :
The Active Directory Expert provides support, implementation, and design services for Microsoft Active Directory and Windows-based systems, including directory and identity management solutions. The role sits within Safran USA Cloud & Infrastructure, with a dotted-line relationship to the Safran Group Central Active Directory Team.Active Directory governance, architecture standards, and security baselines are defined at the Safran Group level. The incumbent champions their adoption across Safran USA and adapts their implementation to U.S. regulatory requirements (ITAR, CMMC Level 2 / NIST SP 800-171), positioning Safran USA as the Group's service provider for Active Directory in U.S. regulated environments.
Group Alignment & Governance• Serve as Safran USA's referent to the Group Central Active Directory Team; champion adoption of Group AD governance, architecture standards, and security baselines across Safran USA and supported U.S. entities.• Translate Group standards into compliant implementations for U.S. regulated environments; document where ITAR or CMMC requirements call for additional or stricter controls, and route any deviations through Group governance.• Build and operate Safran USA's Active Directory services as the Group's delivery capability for U.S. regulated environments, consumable by other Safran entities in the U.S.• Feed U.S. regulatory requirements and lessons learned back into Group standards so they remain fit for regulated use.Level 3 Support & Operations• Provide Level 3 support for Active Directory and associated Windows-based identity services; own escalations from L1/L2 through root-cause analysis and permanent fix.• Handle incidents, problems, and changes in accordance with ITIL processes, including change records, risk assessment, and post-implementation review.• Support project teams on Active Directory integrations, including LDAP/LDAPS binds, service accounts, application onboarding, and directory-dependent connections.Architecture & Engineering• Design, build, and manage Active Directory architectures across multi-domain and multi-forest environments, including trusts, sites and replication, and FSMO placement.• Engineer and administer associated services: AD FS, Dell OpenManage, Tenable.AD, PingCastle, Quest Change Auditor, and One Identity Active Roles.• Manage Microsoft Entra ID connectors (Entra Connect / Cloud Sync), including synchronization health, scoping, and hybrid identity configuration.Security & Compliance• Ensure all directory processes follow security and quality best practices, including the AD Tiering Model (Tier 0/1/2 administrative separation) and ANSSI (French Cybersecurity Agency) recommendations.• Use Tenable.AD and PingCastle to identify and remediate directory exposures; track findings to closure.• Maintain Windows security baselines, Group Policy hardening, and privileged group hygiene; produce audit evidence through Quest Change Auditor as required.Resilience & Disaster Recovery• Own and execute the Active Directory Disaster Recovery Plan, including forest recovery procedures, backup validation, and periodic DR testing.• Maintain current runbooks, architecture documentation, and configuration records.Continuous Improvement• Stay current with Active Directory and Entra ID technology, threats, and vendor guidance; recommend and lead improvements to the directory service.• Collaborate with Group and global team members in France and India, including periodic on-site travel.
Ville : 2201 W. Royal Lane Irving, TX 75063 Irving
Niveau d'études min. requis : BAC+3, BAC+4
Langue / Niveau :
Anglais : Courant
Langue / Niveau :
Français : Intermédiaire
Type contrat : CDI
Description du poste :
The Active Directory Expert provides support, implementation, and design services for Microsoft Active Directory and Windows-based systems, including directory and identity management solutions. The role sits within Safran USA Cloud & Infrastructure, with a dotted-line relationship to the Safran Group Central Active Directory Team.Active Directory governance, architecture standards, and security baselines are defined at the Safran Group level. The incumbent champions their adoption across Safran USA and adapts their implementation to U.S. regulatory requirements (ITAR, CMMC Level 2 / NIST SP 800-171), positioning Safran USA as the Group's service provider for Active Directory in U.S. regulated environments.
Group Alignment & Governance• Serve as Safran USA's referent to the Group Central Active Directory Team; champion adoption of Group AD governance, architecture standards, and security baselines across Safran USA and supported U.S. entities.• Translate Group standards into compliant implementations for U.S. regulated environments; document where ITAR or CMMC requirements call for additional or stricter controls, and route any deviations through Group governance.• Build and operate Safran USA's Active Directory services as the Group's delivery capability for U.S. regulated environments, consumable by other Safran entities in the U.S.• Feed U.S. regulatory requirements and lessons learned back into Group standards so they remain fit for regulated use.Level 3 Support & Operations• Provide Level 3 support for Active Directory and associated Windows-based identity services; own escalations from L1/L2 through root-cause analysis and permanent fix.• Handle incidents, problems, and changes in accordance with ITIL processes, including change records, risk assessment, and post-implementation review.• Support project teams on Active Directory integrations, including LDAP/LDAPS binds, service accounts, application onboarding, and directory-dependent connections.Architecture & Engineering• Design, build, and manage Active Directory architectures across multi-domain and multi-forest environments, including trusts, sites and replication, and FSMO placement.• Engineer and administer associated services: AD FS, Dell OpenManage, Tenable.AD, PingCastle, Quest Change Auditor, and One Identity Active Roles.• Manage Microsoft Entra ID connectors (Entra Connect / Cloud Sync), including synchronization health, scoping, and hybrid identity configuration.Security & Compliance• Ensure all directory processes follow security and quality best practices, including the AD Tiering Model (Tier 0/1/2 administrative separation) and ANSSI (French Cybersecurity Agency) recommendations.• Use Tenable.AD and PingCastle to identify and remediate directory exposures; track findings to closure.• Maintain Windows security baselines, Group Policy hardening, and privileged group hygiene; produce audit evidence through Quest Change Auditor as required.Resilience & Disaster Recovery• Own and execute the Active Directory Disaster Recovery Plan, including forest recovery procedures, backup validation, and periodic DR testing.• Maintain current runbooks, architecture documentation, and configuration records.Continuous Improvement• Stay current with Active Directory and Entra ID technology, threats, and vendor guidance; recommend and lead improvements to the directory service.• Collaborate with Group and global team members in France and India, including periodic on-site travel.
Ville : 2201 W. Royal Lane Irving, TX 75063 Irving
Niveau d'études min. requis : BAC+3, BAC+4
Langue / Niveau :
Anglais : Courant
Langue / Niveau :
Français : Intermédiaire