Principal Engineer, Active Directory

The Role

At Moderna, we're on a mission to deliver cutting-edge therapies for all. We're seeking an Active Directory Senior Engineer to join our Information Access Management (IAM) team. In this role, you'll not only help us continue to innovate and extend more lives, but also ensure the security of our Active Directory Services and Azure Active, a critical and key technology within Moderna.  This role is an exciting blend of hands-on operational work, engineering and design. You will bring proven ability to solve complex problems, deliver operational and process improvements, and drive security enhancements to detect and protect from threats.

Here’s What You’ll Do

• Oversee and manage the upgrade process of Active Directory, ensuring seamless transitions and minimal downtime.

• Develop and implement industry-leading standards for our Active Directory environment.

• Refine our disaster recovery and backup strategy, ensuring we're prepared for DR scenarios and our data is always protected.

• Identify and implement automation opportunities to streamline operations and improve efficiency.

• Spot and act on opportunities for system clean-up to optimize performance and security.

• Collaborate with the larger IAM team to establish robust governance protocols.

• Act as the key expert on Active Directory security, driving enhancements to protect from threats.

• Troubleshoot complex issues, provide technical guidance and act as Subject Matter Expert for issue escalation.

• Stay current with industry trends and emerging technologies to ensure the organization's IAM strategy remains effective and up to date.

• Contribute to the overall security of the organization by adhering to security policies and procedures.

• Provide 24x7 support as needed for emergency situations and planned maintenance activities.

Here’s What You’ll Need (Minimum Qualifications)

• BS level technical degree or equivalent experience required; Computer Science or Math background preferred

• 10+ years in the technology field, with 6-8+ years working in the identity and access management domain

• 4+ years of dedicated Active Directory design, implementation/engineering, and maintenance of enterprise level AD solutions and security models.

• Experience implementing AD Security best practices, hardening and tooling

• In-depth experience with Kerberos and NTLM authentication, MFA, SSO and federation standards and technologies.

• Extensive knowledge of Group Policy Objects (GPOs)

• Deep understanding of IT security standards.

• PowerShell scripting experience

Here’s What You’ll Bring to the Table (Preferred Qualifications)

• Experience with modern authentication and passwordless solutions such as Windows Hello for Business

• Experience with privileged access management platforms such as CyberArk

• Experience with Splunk or similar SIEM platform

• Knowledge of JEA (Just Enough Administration) and JIT (Just In Time) concepts

• Knowledge of virtualization and cloud platforms with knowledge of AWS infrastructure and architecture. Familiarity with other cloud platforms, such as Azure, or GCP a plus.

• Experience with GxP environments and regulatory requirements

• Experience with identity threat Analytics, Detection and Response.

• Relevant certifications, such as CISSP or CISM

• Cloud experience such as Azure, AzureAD and AWS preferrable

• Strong analytical and problem-solving skills

• Excellent communication skills, both written and verbal

• Ability to work independently and as part of a team.

• A desire to make an impact as part of a high-growth, transformational company that is Bold, Relentless, Curious, and Collaborative.

Under Washington State law, Moderna is required to provide a reasonable estimate of the salary range for the jobs covered by this description.  Base compensation for these positions in Washington State range from $144,000 to $230,500 ​. Actual salary determinations will take into account factors such as work location, prior education and experience, job-related knowledge, and demonstrated skills.  Compensation decisions are made on the facts and circumstances of each case.

Moderna is pleased to provide you and your family with a comprehensive and innovative suite of benefits, including:

• Highly competitive and inclusive medical, dental and vision coverage options
• Flexible Spending Accounts for medical expenses and dependent care expenses
• Lifestyle Spending Account funds to help you engage in personal