Staff Engineer II – Active Directory

Western Alliance Bank

Staff Engineer II focusing on Active Directory technologies within IAM at Western Alliance Bank. Managing the organization’s Active Directory infrastructure while collaborating with security and infrastructure teams.

Posted 4/24/2026full-timePhoenix • Arizona, Ohio • 🇺🇸 United StatesLeadWebsite

Tech Stack

Tools & technologies

Azure

About the role

Key responsibilities & impact

Serve in a mid-level, hands-on engineering role with a primary focus on Active Directory technologies
Collaborate with IAM team responsible for managing, maintaining, and supporting the organization’s on premises and hybrid Active Directory infrastructure
Identify development and operational support needs
Contribute to Active Directory–centric design decisions
Take ownership of assigned project and enhancement tasks
Facilitate technical discussions and cross team collaboration
Provide high-level engineering and functional support for Active Directory and Windows Server services
Serve as Subject Matter Expert (SME) for Active Directory and PKI infrastructure
Design, redesign, and maintain Active Directory forests, domains, trusts, and OU structures
Architect and enforce Group Policy (GPO) strategy
Design and manage permissions, delegation models, and RBAC aligned with least privileged principles
Implement and maintain Active Directory security hardening
Design and manage tiered administration models (Tier 0 / privileged access separation)
Support and integrate PKI, Kerberos, and authentication controls across the environment
Independently execute large-scale Active Directory initiatives
Act as L3 escalation for Active Directory–related incidents
Develop, document, and maintain runbooks, standard operating procedures, and workflows for L2 operational teams
Configure and troubleshoot Windows desktop environments in support of VDI / Azure Virtual Desktop deployments
Provide on-call support for critical identity and directory services incidents
Ensure compliance with IT policies, procedures, and industry standards

Requirements

What you’ll need

7+ years of related experience in IT App Support, IT Development, IT Networking, Active Directory/Azure (Entra) AD or similar field
Bachelor's degree in related field required
Intermediate to advanced knowledge of general Financial Services or Banking preferred
Intermediate to advanced knowledge of core Windows Server services
Advanced knowledge of applicable regulatory and legal compliance obligations, rules and regulations, industry standards, and practices
Intermediate to advanced ability to see the big picture and align projects with organizational goals
Expertise in resolving conflicts and addressing challenges as well as skilled at identifying and mitigating risks at the project level
Proficient in governance patterns tied to intake, technical reviews, and architectural compliance
MCSE or equivalent Microsoft certification (or equivalent real-world experience)
Advanced speaking and writing communication skills
May require up to 25% travel.

Benefits

Comp & perks

competitive salaries
ownership stake in the company
medical and dental insurance
time off
great 401k matching program
tuition assistance program
employee volunteer program
wellness program

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Active DirectoryWindows ServerPKIKerberosGroup PolicyRBACsecurity hardeningVDIAzure Virtual Desktoprunbooks

Soft Skills

collaborationtechnical discussionsproject ownershipconflict resolutionrisk mitigationcommunicationorganizational alignmentproblem-solvingindependenceescalation management

Certifications

MCSEMicrosoft certification