[Hiring] IT Infrastructure Consultant @Travel + Leisure Co.

Role Description

The Systems Infrastructure Engineer, Consulting Engineer (Active Directory, DDI & PKI) is the subject matter expert (SME) for enterprise Active Directory, DDI (DNS, DHCP, and IP Address Management), and Certificate Services (PKI) infrastructure. The incumbent carries deep, expert-level expertise across these domains, from multi-forest and multi-domain Active Directory design to DNS, DHCP, and IPAM administration to certificate authority and certificate lifecycle management, and is the hands-on technical authority the Technical Architect and Sr. Manager rely on for that expertise.

This position partners with the Technical Architect, Infrastructure, Security, Network, Application, and Project Management teams to engineer and operate an Active Directory, DDI, and Certificate Services environment that is secure, highly available, and aligned with enterprise architecture and standards. This role also drives automation of Active Directory, DDI, and PKI operations to reduce manual effort and improve consistency across the environment.

This role does not carry direct people management responsibility but is expected to set technical direction, define standards, mentor engineers, and serve as the final internal escalation point for complex Active Directory, DDI, and Certificate Services issues.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Information Systems, Engineering, or a related technical field preferred.
• Equivalent professional experience may be accepted in lieu of the education requirement.
• At least one current or previously held certification, formal training credential, or equivalent demonstrated expert-level experience in Active Directory, DNS/DHCP/IPAM (DDI), enterprise PKI/certificate services, or enterprise IT infrastructure engineering.
• Microsoft Certified: Windows Server Hybrid Administrator Associate or equivalent Windows Server / Active Directory credential preferred.
• Microsoft Certified: Identity and Access Administrator Associate preferred.
• Vendor certification in DDI/IPAM platforms (e.g., Infoblox, BlueCat, or Microsoft IPAM) preferred.
• Training or formal certification in enterprise PKI / certificate lifecycle management preferred.
• ITIL 4 Foundation or higher ITIL certification preferred.
• Microsoft Certified: Azure Administrator Associate a plus.
• VMware Certified Professional - Data Center Virtualization (VCP-DCV) a plus.
• Certification or formal training in scripting or automation tooling (e.g., PowerShell, Python, or Ansible) a plus.

Requirements

• Minimum of 15 years of experience in enterprise IT infrastructure engineering or administration in a mid-size to large environment.
• Minimum of 11 years of hands-on experience designing, administering, and securing Active Directory environments, including multi-forest and multi-domain architectures.
• Minimum of 8 years of hands-on experience designing and administering enterprise DNS, DHCP, and IP address management (DDI) services.
• Minimum of 8 years of hands-on experience designing and administering enterprise PKI / Certificate Services, including certificate authority hierarchy and certificate lifecycle management.
• Experience automating Active Directory, DDI, and PKI administration, such as account/group lifecycle management, DNS record management, DHCP scope provisioning, IPAM workflows, or certificate lifecycle management, using scripting, APIs, or orchestration tools.
• Working knowledge of broader WINTEL infrastructure, such as Windows Server, virtualization, storage, or endpoint platforms, sufficient to support assigned work outside of core Active Directory, DDI, and PKI responsibilities.
• Experience leading enterprise Active Directory, DDI, or Certificate Services projects such as domain upgrades, migrations, consolidations, DNS/DHCP/IPAM modernization, or certificate authority modernization.
• Experience mentoring engineers and setting technical standards across an infrastructure engineering team.
• Experience supporting compliance and audit requirements such as SOX, PCI, and PII.
• Experience working in a multiple-site, multiple-vendor team environment.

Benefits

• Medical
• Dental
• Vision
• Flexible spending accounts
• Life and accident coverage
• Disability
• Depending on position, paid time off, parental leave and holidays (speak to your recruiter for additional information)
• Wish day paid time to volunteer at an approved organization of your choice
• 401k with employer match (subject to eligibility requirements, including tenure - speak to your recruiter for additional information)
• Legal and identity theft plan
• Voluntary income protection benefits
• Wellness program (subject to provider availability)
• Employee Assistance Program