Active Directory Tier 0 Engineer :: PKI

Ben Explicitly Stated He Is Looking For Candidates Who Can “hit The Ground Running” And Suggested ~5 Years As a Practical Minimum To Demonstrate True Proficiency In:

Active Directory (enterprise scale)

Active Directory Certificate Services (ADCS)

Public Key Infrastructure (PKI)

Active Directory Federation Services (ADFS)

These technologies are described as the team’s “bread and butter” and are mandatory due to Tier 0 access.

Why This Matters:

This is not a learning role. Exxon expects deep operational judgment developed over multiple production environments.

• PowerShell Automation & Infrastructure as Code (Terraform)

✅ 3–5+ years PowerShell | 2–3+ years Terraform

PowerShell:

Heavy daily usage for automation and operational efficiency

Candidates should be independently building and maintaining scripts

Terraform / IaC:

Ben specified 2–3 years as sufficient, provided the candidate can:

Manage pipelines

Deploy infrastructure via code

The role is approximately 50% automation/engineering and 50% operations.

Why This Matters:

Candidates who are “GUI-only AD admins” will not succeed. Exxon is modernizing identity through automation.

• Tier 0 Security Experience in Large Enterprise Environments

✅ 5+ years in high‑security / regulated enterprise environments

This role includes Tier 0 / Enterprise Administrator access

Requires:

Experience operating under strict security controls

Comfort with audit, compliance, and privileged access models

Ability to pass an enhanced background check (financial, criminal, global, dark web)

Large enterprise experience is strongly preferred, especially environments at Exxon’s scale.