Lead Site Reliability Engineer - Active Directory
Coupa Software4 days ago
Base Salary
$125k - $174k/yr
Responsibilities
- Architect and maintain an Identity-as-Code ecosystem using CI/CD pipelines to automate directory changes, security policy updates, and infrastructure provisioning.
- Lead the design, implementation, and management of global resilient identity infrastructure across public cloud and on-premise environments.
- Serve as the final escalation point for complex Active Directory incidents and lead root cause analysis and resolution.
- Implement observability and alerting in New Relic and other tools to monitor directory health, performance, and reliability.
- Define and govern Active Directory delegation and tiered administration models based on least privilege.
- Lead application and service onboarding to modern identity platforms such as Okta for authentication and authorization.
- Mentor teams on security best practices and improve identity reliability and lifecycle management.
- Own and publish identity architecture, administration, and security standards and best-practice documentation.
- Set the technical roadmap and establish a center of excellence for Active Directory and identity access management.
Requirements
- Deep expertise in Active Directory Domain Services, including DNS, DHCP, Certificate Services, and Group Policy Object management.
- Experience with AWS Directory Service and Azure Active Directory/Azure AD/Entra ID is preferred.
- Deep understanding of Identity Governance and Administration processes, automated user lifecycle management, RBAC/ABAC methodologies, and compliance reporting.
- Experience implementing GitOps infrastructure configuration workflows using tools such as Terraform, Chef, Ansible, or PowerShell DSC.
- Familiarity with directory log analysis using SIEM tools such as Azure Sentinel.
- 10+ years of progressive experience in IT, Systems Engineering, DevOps, or Identity Engineering, including at least 2 years in a technical leadership role.
- Proven experience defining and driving technical roadmaps for identity and access management platforms.
- Competency in PowerShell, Python, or equivalent scripting languages for automation.
- Experience building and operating modern identity solutions using AWS, Azure, and GCP.
- Solid understanding of networking systems and TCP/IP, DNS, and DHCP protocols.
- Bachelor’s degree in Computer Science or Computer Engineering, or equivalent professional experience.
- US citizenship is required due to Gov cloud and FedRAMP requirements.
- Strong communication, cross-team collaboration, and complex problem-solving skills.
Benefits
- Two company-wide paid wellness days off annually
- Paid birthday day off
- 40 hours of paid volunteer time off annually
- Free confidential 24/7/365 employee assistance program
- Business travel protection and emergency support
- Referral bonus program
- Location-specific medical, dental, retirement, pension, life, and accident protection benefits
Tech Stack
About Coupa Software
Coupa is the leader in AI-native total spend management. Using its trusted, community-generated, $8 trillion dataset, Coupa brings autonomous AI agents, a network of 10M+ buyers and suppliers, and leading apps together on one unified platform to seamlessly automate the buying process and connect to customers in a whole new way. With Coupa, you’ll make margins multiply™.