Responsibilities Main Purpose of Role: PepsiCo is looking for an experienced Active Directory engineer to help drive the enterprise directory strategy forward for the Identity and Access Management organization. As a member of the Directory Services team, the Directory Services Engineer will be responsible for developing, engineering, deploying, and supporting comprehensive solutions based on unique and complex requirements and problems related to identity and directory services. The Engineer will also be responsible for identifying opportunities for the automation of tasks, processes, or complete solutions and acting on them, and identifying any opportunities for improvement in the environment. Accountabilities: Analyze, design, and support a highly complex, enterprise-level Active Directory service in a hybrid on-premises and cloud-hosted environment. Manage enterprise identity cloud directories, including Microsoft AD and Azure AD. Translate business needs into workable technology solutions. Participate in or lead troubleshooting and incident resolution of complex high severity incidents Develop automated solutions using scripts, pipelines, and cloud-based server-less computing platforms Develop detailed architecture, standards, design, and implementation documentation Analyze the current Directory Services environment to identify technical and operational opportunities and develop continuous improvement action plans. Participate in disaster recovery, capacity planning, performance monitoring, and maintenance to ensure high availability. COVID-19 vaccination is a condition of employment for this role. Please note that all such company vaccine requirements provide the opportunity to request an approved accommodation or exemption under applicable law. Qualifications Skills/Experience 3+ years experience with engineering and design of Active Directory 10+ years in supporting Active Directory 2+ years support Azure Active Directory Mandatory Skills Knowledge of the following core concepts: Principle of least privileged access Principle of revocation of rights Principle of Just In Time access Experience with developing, planning, and implementing a large scale enterprise-level Active Directory infrastructure, including but not limited to the following components: Domain Controller deployment Securing Active Directory Advanced GPO settings Advanced replication management Experience with governance and compliance, including the following: SOX controls Advanced auditing techniques Experience working with large-scale, enterprise-level LDAP / Active Directory environments Knowledge of programming/scripting disciplines like the following: VBScript PowerShell Differentiating Competencies Ability to demonstrate analytical and critical thinking, attention to detail, solution orientation in a fast-paced environment Good written and oral communication skills in English (other foreign languages well seen) A team-focused mentality with the proven ability to work effectively with diverse stakeholders","location_name":"TX-Plano-5600-Office-TX240","street_address":"5600 Headquarters Dr","city":"Plano","state":"Texas