Sr Security Engineer

About Gap Inc.

Our past is full of iconic moments - but our future is going to spark many more. Our brands - Gap, Banana Republic, Old Navy and Athleta - have dressed people from all walks of life and all kinds of families, all over the world, for every occasion for more than 50 years.

But we're more than the clothes that we make. We know that business can and should be a force for good, and it's why we work hard to make product that makes people feel good, inside and out. It's why we're committed to giving back to the communities where we live and work. If you're one of the super-talented who thrive on change, aren't afraid to take risks and love to make a difference, come grow with us.
About the Role

The Active Directory Engineer is responsible for the implementation, management, and maintenance of both on-premises and cloud-based Active Directory environments across the enterprise. This role involves designing, supporting, and troubleshooting AD environments to ensure optimal performance and security and maintaining Azure AD Connect to ensure seamless synchronization between on-premises AD and Azure AD.
What You'll Do

• Plan, Design and implement AD forests, domains, and organizational units (OUs) based on business requirements.
• implement Azure AD Connect solutions to meet business requirements and ensure seamless integration with on-premises Active Directory.
• Plan and implement inter-forest or cross-domain trusts.
• Troubleshoot and resolve complex trust issues between domains and forests.
• Manage external and forest trusts for cross-organization collaboration.
• Troubleshoot and resolve replication issues.
• Design and configure optimal replication topology to ensure efficient domain controller communication across geographically dispersed locations.
• Integrate AD with other applications and services, ensuring seamless operation across the enterprise.
• Implement Active Directory disaster recovery plans and back up strategies
• Restore domain controllers or objects from backup in the event of a failure or disaster.
• Implement security best practices to minimize attack surface
• Analyze and implement Active Directory security measures, including permissions and access controls.
• Troubleshoot and resolve issues related to AD security policies.
• Upgrade AD and Azure AD Connect to latest version
• Harden domain controllers and enforce strong authentication protocols.
• Configure and manage Group Policies, ensuring compliance with security standards and organizational policies.
• Implement security filtering and WMI filters for specific GPO applications.
• Optimize domain controllers for high performance.
• Troubleshoot sync issues of objects in Azure AD Connect
• Develop PowerShell scripts for automation, reporting and access governance

• Education: Bachelor's degree in computer science, Information Technology, or a related field.
• Experience: Minimum of 5 years of experience working with Active Directory in an enterprise environment.
• Certifications: Relevant certifications such as MCSE, MCSA, or CISSP are preferred.
• Skills:
  • Strong understanding of AD attributes, LDAP queries, and PowerShell scripting.
  • Familiarity with Azure and Office 365.
  • Excellent problem-solving and analytical skills.

• One of the most competitive paid time off plans in the industry
• Comprehensive health coverage for employees, same-sex partners and their families
• Health and wellness program: free annual health check-ups, fitness center and Employee Assistance Program
• Comprehensive benefits to support the journey of parenthood
• Retirement planning assistance
• See more of the benefits we offer.