Cloud Engineer

What Cloud Engineering contributes to Cardinal Health

Information Technology oversees the effective development, delivery, and operation of computing and information services. This function anticipates, plans, and delivers Information Technology solutions and strategies that enable operations and drive business value.

Cloud Engineering analyzes the financial, operational, and technical feasibility of adopting external cloud based IT software, platform and infrastructure services. This job family evaluates the costs and benefits of cloud, virtual private networks, dedicated housing, and in-house solutions and identifies portions of the organization’s IT infrastructure with the highest potential return for cloud deployment. Cloud Engineering also manages the implementation of cloud services and their integration with in-house applications and systems, coordinating with vendors and adhering to engineering best practices.

Position Summary, Active Directory Engineer

The Active Directory Engineer is responsible for the engineering, administration, maintenance, modernization, and operational resiliency of the enterprise Active Directory and Microsoft identity infrastructure. This role partners with Infrastructure, Security, IAM, Platform Engineering, Application Teams, and Architecture teams to provide secure and reliable directory services that support authentication, authorization, privileged access, identity lifecycle management, and Zero Trust initiatives.

The engineer serves as a subject matter expert for Active Directory Domain Services (AD DS), Entra ID integration, Group Policy, LDAP services, Active Directory Certificate Services (AD CS), and identity-related automation. The role supports modernization efforts, operational excellence, platform resiliency, and identity security initiatives aligned to the organization's IAM strategy and Platform Engineering objectives.

Responsibilities

Active Directory Platform Administration Install, configure, administer, and maintain: Active Directory Domain Services (AD DS)

Hybrid identity synchronization services

Perform platform upgrades, migrations, patch management, and lifecycle management.

Monitor AD health, replication, authentication services, and directory performance.

Manage domain controllers, forests, domains, trusts, sites, and services.

Support directory consolidation, modernization, and cloud identity initiatives.

Develop standards for directory services architecture and operational support.

Directory Services & Identity Infrastructure Administer users, groups, organizational units (OUs), and directory permissions.

Design and implement Group Policy Objects (GPOs).

Maintain Active Directory delegation models.

Support enterprise authentication services relying on LDAP, Kerberos, NTLM, and SAML.

Administer service accounts and managed service accounts.

Support certificate-based authentication and PKI integrations.

Maintain naming standards, OU structures, and directory governance.

Automation & Engineering Develop PowerShell-based automation solutions.

Create and maintain automation for: User lifecycle management

Certificate lifecycle management

Develop integrations using: PowerShell, REST APIs, LDAP and Microsoft Graph APIs

Support Infrastructure-as-Code and platform automation initiatives where applicable.