(USA) Staff, Software Engineer, Information Security

Job Description

Position Summary... The Staff Software Engineer, DS Core drives the technical execution, automation, and operational excellence of the Active Directory Service Fabric. This role will be seen as an Infrastructure Automation & Identity Operations Expert and will maintain the health of core services—including LDAP, Replication, and Kerberos—while leading the implementation of automation workflows across a hybrid physical and virtual footprint. You will act as a lead technical resource, using Infrastructure as Code (IaC) to ensure foundational identity services are secure, performant, and resilient. What you'll do... Execute the technical requirements for the Hybrid AD Service Fabric, ensuring parity and stability across physical and virtual domain controllers. Provide high-tier operational support for core directory services, including LDAP, Replication (SYSVOL/AD), and Kerberos. Drive the development of automation pipelines to streamline provisioning, patching, and configuration management for all domain controllers. Implement and validate security controls, including hardened OS baselines, encryption of data, and least privilege access models. Support a modern privileged access strategy aligned with Zero Trust principles, separating identity administration from platform management. Conduct formal capacity planning assessments to ensure domain controllers are appropriately sized for enterprise workloads. Maintain and support Domain Controllers throughout the enterprise, ensuring high availability through distributed placement across hosts and sites. Address alerts, perform root cause analysis, and implement corrective actions for complex directory service issues. Maintain and update high-quality technical documentation for AD DS design and operational requirements. Optimize directory performance, site topology, and replication to maintain stability in a global hybrid environment. Manage Group Policy Objects (GPO) design, implementation, and lifecycle management. Participate in the team on-call rotation and provide technical mentorship to the engineering organization. Qualifications Bachelor’s degree in Computer Science, Information Technology, or a related field. 8 years of experience in enterprise Active Directory engineering and operations. Demonstrated expertise in PowerShell or other automation frameworks to drive an "Automation First" mindset. Hands-on experience with virtualization platforms and maintaining physical server infrastructure. Strong understanding of AD Replication, site topology, and enterprise Windows operating system troubleshooting. Practical knowledge of Access Control Models (RBAC), security protocols, and networking fundamentals. At Walmart, we offer competitive pay as well as performance-based bonus awards and other great benefits for a happier mind, body, and wallet. Health benefits include medical, vision and dental coverage. Financial benefits include 401(k), stock purchase and company-paid life insurance. Paid time off

Required Skills