Software Engineer II, Active Directory, ITC

WHO YOU’LL WORK WITH

The Directory Services function within Cloud & Core Engineering designs, implements, and supports hybrid identity infrastructure across Nike's enterprise. The team partners with security, workplace engineering, and cloud groups to keep authentication and directory services dependable for the global business.

WHO WE ARE LOOKING FOR

Nike is seeking a Software Engineer II to help design, automate, and operate Active Directory and hybrid identity infrastructure across a large, globally distributed enterprise. The ideal candidate works with Microsoft Active Directory, Windows Server, and Microsoft Entra ID in complex multi-site topologies, building PowerShell automation, supporting Entra Connect, and keeping directory services dependable for all of Nike. They have 3-5 years of experience designing, operating, or automating Active Directory in large enterprise environments, with solid understanding of AD DS concepts including OUs, Group Policy, replication, sites and services, FSMO roles, and trust relationships. Working knowledge of LDAP, Kerberos, DNS, Microsoft Entra Connect, Entra ID, Windows Server (2016/2019/2022), AD CS/PKI fundamentals, and identity security practices (tiered administration, privileged access, gMSA , LAPS, auditing) is required. Proficiency in PowerShell is essential, with Terraform/ IaC , Git workflows, CI/CD pipelines, ServiceNow, Jira, and monitoring tools such as SolarWinds or Splunk as pluses.

The candidate needs to have strong Active Directory and hybrid identity fundamentals, the ability to work independently on a small team supporting a business-critical platform, and clear technical writing skills. They must be comfortable with PowerShell automation, on-call rotation, cross- timezone collaboration, and partnering with security and engineering teams on identity-dependent initiatives.

• 3-5 years of experience designing, operating, or automating Active Directory in large enterprise environments.
• Bachelor's degree in Computer Science , a related engineering discipline, or equivalent professional experience.
• Microsoft Azure and identity certifications preferred.

WHAT YOU’LL WORK ON

You'll design, automate, and operate Nike's Active Directory and hybrid identity infrastructure, building PowerShell automation, supporting Entra Connect, troubleshooting authentication issues, and delivering well-scoped improvements with strong documentation and operational rigor.

• You'll design, implement, and support Active Directory structure - OUs, Group Policy, security baselines, and access patterns across Nike's global footprint.
• You'll operate and troubleshoot AD replication, sites and services, FSMO roles, trust relationships, and multi-site topology issues.
• You'll build and maintain PowerShell automation for provisioning, reporting, compliance checks, and operational workflows.
• You'll support Microsoft Entra Connect - sync configuration, filtering, upgrade paths, and hybrid identity scenarios connecting on-premises AD to Entra ID.
• You'll troubleshoot authentication and directory issues involving Kerberos, LDAP, DNS, and certificates affecting user and application access.
• You'll own well-scoped improvements from design through implementation, validation, documentation, and on-call incident response.
• You'll collaborate with security, workplace engineering, cloud engineering, and application teams across time zones.