Active Directory Administrator - Cybersecurity Team

Flowserve is a world-leading manufacturer and aftermarket service provider of comprehensive flow control systems. Join a company whose people are committed to building a more sustainable future to make the world better for everyone. With 16,000 employees in 50 countries, we combine our global reach with local presence. Our team challenges themselves to approach each situation with ingenuity and creativity to help provide our customers with the most innovative flow control products and services. We support 10,000 customers worldwide, creating products to meet the needs of our customers who are supplying energy, fresh water, pharmaceuticals and other essentials to consumers, businesses and governments globally. We invite you to put your talents and career in motion at Flowserve.

Company Overview:

If a culture of excellence, innovation and ownership is what you’re searching for, consider putting your experience in motion at Flowserve. As an individual contributor, or as a leader of people, your enterprise mindset will ensure Flowserve’s position as the global standard in comprehensive flow control solutions. Here, your opportunity for professional development and industry leading rewards will be supported by our foundational commitments to the values of people first, integrity and safety. Thinking beyond opportunity and reward, at Flowserve, we are inspired by working together to create extraordinary flow control solutions to make the world better for everyone!

Flowserve is seeking an experienced Active Directory Administrator to lead and maintain our enterprise-wide Active Directory (AD) environment. This role is critical for ensuring the security, availability, and reliability of Flowserve's identity management systems.

The successful candidate will work closely with the Cybersecurity team to implement, manage, and enhance Active Directory and its integration with modern identity and access management (IAM) solutions, along with advanced administration of related systems.

Responsibilities:

• Administer and maintain the organization’s multi-forest AD infrastructure, including domain controllers, group policies, and replication processes.
• Implement and manage AD-based security measures to mitigate vulnerabilities.
• Perform AD health checks, diagnostics, and tuning to ensure optimal performance.
• Oversee identity lifecycle management processes, including provisioning, provisioning, and access reviews.
• Collaborate with the Oracle Identity Manager Lead for seamless integration between AD and IAM tools.
• Ensure compliance with ISO 27001 standards in identity and access controls.
• Manage Active Directory Certificate Services (AD CS) to support enterprise certificate issuance and lifecycle management.
• Administer Entra ID (formerly Azure AD) for hybrid identity solutions and cloud integration.
• Oversee Varonis for data security and visibility into access patterns and permissions.
• Manage Secret Server for privileged access and credential management.
• Monitor and enforce secure AD configurations (e.g., password policies, privilege separation).
• Respond to security incidents involving directory services and assist in investigations.
• Maintain documentation for AD processes, policies, and disaster recovery procedures.
• Work with cross-functional teams to implement directory service improvements.
• Act as the primary point of contact for AD-related projects and escalations.

Requirements:

• Minimum 5–7 years of hands-on experience managing enterprise Active Directory environments.
• Proven expertise in implementing and managing AD security configurations, including GPOs, ACLs, and audit logging.
• Experience with hybrid identity systems (e.g., Azure AD/Entra ID) and cloud integration.
• Deep understanding of AD-related protocols (LDAP, Kerberos, DNS, etc.).
• Expertise in AD Certificate Services (AD CS) administration.
• Familiarity with Entra ID administration for identity and cloud services.
• Proficiency in Varonis for access management and data visibility.
• Experience managing Secret Server for privileged access management.
• Proficiency with ManageEngine ADManager Plus for directory service management.
• Knowledge of security best practices for AD, including Privileged Access Management (PAM).
• PowerShell scripting skills for automation and task optimization.
• Strong analytical and troubleshooting skills.
• Excellent interpersonal and communication skills for effective collaboration with technical and non-technical stakeholders.

Preferred Experience/Skills:

• Microsoft Certified: Identity and Access Administrator Associate.
• CompTIA Security or similar.
• Relevant AD-related certifications
• Administration of advanced AD services, including AD CS, Entra ID, Varonis, Delinea Secret Server, and ManageEngine ADManager Plus.
• Familiarity with ISO 27001 standards and regulatory compliance in identity management.
• Experience in incident response and forensic analysis related to AD.
• Exposure to Zero Trust security architecture and implementation.

Benefits:

• Flowserve offers competitive pay, annual bonuses, medical benefits on day 1, generous paid vacation time, paid holidays, 401(k) and many other excellent benefits!

Req ID : R-13184

Job Family Group : Information Technology

Job Family : IT Systems Analysis

EOE including Disability/Protected Veterans. Flowserve will also not discriminate against an applicant or employee for inquiring about, discussing or disclosing their pay or, in certain circumstances, the pay of their co-workers. Pay Transparency Nondiscrimination Provision

If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access flowservecareers.com as result of your disability. You can request a reasonable accommodation by sending an email to employment@flowserve.com. In order to quickly respond to your request, please use the words "Accommodation Request" as your subject line of your email. For more information, read the Accessibility Process.