Lead Site Reliability Engineer – Active Directory

Coupa Software

. Architect and maintain an Identity-as-Code ecosystem using CI/CD pipelines .

Posted 10/15/2026full-timeRemote • California • United StatesSenior💰 $125,000 - $174,333 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates deep expertise in Active Directory Domain Services, including DNS, DHCP, and GPO Management, while leading the design and implementation of identity infrastructure across cloud and on-premise environments. Proficient in automating user lifecycle management and implementing GitOps workflows for infrastructure configuration.

Highest-signal resume keywords

Active Directory Domain Services (AD DS)Identity Governance and Administration (IGA)GitOps WorkflowsTerraformCloud-Based Directory Services

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Active Directory Domain Services (AD DS)Identity Governance and Administration (IGA)GitOps WorkflowsTerraformPowerShellPythonAWS Directory ServiceAzure Active Directory (Azure AD/Entra ID)Networking SystemsRoot Cause Analysis

Soft Skills

Strong CommunicationCross-Team CollaborationMentoring

Tools & Technologies

New RelicSIEM ToolsAzure SentinelChefAnsible

Certifications & Qualifications

Bachelor's Degree in Computer ScienceComputer Engineering

Industry Keywords

Identity-as-CodeCI/CD PipelinesSecurity Policy UpdatesInfrastructure ProvisioningLeast Privilege Principle

Tech Stack

Tools & technologies

AnsibleAWSAzureChefCloudDNSGoogle Cloud PlatformPythonTCP/IPTerraform

About the role

Key responsibilities & impact

Architect and maintain an Identity-as-Code ecosystem using CI/CD pipelines
Automate directory changes, security policy updates, and infrastructure provisioning for global Active Directory
Lead the design, implementation, and management of resilient identity infrastructure across public cloud and on-premise environments
Serve as the final escalation point for complex and critical Active Directory incidents
Perform advanced troubleshooting and root cause analysis
Implement observability and alerting in New Relic and other tools
Continuously monitor directory health, performance, and system reliability
Define and govern the AD Delegation and Tiered Administration model
Ensure adherence to the principle of least privilege
Lead onboarding and integration of applications and services with Okta
Mentor teams on security best practices
Drive continuous improvement in identity reliability and lifecycle management
Own and publish standards and best-practice documentation for identity architecture, administration, and security
Set strategic technical direction for Coupa's Identity and Access Management capabilities
Define the technical roadmap and establish a center of excellence for Active Directory

Requirements

What you’ll need

Deep expertise in Active Directory Domain Services (AD DS), including DNS, DHCP, Certificate Services, and Group Policy Object (GPO) Management
Experience with cloud-based directory services such as AWS Directory Service and Azure Active Directory (Azure AD/Entra ID) preferred
Deep understanding of Identity Governance and Administration (IGA) processes, automated user lifecycle management, RBAC/ABAC methodologies, and compliance reporting
Proven experience implementing GitOps workflows for infrastructure configuration
Proficiency with Terraform, Chef, Ansible, or PowerShell DSC
Familiarity with directory log analysis via SIEM tools such as Azure Sentinel
7+ years of progressive experience in IT, Systems Engineering, DevOps, or Identity Engineering
Minimum of 2+ years in a technical leadership role
Proven track record defining and driving technical roadmaps for identity and access management platforms
Competency in PowerShell, Python, or equivalent scripting languages
Experience building and running modern identity solutions using AWS, Azure, or GCP
Solid understanding of networking systems and protocols, including TCP/IP, DNS, and DHCP
Bachelor's Degree in Computer Science, Computer Engineering, or equivalent professional experience
Strong communication and cross-team collaboration skills
Passion for solving complex problems

Benefits

Comp & perks

Two company-wide paid wellness days off each year
Paid day off on your birthday or another day within your birthday month
40 hours of paid Volunteer Time Off annually
Free, confidential, 24/7/365 Employee Assistance Program
Business travel medical, safety, pre-trip planning, and emergency support
Monetary referral bonuses for successful referrals
Comprehensive medical/dental insurance
Retirement/pension plans
Life or accident protection
Open and autonomous work culture
Collaborative culture driven by transparency, openness, and shared commitment to excellence