Director, Active Directory Engineering

USAA

. Lead the Active Directory Engineering organization .

Posted 11/6/2026full-timeSan Antonio • Texas • United StatesLead💰 $164,780 - $314,960 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Active Directory Engineering, cybersecurity frameworks, and identity management, with a strong focus on security, compliance, and operational readiness. Proven ability to lead teams, develop strategic roadmaps, and implement security solutions in large enterprise environments.

Highest-signal resume keywords

Active Directory EngineeringCybersecurity FrameworksIdentity ManagementRisk ManagementTeam Leadership

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecurityCybersecurity SolutionsCryptographyAuthenticationAuthorizationThreat AnalysisZero Trust ArchitectureCloud Identity TransformationsPolicy-Based AuthorizationCapacity Planning

Soft Skills

Executive CommunicationStakeholder ManagementTeam BuildingPerformance ManagementFinancial Acumen

Tools & Technologies

Microsoft Active DirectoryMicrosoft Entra IDOAuth 2.0OpenID ConnectSAMLKeycloakLayer7 API GatewayOpen Policy Agent

Certifications & Qualifications

CISSPCISMCCSPAzure Security Engineer

Industry Keywords

FFIECGramm-Leach-BlileyNIST Cybersecurity FrameworkPayment Card Industry Data Security StandardIAMCybersecurity Risk Management

Tech Stack

Tools & technologies

AzureCloudCyber Security

About the role

Key responsibilities & impact

Lead the Active Directory Engineering organization
Establish the engineering strategy and multi-year technology roadmap for Active Directory and related enterprise directory infrastructure, integrations, and services
Ensure security, reliability, resiliency, availability, scalability, recoverability, platform health, capacity planning, lifecycle management, disaster recovery, and operational readiness of enterprise directory services
Partner with Workforce IAM, Cybersecurity, Infrastructure, Cloud, and application engineering teams to translate identity and authentication requirements into scalable engineering capabilities
Lead modernization and evolution of enterprise directory services, including hybrid identity architecture, Active Directory security hardening, automation, legacy dependency reduction, cloud integration, and modern identity patterns
Own critical security domains or capabilities and develop multi-year roadmaps
Establish and govern information security domain strategy, goals, metrics, policies, standards, and procedures
Direct operation of an enterprise information security domain, including capacity, resilience, and dependability capabilities
Develop, review, and communicate information security risk management policies and procedures with the CISO and senior leaders
Interface with external regulators regarding the information security domain
Oversee continuous monitoring of cybersecurity activities and alert senior management to risks, compliance issues, and operational inefficiencies
Develop and deliver a governance and assurance model across multiple domains and the Enterprise
Identify, monitor, and evaluate operational solutions to reduce information security risk, meet compliance requirements, and improve workforce efficiency, business agility, and scalability
Promote information security awareness across the enterprise and external security community
Manage organizational manpower and budgets as financial steward
Build and oversee teams through recruiting, development, retention, coaching, support, performance management, and managerial activities
Ensure business activity risks are identified, measured, monitored, and controlled according to risk and compliance policies

Requirements

What you’ll need

Bachelor's degree in Information Security, Information Technology, Computer Science, Business Administration, Information Systems/Management, or related field; OR 4 years of relevant education and/or experience
8 years of related information security experience in one or more domains
3 years of direct team lead, supervisor, or management experience in an Information Security or Information Technology domain
4 years of researching, designing or implementing technology, information security or cybersecurity solutions in a large financial institution or large enterprise information security program
Expert knowledge of FFIEC, Gramm-Leach-Bliley, FFIEC Cybersecurity Assessment Tool, NIST Cybersecurity Framework and Payment Card Industry Data Security Standard
Strong knowledge of cryptography, authentication, authorization, and controls
Strong knowledge of IT risks and experience implementing security solutions
Knowledge of threats, vulnerabilities, attack methods and countermeasures for web-based applications, networks, and cybersecurity solutions
Demonstrated financial acumen involving budgets, forecasting, and executing budgets
Expert business acumen in business operations, risk management, industry practices and emerging trends
Strong written and verbal communication skills, including communicating technical analyses to non-technical audiences
USAA does not provide visa sponsorship; applicants must not require current or future immigration support
10+ years of progressive leadership experience in IAM, cybersecurity, or enterprise infrastructure
5+ years leading large-scale identity engineering or authentication organizations
Deep expertise with Microsoft Active Directory and Microsoft Entra ID
Experience with OAuth 2.0, OpenID Connect, SAML, and modern federation architectures
Strong understanding of Keycloak, Layer7 API Gateway, and enterprise authentication platforms
Experience implementing workload identity, machine identity, and service-to-service authentication strategies
Knowledge of policy-based authorization frameworks, including Open Policy Agent (OPA)
Experience driving Zero Trust architecture and identity-centric security initiatives
Demonstrated success leading cloud identity transformations across hybrid environments
Strong understanding of cybersecurity frameworks, regulatory requirements, and audit controls
Proven ability to build high-performing engineering and security teams
Excellent executive communication and stakeholder management skills
Relevant certifications such as CISSP, CISM, CCSP, Azure Security Engineer, or equivalent preferred

Benefits

Comp & perks

Flexible work environment with office attendance 4 days per week
Relocation assistance
Pay incentives based on overall corporate and individual performance, at the discretion of the USAA Board of Directors
Comprehensive medical, dental and vision plans
401(k)
Pension
Life insurance
Parental benefits
Adoption assistance
Paid time off program
Paid holidays
16 paid volunteer hours
Wellness programs
Career path planning
Continuing education