SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Coupa Software is seeking a Lead Site Reliability Engineer specializing in Active Directory to join the Cloud Operations team. This is a strategic technical leadership role focused on Identity and Access Management for a high-growth, AI-powered spend management platform.
In this role, you will architect and maintain an 'Identity-as-Code' ecosystem using CI/CD pipelines to automate directory changes, security policy updates, and infrastructure provisioning across Coupa's global Active Directory deployment. You will lead the design, implementation, and management of a resilient identity infrastructure supporting massive-scale public cloud and on-premise environments. You'll serve as the final escalation point for complex Active Directory incidents, demonstrating advanced troubleshooting and root cause analysis capabilities.
Key responsibilities include:
- Architecting and maintaining Identity-as-Code with CI/CD automation for global AD deployment
- Leading design and management of resilient identity infrastructure at scale
- Acting as escalation point for critical AD incidents with advanced troubleshooting
- Implementing advanced observability and alerting using New Relic and similar tools
- Defining and governing AD Delegation and Tiered Administration models
- Spearheading application and service integration with modern identity platforms like Okta
- Mentoring teams on security best practices and identity reliability
- Owning and publishing standards and best practice documentation for identity architecture
Coupa operates an open, autonomous work culture with an inverted organizational structure that supports entrepreneurial spirit and critical thinking.
REQUIREMENTS:
- Mandatory: Deep expertise in Active Directory Domain Services (AD DS), including DNS, DHCP, Certificate Services, and Group Policy Object (GPO) Management
- Preferred: Experience with cloud-based directory services (AWS Directory Service, Azure AD/Entra ID)
- Deep understanding of Identity Governance and Administration (IGA) processes, automated user lifecycle management, RBAC/ABAC methodologies, and compliance reporting
- Proven experience implementing GitOps workflows with Terraform, Chef, Ansible, or PowerShell DSC
- Familiarity with directory log analysis via SIEM tools (e.g., Azure Sentinel)
- 7+ years progressive experience in IT, Systems Engineering, DevOps, or Identity Engineering
- Minimum 2+ years in a technical leadership role
- Proven track record defining and driving technical roadmaps for identity and access management platforms
- Competency in PowerShell, Python, or equivalent scripting languages
- Experience building and running modern identity solutions using public cloud (AWS, Azure, GCP)
- Solid understanding of networking systems and protocols (TCP/IP, DNS, DHCP)
- Strong communication and cross-team collaboration skills
- Bachelor's Degree in Computer Science, Computer Engineering, or equivalent professional experience
