Active Directory Engineer - Remote

Design and manage Active Directory structures (OUs, groups, service accounts) specific to Epic. Implement and maintain role-based access control (RBAC) for Epic Hyperspace, Cogito tools, and other integrated apps. Support single sign-on (SSO) and Kerberos authentication for Epic Hyperspace, especially in Citrix/VDI environments. Ensure Epic clients have the proper settings for performance, security, and compatibility (e.g., printer redirection, timeouts, ActiveX settings). Support domain joining and integration of Epic servers and clients (including Interconnect, Hyperspace, and ancillary apps). Ensure trusts, DNS, LDAP, and certificate services function correctly for cross-domain or multi-forest Epic implementations. Coordinate with Epic TS and internal teams to troubleshoot directory-related issues during upgrades or system refreshes. Maintain audit-ready access controls and logging in accordance with HIPAA, HITRUST, and internal IT security policies. Regularly review and update privileged account access, group memberships, and service account usage. Implement and monitor multi-factor authentication (MFA) and conditional access policies as required for Epic access.