Lead Systems Infrastructure Engineer

Travel + Leisure Co. · Tallahassee, United States

Travel + Leisure Co. is the world’s leading vacation ownership and travel membership company, with a dynamic and growing portfolio of resort, travel club, and lifestyle travel brands. Our dedicated associates help the company achieve its mission to put the world on vacation. Innovation and growth keep our work interesting and fun. Every day is a chance to learn something new and turn vacation inspiration into exceptional experiences for millions of travelers worldwide.
The

Systems Infrastructure Engineer, Consulting Engineer (Active Directory, DDI & PKI) is the subject matter expert (SME) for enterprise Active Directory, DDI (DNS, DHCP, and IP Address Management), and Certificate Services (PKI) infrastructure. This position partners with the Technical Architect, Infrastructure, Security, Network, Application, and Project Management teams to engineer and operate an Active Directory, DDI, and Certificate Services environment that is secure, highly available, and aligned with enterprise architecture and standards. This role also drives automation of Active Directory, DDI, and PKI operations to reduce manual effort and improve consistency across the environment. The role may also be assigned other WINTEL infrastructure work, such as Windows Server, virtualization, storage, or endpoint platform support, on an as-needed basis outside of its core Active Directory, DDI, and PKI focus.

This role does not carry direct people management responsibility but is expected to set technical direction, define standards, mentor engineers, and serve as the final internal escalation point for complex Active Directory, DDI, and Certificate Services issues.

AD Engineering:

Own day-to-day engineering, administration, and support of the enterprise Active Directory environment, including multi-forest and multi-domain topology, trust relationships, Group Policy, and directory security. Drive innovation and automation of routine Active Directory administration, such as account and group lifecycle management, Group Policy deployment, and health checks, to reduce manual effort and improve consistency. Serve as the hands-on technical advisor the Technical Architect and Sr. Manager rely on for Active Directory, providing expert input on domain controller placement, replication, authentication, and access control. Lead the planning and technical execution of Active Directory projects, including domain upgrades, migrations, and consolidations.
DDI Engineering:

Own day-to-day engineering, administration, and support of the enterprise DNS, DHCP, and IP address management (IPAM) environment. Lead the planning and technical execution of DDI projects, including DNS/DHCP/IPAM modernization initiatives.
PKI Engineering:

Own day-to-day engineering, administration, and support of the enterprise Public Key Infrastructure (PKI), including certificate authority (CA) hierarchy, certificate templates, and certificate lifecycle management. Lead the planning and technical execution of PKI projects, including certificate authority upgrades and cipher/algorithm modernization initiatives.
Participate in the on-call rotation for business-critical incidents. Other Duties as Assigned:

Provide support across the broader WINTEL environment as assigned, including Windows Server, VMware ESXi/vSphere virtualization, storage, and endpoint management (SCCM), including automation where applicable. Travel Requirements:
~ Occasional travel may be required to support datacenter activities, vendor engagements, or enterprise infrastructure projects. Expected travel: Bachelors degree in Computer Science, Information Technology, Information Systems, Engineering, or a related technical field preferred.
At least one current or previously held certification, formal training credential, or equivalent demonstrated expert-level experience in Active Directory, DNS/DHCP/IPAM (DDI), enterprise PKI/certificate services, or enterprise IT infrastructure engineering.
Microsoft Certified: Windows Server Hybrid Administrator Associate or equivalent Windows Server / Active Directory credential preferred
Microsoft Certified: Vendor certification in DDI/IPAM platforms (e.g., Infoblox, BlueCat, or Microsoft IPAM) preferred
Training or formal certification in enterprise PKI / certificate lifecycle management preferred
ITIL 4 Foundation or higher ITIL certification preferred
Microsoft Certified: VMware Certified Professional - Data Center Virtualization (VCP-DCV) a plus
Certification or formal training in scripting or automation tooling (e.g., PowerShell, Python, or Ansible) a plus
Expert-level knowledge of Active Directory architecture, including multi-forest and multi-domain design, trust relationships, replication topology, and Group Policy.
Ability to automate routine Active Directory administration, such as account and group lifecycle management, Group Policy deployment, and health checks.
Ability to design, secure, and troubleshoot DDI services at enterprise scale, and to connect DDI design decisions to identity, network, and application dependencies.
Ability to design, secure, and troubleshoot certificate services at enterprise scale, and to connect PKI design decisions to identity, network, and application dependencies.
Ability to automate certificate issuance, renewal, and expiration monitoring to reduce manual effort and prevent outages caused by expired certificates.
Automation and Process Improvement
Working proficiency with scripting and automation tooling (such as PowerShell, Python, or Ansible) sufficient to build and maintain production automation.
Ability to anticipate and identify potential problems before they occur and implement solutions, including automated checks, that minimize impact on projects and users.
Standards, Security, and Technical Quality
Ability to define and enforce infrastructure engineering standards, security hardening practices, and documentation for Active Directory, DDI, and Certificate Services, including SOX, PCI, and PII requirements.
Focus on high availability concepts, proactive monitoring and alerting, automation, and long-term platform health.
Ability to work with cross-functional teams, outsourced vendors, and business stakeholders for project planning and issue resolution.
Group Policy
Certificate templates and auto-enrollment
Python
REST APIs / DDI platform automation interfaces
Additional WINTEL Platforms (Supported as Assigned)
Windows Server infrastructure
VMware ESXi / vSphere
Dell EMC storage platforms
SCCM
Citrix
ServiceNow
Monitoring and alerting platforms
Minimum of 15 years of experience in enterprise IT infrastructure engineering or administration in a mid-size to large environment.
Experience automating Active Directory, DDI, and PKI administration, such as account/group lifecycle management, DNS record management, DHCP scope provisioning, IPAM workflows, or certificate lifecycle management, using scripting, APIs, or orchestration tools.
Working knowledge of broader WINTEL infrastructure, such as Windows Server, virtualization, storage, or endpoint platforms, sufficient to support assigned work outside of core Active Directory, DDI, and PKI responsibilities.
Experience leading enterprise Active Directory, DDI, or Certificate Services projects such as domain upgrades, migrations, consolidations, DNS/DHCP/IPAM modernization, or certificate authority modernization.
Experience mentoring engineers and setting technical standards across an infrastructure engineering team.
Experience working in a multiple-site, multiple-vendor team environment.
Travel + Leisure Co. benefits include:
Note: Temporary and/or seasonal associates are ineligible for Paid Time Off.
~ Medical
~ Dental
~ Flexible spending accounts
~ Disability
~ Depending on position, paid time off, parental leave and holidays (speak to your recruiter for additional information)
~ Legal and identify theft plan
~ Employee Assistance Program

Hospitality is at the heart of all we do at Travel + Leisure Co. Were always looking ahead to what’s next and how we can strengthen our business, its neighboring communities, and the customer experience. We are an equal opportunity employer, and all applications will be considered for employment without attention to their membership in any protected class. If you require any reasonable accommodation to complete your application or any part of the recruiting process, please email your request to