Active Directory Engineer II at McDonald's: Powering Global Identity Management

Join McDonald's Global Technology team as an Active Directory Engineer II and become a key player in Accelerating the Arches – our bold growth strategy focused on Delivery, Digital, and Drive-Thru. With over 25,000 restaurants worldwide serving 65M+ customers daily, McDonald's is transforming through cutting-edge technology like AI, robotics, and cloud-native IAM solutions. As an Active Directory Engineer II, you'll engineer secure identity experiences for employees, franchisees, partners, and restaurant staff at the world's largest restaurant company.

Why McDonald's Global Technology Needs Active Directory Engineers

McDonald's faces complex tech challenges daily, from scaling hybrid Active Directory environments to implementing Entra ID governance across global operations. Our Global Identity and Access Management (IAM) team is at the forefront, building user-centric platforms that deliver frictionless access while maintaining ironclad security. This Active Directory Engineer II role reports to the Directory Engineering Manager and partners with elite IAM teams to evolve our enterprise directory services.

Imagine architecting solutions that enable seamless authentication for McDelivery apps, franchise management portals, and restaurant POS systems. You'll leverage your expertise in AD DS, Entra ID, PowerShell automation, and security protocols to drive innovation at scale.

Key Responsibilities of McDonald's Active Directory Engineer II

As an Active Directory Engineer II, your impact will span technical leadership, strategic collaboration, and operational excellence:

• Deliver expert administration of Active Directory domains, forests, and Entra ID tenants following enterprise standards
• Partner with engineering teams to roadmap hybrid identity solutions integrating on-prem AD with Azure cloud services
• Analyze business needs and design technical implementations using Azure AD Connect, Pass-through Authentication, and Password Hash Sync
• Optimize directory performance through advanced GPO design, site topology, and replication monitoring
• Lead cross-functional Active Directory migrations and Entra ID consolidations for global business units
• Maintain comprehensive documentation including Visio architecture diagrams, runbooks, and SOPs
• Produce executive dashboards tracking AD health, replication status, and security compliance metrics
• Champion audit readiness with evidence collection, control validation, and remediation planning
• Own L2/L3 incident response for directory outages, lockouts, and replication failures
• Innovate with PowerShell modules, Azure Logic Apps, and Graph API for automated identity lifecycle management

Required Skills and Qualifications for Success

McDonald's seeks proven Active Directory professionals with 3+ years experience in enterprise IAM environments. Essential qualifications include:

• MCSE-level expertise in Windows Server AD DS, AD CS, and AD FS
• Hands-on Entra ID P1/P2 implementation including Conditional Access Policies and Identity Protection
• Advanced PowerShell scripting for bulk operations, reporting, and custom cmdlets
• Deep knowledge of Kerberos authentication, NTLM fallback, and constrained delegation
• Experience securing privileged accounts with Microsoft Privileged Identity Management (PIM)
• Familiarity with SCIM provisioning, Just-In-Time (JIT) access, and Zero Trust principles
• Strong troubleshooting using tools like ADREPLSTATUS, DCDIAG, REPADMIN, and Wireshark

A bachelor's degree in Computer Science or equivalent experience is required, plus certifications like Microsoft Certified: Identity and Access Administrator Associate.

McDonald's Benefits: More Than Just Happy Meals

Working as an Active Directory Engineer II at McDonald's means comprehensive rewards supporting your professional and personal growth. Enjoy competitive salary ($115K-$145K), 401(k) matching, full medical coverage, and unlimited career pathways within our global tech organization.

Career Growth Path for Active Directory Engineers at McDonald's

Start as Engineer II and advance to Senior IAM Architect or Directory Engineering Manager. McDonald's invests in your success through technical training, AWS/Azure certifications, and leadership development programs. Our alumni lead IAM at Fortune 500 companies worldwide.

Chicago Tech Hub: Where Innovation Meets the Golden Arches

Based in Chicago, you'll join 1,000+ technologists driving McDonald's digital transformation. Hybrid work model offers flexibility while connecting you to industry leaders in our state-of-the-art headquarters.

Apply Now: Secure Your Future with McDonald's IAM Team

Ready to engineer identity at global scale? Apply for this Active Directory Engineer II position today and help power 65M daily customer experiences. Visit our Global Technology Blog to see how our team delivers.

McDonald's is an equal opportunity employer committed to diversity and inclusion.