About the role

Lead Site Reliability Engineer (Active Directory)

Join Coupa as a Lead Site Reliability Engineer with a focus on Active Directory. You will own the technical strategy for identity services, drive best practices, and mentor teams responsible for secure and reliable directory, authentication, and authorization.

Responsibilities

Define the technical roadmap for Coupa’s Active Directory strategy.
Establish and run a Center of Excellence for directory/identity practices.
Architect, design, and oversee implementation of identity infrastructure.
Lead Identity-as-Code capabilities, automating:
- Directory changes
- Security policy updates
- Infrastructure provisioning
Build and manage a global, resilient identity infrastructure for massive-scale public cloud + on-premise environments.
Apply best practices in directory services, authentication, and authorization to secure the environment and improve user access.
Use CI/CD pipelines and automation to operationalize identity changes.
Provide mentorship and guidance to engineering teams.

Requirements

Proven track record defining and driving technical roadmaps for Identity & Access Management.
US Citizenship required (GovCloud and FedRamp requirements).
Deep expertise in Active Directory Domain Services (AD DS) including:
- DNS
- DHCP
- Certificate Services
- Group Policy Object (GPO) management
Strong knowledge of Identity Governance and Administration (IGA):
- Automated user lifecycle management
- RBAC/ABAC methodologies
- Compliance reporting
10+ years progressive IT/Systems Engineering/DevOps/Identity Engineering experience, including 2+ years in technical leadership.
Scripting/automation competency: PowerShell and/or Python (or equivalent).
Strong communication and cross-team collaboration skills.
Familiarity with directory log analysis for troubleshooting/health monitoring (e.g., SIEM such as Azure Sentinel).
Experience building and operating modern identity solutions on public cloud (AWS/Azure/GCP).
Experience implementing GitOps workflows for infrastructure configuration, including proficiency with tools such as Terraform, Chef, Ansible, or PowerShell DSC.
Bachelor’s Degree in Computer Science/Engineering or equivalent experience.
Solid understanding of networking systems and protocols: TCP/IP, DNS, DHCP.

Preferred

Experience with cloud directory services such as AWS Directory Service and Azure Active Directory / Entra ID.

About Coupa

Coupa is a high-growth technology company focused on enterprise software and cloud-based business solutions. The role sits within its engineering organization, delivering and securing large-scale identity and access infrastructure for hybrid and public cloud environments.