Job Description

No Sponsorship will be provided for this role.

Location: On Site at location listed in posting

Weekly Schedule: Monday- Friday, 9am-5pm

We are seeking a motivated Systems Engineer I to support and improve enterprise directory services across On‑prem Active Directory and Microsoft Entra ID. Candidate will execute detail‑oriented engineering changes that reduce security risk, improve operational hygiene, and meet audit expectations. They will collaborate across teams, follow a disciplined change lifecycle, and document consistently.

Responsibilities:

• Incident and Problem Management:

• Assist with investigation and resolution of directory‑related issues, including authentication, authorization, replication, GPO, and DNS.
• Support escalations. Perform root cause analysis. Drive corrective actions.

• Directory Engineering and Operations:

• Execute security hardening for Active Directory and Entra ID.
• Clean up and standardize Group Policy Objects.
• Improve DNS hygiene, scavenging, and replication consistency.
• Clean up AD Sites & Services and align subnets.
• Remediate users, groups, privileged accounts, and service accounts.
• Monitor health and performance. Maintain stability and reliability.

• Change Execution Lifecycle:

• Research and validate changes against Microsoft guidance and internal standards.
• Build and use labs or pilots to test changes safely.
• Coordinate with Tech Risk and cross‑functional teams on risk and rollout.
• Plan careful production deployments. Verify outcomes and rollback when needed.

• Automation and Scripting:

• Use scripting to streamline directory tasks, cleanups, and reporting.
• Leverage AI to determine best of breed solutions and automation.

• Documentation:

• Create and maintain clear diagrams, runbooks, and standard operating procedures.
• Track configurations, changes, and decisions for audit readiness.

• Collaboration and Communication:

• Work closely with security, Tech Risk, networking, systems, and application teams.
• Communicate clearly with technical and non‑technical associates.

• On‑Call Support:

• Participate in an on‑call rotation to support critical identity issues.

We have identified a substantial body of Active Directory and Entra ID work required to bring our directory services closer to best practices and meet security, audit, and operational expectations. This effort spans both on‑prem and cloud identity and includes:

• Active Directory and Entra ID security hardening
• Cleanup and standardization of Group Policy Objects
• DNS infrastructure hygiene, scavenging, and replication consistency
• AD Sites & Services cleanup and subnet alignment
• Cleanup of users, groups, privileged accounts, and service accounts

Many of these items carry high security risk and high operational impact. Each change typically requires:

• Research and validation against Microsoft guidance and our internal standards
• Lab or pilot testing
• Coordination with Tech Risk and other teams
• Careful production rollout. Incorrectly implemented directory changes can cause authentication failures, access outages, or security regressions. This is long‑running, detail‑oriented engineering work—not task execution.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or related field; or equivalent practical experience.
• Foundational experience with Active Directory and Entra ID through coursework, labs, internships, or professional roles.
• Familiarity with GPOs, DNS, AD Sites & Services, replication, and user/group/service account administration.
• Understanding of security hardening principles and change management discipline.
• Strong analytical and problem‑solving skills. High attention to detail.
• Clear written and verbal communication skills. Team‑oriented mindset.
• Interest in automation and scripting to improve efficiency.
• Ability to work independently and in a fast‑paced, collaborative environment.

About Us

First Horizon Corporation is a leading regional financial services company, dedicated to helping our clients, communities and associates unlock their full potential with capital and counsel. Headquartered in Memphis, TN, the banking subsidiary First Horizon Bank operates in 12 states across the southern U.S. The Company and its subsidiaries offer commercial, private banking, consumer, small business, wealth and trust management, retail brokerage, capital markets, fixed income, and mortgage banking services. First Horizon has been recognized as one of the nation's best employers by Fortune and Forbes magazines and a Top 10 Most Reputable U.S. Bank. More information is available at www.FirstHorizon.com

Benefit Highlights

• Medical with wellness incentives, dental, and vision

• HSA with company match

• Maternity and parental leave

• Tuition reimbursement

• Mentor program

• 401(k) with 6% match

• More -- FirstHorizon.com/First-Horizon-National-Corporation/Careers/Our-Benefits

Follow Us

Facebook

X formerly Twitter

LinkedIn

Instagram

YouTube