Active Directory engineer (IAM) - Security

Job Overview

Job Description

Messaging and Directory Services Subject Matter Expert (SME) position requires in-depth knowledge of Microsoft-based infrastructure design and development, messaging and directory services best-practices and advanced knowledge of systems engineering, operations and management. The consultant should have architect level experience planning, documenting, installing, managing, monitoring, and troubleshooting high-availability Exchange Server 2013, 2016, and 2019 environments. Active Directory for Windows Server 2012/2016/2019, a wide range of wireless messaging technologies and advanced knowledge of messaging security and hygiene. O365 and Azure AD.

Skills with Azure AD and cloud authentication

Single sign-on and federation solutions including operations and implementation knowledge of products (such as Azure AD, MFA, SecureAuth, OKTA)
Privilege accounts lifecycle management solutions including operations and implementation knowledge of products
Azure AD Identity & Access management skills such as (permission sets, policies, and roles management); proficient in providing guidance on least privilege to business partners
Manage Identity Governance and Administration (IGA) provisioning tools
Assist with maintaining M365 accounts, permissions, and applications
Maintain Single Sign-on (SSO) and multi-factor authentication (MFA) solutions.
Integration with user directories (including Active Directory, LDAP, Azure, etc.)
Installation of new software releases and system upgrades
Evaluate and install patches; resolve software related problems
Provide technical support by utilizing working knowledge of IAM systems, browsers, etc.
Assist with integration, implementation, and administration of systems
Familiarity with software development lifecycle (SDLC)
Hands-on development/coding
Integrating on-premise applications with a SSO solution and multiple IdPs using SAML
Utilize IAM (Identity and Access Management) programs to enable government clients to protect against digital identity risks.
Provide appropriate access to applications, systems, and data with advanced authentication.
Oversee the spread of information with privileged access management.
Verify identity utilizing a wide range of IAM solutions and advanced authentication methods.

CONTRACT JOB DESCRIPTION
Responsibilities:
1. Expertise in implementing, administrating and operating information security technologies such as firewalls, IDS/IPS, SIEM, Antivirus, network traffic analyzers and malware analysis tools.
2. Utilizes advanced experience with scripting and tool automation such as Perl, PowerShell, Regex.
3. Develops, leads, and executes information security incident response plans.
4. Develops standard and complex IT solutions & services, driven by business requirements and industry standards.
5. May also leverage dynamic and static code assessment tools to measure vulnerability of applications throughout the SDLC.

Skill
6-10 yrs as messaging and AD Enterprise SME
Design & build of Active Directory and Exchange servers
Design & build of LDAP systems
PowerShell scripting
Advanced Knowledge of Email Routing and Security
Expert knowledge of O365
Experience troubleshooting and resolving AD issues
Email Hygiene Services / Platforms IronPort, EOP
Expert knowledge of Email and AD HA technologies
MDM knowledge (BES, AW, Good)
Strong understanding of Microsoft cloud infrastructure
Exceptionally strong articulation and communication skills required for daily interactive with System Administrators
Ability to create technical documents and white papers
6-10 yrs developing standard and complex IT solutions & services, driven by business requirements and industry standards
6-10 yrs leading projects, ensuring they are in compliance with established standards/procedures
Bachelor’s degree in IT or related field or equivalent experience