CT - Sr. IAM Engineer

Job Summary:

A vibrant Senior Entra Identity Engineer to play a pivotal role in designing, implementing, and supporting the hybrid on-prem and cloud Active Directory environment and Azure Active Directory/Entra ID.

Responsibilities:

• Analyze, design, implement, and support the hybrid on-prem and cloud Active Directory environment and Azure Active Directory/Entra ID.

• Collaborate with business and technical partners to integrate systems and applications with centralized authentication.

• Provide subject matter knowledge and expertise on Active Directory, Azure Active Directory/Entra ID, and Okta Active Directory synchronization.

• Support and maintain Active Directory Federation Services (ADFS) environments and Entra ID Enterprise Applications.

• Lead deployment and provide operational maintenance for new technologies and solutions.

• Lead Active Directory and Entra ID disaster recovery exercises and ensure operational stability of backup solutions.

• Monitor authentication platforms for vulnerabilities and lead remediation implementation.

• Collaborate with other domain owners to consolidate and implement security baselines.

• Work closely with global cross-functional teams to ensure the stability, scalability, and security of the environments.

• Implement security baselines and recommended security best practices.

• Perform regular system health checks and proactively identify and resolve issues to avoid downtime.

• Monitor the performance and capacity baselines and recommend enhancements.

• Lead response and resolution of complex, high-severity incidents.

• Conduct regular reviews of deployed infrastructure, develop detailed architecture, and create/update technical documentation and Standard Operating Procedures (SOP).

• Analyze current authentication services to identify opportunities for enhancements and develop continuous improvement action plans.

• Discover opportunities to automate existing manual processes and introduce new automation to enhance security posture.

• Research innovations in IT security and IAM technologies to ensure best practices and standards.

• Provide on-call support as needed for operational continuity.

• Support requests for audit and required remediation activities.

Minimum Requirements:

• Proven experience as a Senior Active Directory/Entra ID Engineer or similar role with a minimum of 4 years of experience.

• Advanced knowledge of Active Directory, Azure Active Directory/Entra ID, Lightweight Directory Access Protocol, Active Directory Federation Services, and other centralized identity stores.

• Strong understanding of Microsoft Azure and familiarity with IAM permissions on Management Groups, subscriptions, and resources.

• Knowledge of Azure Active Directory/Entra ID capabilities such as Conditional Access Policies, Privileged Identity Manager, and Application Registrations.

• Familiarity with Active Directory attributes, LDAP Queries, PowerShell Scripting, Group Policy Object (GPO) analysis, configuration, and item-level targeting, active directory replication, backup and restore, and certificate installation.

• Knowledge of implementing security on Active Directory and Entra ID and hardening those platforms.

• Experience in performing Disaster Recovery exercises.

• Strong knowledge of Windows Server operating systems.

• Experience with PowerShell scripting and automation, including utilizing APIs such as Microsoft Graph.

• Understanding of Single-Sign-On and authentication protocols such as SAML & OIDC.

• Familiarity with directory synchronization tools, such as Azure Active Directory/Entra ID Connect and Okta Active Directory integration.

• Excellent problem-solving skills and ability to work well under pressure.

• High-energy, detail-oriented, proactive, and able to handle multiple high-priority demands while driving consistent results.

• Strong communication and collaboration skills to work effectively with cross-functional teams.

Critical Skills:

• Advanced knowledge of Active Directory and Azure Active Directory/Entra ID.

• Strong understanding of Microsoft Azure and IAM permissions.

• Experience with implementing security on Active Directory and Entra ID.

• Proficiency with PowerShell scripting and automation.

• Strong problem-solving and communication skills.

Additional Skills:

• Experience with ADFS, Group Policy, and certificate installations.

• Familiarity with security best practices and disaster recovery exercises.

• Experience with directory synchronization tools and automation solutions.

• Ability to handle multiple high priority demands and work under pressure.

Education:

Degree or equivalent and typically requires 7+ years of relevant experience