Identity Engineer to support Active Directory and EntraID infrastructure - 80144-1

Position Title: Identity Engineer (Infrastructure engineering and support)

Line of Business: Technology and Operations

What does the LOB do?: Engineering and Day to Day support to Active Directory and EntraID infrastructure

Reason the role is open? Net new roles

Duration: 12 Months

Remote/Hybrid: Hybrid work arrangement requiring in person on site every Tuesday and the first Friday of each month - subject to change

Office Location: 81 Bay 16th Floor

Work Schedule (hours per week, start time): 37.5 Hours/week, Mon-fri between 8-5, some after hours or weekends required no on call rotation

Job Description:

Summary: The selected applicant will be responsible for working with a team of professionals to review, analyze, plan and implement security recommendation to enhance the security posture of the Active Directory on-prem infrastructure

1. 12 month contract - unknown at this point if extension will be considered

2. Hybrid work arrangement requiring in person on site every Tuesday and the first Friday of each month - subject to change

3. Able to work during scheduled after hours and weekend implementations. Scheduled will be arranged in advance

4. Minimum 8+ years of experience in Active Directory on-prem

5. Analytical and hands on experience in Active Directory on-prem infrastructure ( to include LDAPs, NTLM, SMB, ACL’s, certificates, DNS, Site and Services, Trust relationship, Kerberos, etc )

6. Will be responsible for working with a team of professionals to remediate and secure Active Directory on-prem infrastructure. Individual work will also be required

7. Will review security recommendations and plan and execute their implementation in non-production and production environments

8. Must know ServiceNow and change management processes

9. Requires advance PowerShell scripting knowledge

10. Able to provide procedures and direction to day to day operation support personnel

11. Knowledge of Zero Trust, MDI and Quest Suite of tools

Must Have Requirement:

- 8 years Experience with Active Directory on prem

- 5 years Analytical and hands on experience in Active Directory on-prem infrastructure (LDAPs, NTLM, SMB, ACL’s, certificates, DNS, Site and Services, Trust relationship, Kerberos, etc)

- 5 years Analytical and hands on experience in EntraID infrastructure ( to include EntraID Connect, EntraID SSO, EntraID App Registrations and SPN, role management, ability to design conditional access policies, understand tokens around EntraID, Phishing resistant MFA, EntraID secure score, Understand the EntraID hybrid configuration with Active Directory )

- 5 years Experience with advance PowerShell scripting

Nice to Have:

- Knowledge of Zero Trust, MDI and Quest Suite of tools

- Banking/financial industry experience especially banking experience

- Leadership experience

- ServiceNow and change management processes