Entra ID/ Active Directory Ops Engineer

About the role

The IAM Operations Engineer will play a crucial role in delivering and supporting the multi-year plan for Entra ID and Active Directory services, ensuring alignment with corporate strategy, industry trends, and regulatory requirements. This position requires collaboration with various teams to define clear requirements and meet service level agreements.

Responsibilities

• Serve as an Active Directory and Entra ID Operations Engineer for the IAM department
• Deliver and support the multi-year plan incorporating on-premise, cloud-based, and hybrid directory services solutions
• Deliver and support the multi-year plan for workforce authentication leveraging SSO, MFA, and conditional access policies
• Define best practice and development of troubleshooting processes, methodologies, standards, alerts, and reporting from Entra ID services to be leveraged for operational monitoring
• Create solutions that drive full automation, self-service, and resiliency
• Identify, manage, and escalate, as appropriate, project risks, issues, and roadblocks to timely delivery
• Partner with internal technical teams ensuring the strategy and roadmaps are well understood while monitoring the successful implementation
• Develop and implement program communications framework and metrics to ensure well-informed stakeholders, customers, and IAM colleagues
• Contribute to the development and maintenance of information security strategy and architecture

Requirements

• 10+ years Information Security experience, with strong focus in directory services platforms (e.g. MS Active Directory, MS Entra ID, MS Office365)
• Detailed knowledge and experience in enabling and supporting integrated Entra ID applications, Single Sign-On, Multi-Factor Authentication, and Conditional Access Policies
• Experience with cloud joined, hybrid joined, and multi-domain enterprise directory services platforms based on best practices
• Troubleshooting complex AD issues related to authentication, replication, Kerberos, NTLM, LDAP, and DNS
• Management of AD replication, sites and services, DNS, and DHCP integration
• Experience with automating processes by leveraging out of box capabilities, PowerShell/Python scripting, MS Graph, and PowerBI
• Experience with Agile methodologies and corresponding Agile based tools
• Proven ability to influence and gain trust at senior management levels in multi-cultural environments
• Ability to manage complex activities simultaneously to short timescales
• Continuous improvement mindset
• Clear understanding of CoBIT and ITIL Frameworks

Qualifications

• Bachelor's degree in Information Systems, Computer Science, or related field
• Certifications such as CISSP, CISM, CISA, or other relevant security certifications
• Knowledge of ISO and NIST security standards

Skills

• Strong problem-solving skills
• Excellent communication and collaboration skills
• Ability to work independently and as part of a team
• Proficiency in Microsoft Active Directory and Entra ID
• Experience with cloud services and hybrid environments
• Knowledge of security protocols and compliance regulations

Benefits

• Base Pay Range: $167,670.00 - $204,930.00
• Flexible benefits including medical, dental, vision, and wellbeing reimbursement account
• Paid time off options including vacation, holiday schedules, and financial planning time off
• Paid parental leave and adoption assistance program
• Competitive 401k savings plan with company match and additional contributions

Pay

$167,670.00 - $204,930.00

Schedule

Full-time