Senior Infrastructure Operations Analyst

Job Summary

A Senior Infrastructure Operations Analyst on the Identity Access Management team secures digital identities by designing, implementing, and managing access policies, user lifecycles (onboarding/offboarding), and authentication systems. This requires advanced identity management domain expertise and related security disciplines. The position leads high-profile initiatives, applies rigorous analysis to deliver innovative solutions, and establishes identity management standards across the organization.

Key Responsibilities

• Identify, plan, and execute Certificate Lifecycle Management (CLM) driven projects as needed.
• Fulfill service requests in ServiceNow related to Identity technologies.
• Monitor the health of in-scope systems and act when necessary, as well as enhance observability across supported services.
• Perform Incident and Problem management as needed.
• Improve operational rigor and efficiency through scripting and automation.
• Implement changes (typically off hours) to support modernization objectives and eliminate risks related to vulnerabilities.
• Work with Enterprise Security to assess and remediate any security findings that are discovered during Pen Tests and Vulnerability scans.
• Provide management of and support for all aspects of identity management.
• Plan and migrate on-premises workload to alternate solutions as part of the Data Center Exit strategy.

Required Skills

• Access Governance: Define and manage user access roles, permissions, and entitlements based on the principle of least privilege.
• Identity Lifecycle Management: Understanding all aspects of Identity – Human, Machine, and Agent/Application.
• System Administration: Maintain IAM platforms (e.g., Entra ID, Venafi, MS ADCS) and directory services.
• Security & Compliance: Perform access reviews, audit logs for unauthorized access, and ensure compliance with regulatory standards (e.g., PCI, GDPR).
• Authentication Protocols: Implement and support Certificate-based authentication, SCEP, Intune, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federation services (SAML, OAuth).
• Technical Support: Troubleshoot identity-related issues across the Human, Machine, Agent/Application spectrum and support incident response needs.
• Public Key Infrastructure (PKI), X.509 Certificates, Venafi CLM, and automated protocols such as SCEP.
• Knowledge in identity-based infrastructure: Active Directory, Entra ID, DNS, and DHCP.
• Intermediate knowledge of Windows and Linux operating systems, including how these machines use certificates.
• Experience with MS Defender and using the product to help keep the environment secure.
• Experience with scripting languages such as PowerShell and/or Python and how to use them to automate tasks.
• Strong communication skills (both verbal and written).
• Ability to participate in off-hour work, including scheduled on-call rotation (approximately 1 week every 6–8 weeks).
• On-call support may include being contacted outside of scheduled call hours in the event of a critical incident.

Preferred Skills

• Detailed understanding of AWS and cloud computing principles and related expertise on identity management integrations.
• Hands-on experience configuring SSO solutions.
• Experience with Centrify, Netbackup, Quest Active Roles, and CyberArk.
• Experience with MS Intune and JAMF.

Education Requirements

Bachelor's degree or the equivalent combination of education and relevant experience.

Required Experience

5 years of total relevant work experience.

About GTT

GTT is a minority-owned staffing firm and a subsidiary of Chenega Corporation, a Native American-owned company in Alaska. We highly value diverse and inclusive workplaces and support Fortune 500 organizations across banking, financial services, technology, life sciences, biotech, utilities, and retail sectors throughout the U.S. and Canada.