Sr Cybersecurity Specialist

About the role

Responsible for the planning, design and build of security architectures; oversees the implementation of network and computer security and ensures compliance with corporate cybersecurity policies and procedures. Monitors cybersecurity requirements for local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, and related network devices. Performs security assessments of applications and systems using penetration and vulnerability testing and risk analysis.

Responsibilities

• Administer and manage the company's Active Directory (AD) and Entra ID environments
• Implement and manage Group Policies (GPOs) to ensure compliance and security
• Ensure system availability, capacity, and performance for IAM technologies, including ownership for logging, monitoring, and alerting standards, processes, and systems
• Monitor and manage access controls, user permissions, and role-based access
• Plan and manage system upgrade and patching projects, in collaboration with local and offshore teams, and platform subject matter experts (SMEs)
• Communicate with vendors as needed to understand and research open issues, new versions, or changes
• Explore and help build automation to enhance end-user experience
• Define and develop policies and procedures for system operations to ensure consistency, reduce rework, and improve quality
• Ensure directory services adhere to company security policies and best practices
• Provide second and third-level support for directory services-related issues (Provide On-call support, manage support tickets, engage with business teams as need be)
• Perform root cause analysis of directory services outages and implement corrective actions
• Maintain current, relevant industry knowledge to understand evolutions and advancements in the marketplace which could bring value to the team or the company
• Collaborate with IT teams to integrate directory services with other applications and systems
• Specialize in understanding cyber adversary tactics, technics, and procedures in the interest of protecting Healthcare's network
• Detect and mitigate cyber incidents and vulnerabilities
• Apply development expertise in cybersecurity considerations to meet evolving cloud computing, web development and mobile device requirements
• Using technologies, processes, and practices to protect computers, networks, programs and data from unauthorized access or attacks that are aimed for exploitation
• Monitor and protect products and systems
• Other duties as needed

Qualifications

• 10 years of IT Security or Identity & Access Management experience with good understanding of principles, policies, and best practices
• Strong expertise in Microsoft Active Directory (AD DS), including domain services, replication, trusts, and Group Policy management
• Hands-on experience with Microsoft Entra ID (Azure AD), hybrid identity, and directory synchronization technologies
• Deep understanding of authentication protocols, including LDAP/LDAPS, Kerberos, SAML, OAuth, and OpenID Connect (OIDC)
• Proficiency in PowerShell scripting and automation for directory administration, reporting, and operational efficiency
• Experience troubleshooting complex authentication, directory synchronization, and identity-related issues in enterprise environments
• Strong knowledge of Active Directory security, privileged access controls, certificate management, and identity security best practices
• Cyber defense operations, specialized penetration testing and threat Client & forensics as well as advanced security management skills
• Requires advanced knowledge of job area combining breadth and depth, typically obtained through advanced education combined with experience
• May have practical knowledge of project management
• 4 years of experience with a high school diploma or equivalent

Skills

• Active Directory (AD DS)
• Microsoft Entra ID (Azure AD)
• Group Policy management
• Hybrid identity and directory synchronization
• LDAP/LDAPS, Kerberos, SAML, OAuth, OIDC
• PowerShell scripting and automation
• Security architecture design
• Network and computer security
• Penetration and vulnerability testing
• Risk analysis
• Threat detection and mitigation
• Incident response
• Forensics