Iam Architect Jobs (NOW HIRING)

Reporting to the Infrastructure Security Service Manager you will demonstrate your proven track record designing and deploying Active Directory in a large enterprise and will bring IAM operational leadership and coordination for security services including but not limited to Active Directory/LDAP, Azure-AD, SailPoint, CyberArk, OKTA, Venifi, Entrust, Thales, and ADFS.
Experience - 7-8 years
Duties and Responsibilities
• Interface with Corporate Information Security to ensure all policy and standards are adhered to.
• Deliver operational stability in close collaboration with the Infrastructure Engineering, Network Services, Service Management, Information Security, and IT Operations teams.
• Supply metrics that demonstrate the current risk state, indicators of progress, and directory services business alignment
• Analyze and resolve complex authentication, integration, and automation issues
• Help establish Active Directory security architecture and strategies
• Work closely with technology and business stakeholders across Enterprise and associated organizations
• Proactively identify and assist in the resolution of challenges and issues that may impair the team's ability to meet strategic, business, and technical goals
• Securely manage authentication and authorization solutions for on premise and cloud solutions
• Participate in security projects from initial conception through design, testing, and implementation - Integration of role-based access control, Active Directory, LDAP, Single Sign-On, End-User provisioning, identity and access governance, and identity data synchronization services with existing applications and systems.
• Engage with development teams during operational security reviews, and provide leadership and security design guidance
• Monitor technology and security developments and ensure the company's security framework follows industry best practices
• Responsible for identifying opportunities for the automation of tasks, processes, or entire solutions and acting on them, as well as identifying any opportunities for improvement in the environment.
• Participate in or lead troubleshooting and incident resolution of complex high severity incidents
• Develop automated solutions using scripts and cloud-based server-less computing platforms
• Develop detailed architecture, standards, design, and implementation documentation
• Analyze current Directory Services environment to identify both technical and operational opportunities and assist in the development of continuous improvement action plans
• Collaborate closely with IAM management, architects, and service providers to implement IAM Program modernization efforts & contribute to IAM component designs, IAM service development, service integration, implementation and operations of business-wide IAM services: Provide thought leadership on IAM implementation
• Manage identity information across a number of directories utilizing various tools and scripting
• Maintain/Secure/Upgrade AD Domain Controllers across multiple Windows forests
• Monitor & Troubleshoot AD performance & replication issues
• Assist application teams with LDAP & LDAPS connections
• Managing Active Directory Services supporting AWS migration. - Supporting Active Directory Lightweight Directory Services, ADFS, SSO, OKTA integration, etc.
• SME Group Policy Management (planning, implementing, and troubleshooting).
Experience (Mandatory):
• 10 years plus (10+) experience in Infrastructure Technology.
• Expert-level knowledge of Microsoft Windows Server/Workstation Operating (e.g. Windows 2012-2022)
• Microsoft Active Directory Federation Services.
• Expert level knowledge and practical experience with complex enterprise level Active Directory environments and other enterprise LDAP platforms in creating, modifying, and deleting group policy, troubleshoot group policy issues, determine the effect of all group policies on an account or account group, audit changes to group policy, and maintain a Group Policy Map
• Expert practical experience using Microsoft Active Directory Services, PowerShell, and/or other scripting tools
• Experience with providing quality/production methods to ensure existing group policies are already in-place to implement user request or change
• Provide active follow-up with users and engineers to ensure actual change worked and did not cause of corrupt use profiles and permissions
• Be able to identify impacts of AD, GPO, OU change
• Ability to document order of applied change and criticality of sequenced process steps;
• Experience managing Domain replication
• Deep understanding of DNS, Kerberos, ADLDS, Schema management, AD Extensions, etc.
• Understand standard identity management tools, technologies, and processes and their place in the Enterprise