Discovery Identity Automation Engineer Only W

Job Title: Discovery / Identity & Automation Engineer

Location: Phoenix, AZ
Varonis DAG: interpreting collector scan data, group membership analysis, over-permission and stale-access reporting and access reviews.

• NTFS ACL analysis and translation into SharePoint permission models.
• Active Directory group administration and Entra ID group management.
• Security group design to the three-group least-privilege pattern - service account, read-only and read/write.
• PowerShell and PnP. PowerShell: bulk site provisioning, permission assignment, inventory and evidence logs.
• Microsoft Graph and SharePoint CSOM scripting for reporting and bulk remediation.
• File-system analysis at scale - path-length inventories, duplicate and orphan detection and aging and size profiling.
• Retention label and policy application so existing retention carries forward correctly.

Required Experience

• Strong experience with Varonis DAG, NTFS ACL analysis, Active Directory, Entra ID and SharePoint permissions.
• Advanced PowerShell, PnP. PowerShell, Microsoft Graph and SharePoint CSOM scripting capability.
• Experience with large-scale file-system discovery, least-privilege design and retention controls.

Key Responsibilities

• Interpret Varonis and file-system discovery data to identify ownership, access and remediation needs.
• Translate NTFS ACLs into sustainable SharePoint permission models.
• Design service-account, read-only and read/write security groups using least privilege.
• Automate provisioning, permission assignment, inventory, reconciliation and evidence logging.
• Identify duplicates, orphaned content, stale data and long paths, and validate retention carry-forward.