Security Operations Engineer - Identity/IAM

Location: Richmond, VA, Mclean, VA, Plano, TX Hybrid Open to remote for ROCK STAR candidate

Visa: GC/USC

Interview: Virtual round

Notes: LinkedIn with proper location, must be local.

MUST HAVES:

Expert in PingFederate

SAML

OAuth

Nice to have an OKTA experience

Responsibilities:

Analyse, enhance, and support the security posture of a highly complex, enterprise-level Active Directory and Single Sign On environment in a hybrid on-premise and cloud-hosted configuration.

Active Directory SME (Domain Controller operations, GPO, AD Sites & Services, Ability to automate day-to-day tasks, user & group management, etc). Manage enterprise cloud infrastructures in AWS. Translate business needs into workable technology solutions that meet the needs of internal customers.

Participate in or lead troubleshooting and incident resolution of complex, high-severity incidents. Develop automated solutions using scripts, pipelines, and cloud-based serverless computing platforms. Develop detailed architecture, standards, design, and implementation documentation. Analyse the current Authentication Services environment to identify both technical and operational opportunities and develop continuous improvement action plans.

Basic Qualifications:

High School Diploma, GED or equivalent certification At least 4 years of experience working in cybersecurity or information technology At least 1 years of experience with Active Directory, AWS, PingFed, or PingID At least 1 years of experience with Cloud Infrastructure management Active Directory Domain Service 2016/2020 OS advanced - All things AD - replication, sites, GP, managing a domain, creating a DC, domain reduction etc...

Preferred Qualifications:

5+ years of experience with securing and managing Active Directory at an

5+ enterprise level years of experience with EC2, CFT, and AWS cloud

5+ infrastructures years of experience in Active Directory security

5+ years of experience developing complex scripts in PowerShell,

5+ VBScript, YAML, Python or other languages to develop automated

5+ solutions

3+ ADDS engineering /Ops senior experience PowerShell advanced Identity

3+ Lifecycle Management Splunk (querying, dashboards), New Relic

3+ (Identity Security, compliance NIST, Group Policy controls,

3+ Governance polices), Observability AWS, Azure, EntraID

CICD pipeline/DevOps, Git and version controls Microsoft Identity Manager Radiant Logic Jira, Confluence ServiceNow AWS Solutions Architect &/or MS SC-300 Certified