Security Identify : Systems Engineering Advisor

Systems Engineering Advisor
: Active Directory/Azure AD
Role Overview
The NTT DATA Services Security organization is looking for talented security:oriented Systems Engineering Advisor with strong Active Directory/Azure AD/Identity skills. This role will be part of a larger dedicated security team dedicated to supporting, troubleshooting, upgrading Active Directory, Azure AD and related Identity technologies.
Role Responsibilities:
:
Active Directory designing, Architecture Solutions, Integration with platforms and Applications
:
Develop an architecture of directory solutions for Windows, Unix, and related platforms
:
Experience in consolidations of multiple forest and domains and demonstrated understanding on User accounts, machine accounts, GPOs
:
Understand the requirement and create a migration plan for any services i.e. DNS, DHCP, and Certificate Services (PKI) etc.
:
Analyzing the requirement and design a solution to fulfil the requirement with zero impact to other platforms
:
Develop a power shell scripting with AD modules or VB .Net based on the requirements
:
Manage Azure active directory design, Architect Solutions, Integration with platforms and Applications and AD connector to Azure
:
Auditing the security logs and integrating with SIEM
:
Conducting POC with multiple vendors for AD solutions and prepare detailed test cases. Create a clear recommendation document with pros and cons for senior management
:
Vulnerability Assessment and Management related to Active Directory, DNS and Windows platforms
:
Active Directory consolidations including application integration working with application teams
:
Recommend security best practices to achieve stated business objectives, advises on risk assumptions for any variances granted, and provides alternatives to achieve desired end results
Required Qualifications:
:
Minimum 5 years relevant experience in Architecture and designing, solutions and Migrating Active Directory, Azure AD, Windows and End points
:
Strong Demonstrated experience with Active Directory migration tool or equivalent and consolidation of Global Forest and Domains. Hands on experience in successful consolidation of AD Forests and Domains
:
Good Knowledge on (MIM) Microsoft Identity Management 2016 or above, earlier versions would be a plus.
:
Must have hands:on experience working on Azure AD (Azure Active Directory)
:
Extensive Experience working as Azure Admin for enterprise Active Directory setup and maintenance
:
Strong experience in AD Trusts, two:way Trusts and one:way Trusts and deep knowledge of Active Directory Schemas and meta data
:
Strong Knowledge on Azure AD Identity Management and Integration with on premise
:
Strong knowledge of Azure Active Directory technologies, including authentication models, federation, Multifactor Authentication (MFA), conditional access policies and other relevant capabilities.
:
Knowledge of best practices in AD/Azure Privileged access management and modern AD/Azure Secured Administration practices
:
Strong PowerShell scripting
:
Strong Knowledge on IAM disciplines like PIM and Privilege Administrative Accounts PAM solutions such as CyberArk
:
Good knowledge on ADFS and Azure AD sync connectors
:
Strong familiarity with DNS Active Directory integrated, partitions and Infoblox and DHCP systems and Migration of services from Active Directory any platform
:
Demonstrated knowledge and experience in AD assessment in terms of OU delegation, GPOs, permission etc.,
:
Expertise in Active Directory versions 2003, 2008R2, 2012R2 and 2016, 2019 and Azure Active Directory
:
Good knowledge and hands on experience in setting up lab based on the solution requirements
:
Demonstrated working knowledge and hands on experience in AD disaster recovery, Replication issues and resolution using tools such as repadmin
:
Demonstrated experience in writing and app
Job Type: Permanent