SSN/SIN to be replaced with Government ID to get aligned with India context

The AD Engineer is a key member of the Identity Governance and Administration Team within the Alight Security organization. They will work closely with other members of the Identity Team, Information Security Team, Development Team, and Business owners towards a goal of designing, implementing, and supporting a cloud centric Active Directory environment. The right candidate is a self-starter with high learning agility and the ability to translate complex requirements into working solutions.

This role requires an in-depth knowledge with Active Directory, Azure AD, Virtual Directory solutions, as well as hands on experience with cloud infrastructure platforms (ex: AWS/Azure).

Key Responsibilities:

• Work with the Architecture team to implement and integrate technical solutions.
• Ensure Directory Services platforms are secure, compliant, and highly available.
• Create and maintain system documentation and operational runbooks for Directory platforms and technologies.
• Prioritize and protect privileged identities – leverage RBAC, ACLs, etc. to uphold least privilege and Just-In-Time access.
• Deliver timely incident response during aligned shift and on-call assignment (Level 3).
• Provide leadership and technical assistance to the Operational support team members.
• Direct the installation, configuration, and maintenance of the Directory platforms.
• Own Root Cause Analysis and Problem Management.
• Assist with security and compliance audits.
• Manage customer satisfaction through effectively communicating and managing customer expectations.

Basic Qualifications:

• B.S. degree in a computer science, information technology, computer related discipline and/or 5+ years IT work experience in a global information technology infrastructure environment.

Preferred Skills/Experience:

• Extensive experience managing complex and disparate directories (ex: Active Directory/eDirectory/Radiant Logic/Azure AD/AWS Managed AD/etc.).
• Practical experience with core identity technologies and concepts (ex: Identity Governance/Privileged Access Management/SSO/Federation/MFA/etc.).
• Familiarity with IT security practices and fundamentals.
• Extensive experience with Cloud service providers (ex: AWS/Azure/etc.) and understanding of cloud service models (IaaS/PaaS/SaaS).
• PowerShell/MSGraph scripting or other (ex: JavaScript/Python/Bash/etc.).
• Familiarity and experience with CI/CD pipelines and Infrastructure-as-Code (ex: Terraform).
• Experience with Group Policy Management (GPO), including leveraging GPOs to enforce security settings, configuration standards, and software deployments.
• Knowledge of Microsoft ADCS/PKI/KMS.
• Experience with Microsoft Azure AD Connect.
• Windows/Linux engineering proficiency - familiarity with DNS, DHCP, TCP/IP, UDP, Failover Clustering, SIEM, IIS/Tomcat, Virtualization (VMWare/Hyper-V), Load Balancing, etc.
• Understanding of Disaster Recovery models, supporting performance, resilience, and availability of Tier 0/Tier 1 systems.

Professional Skills/Experience:

• Must demonstrate security focused approach to problems.
• Must possess deep troubleshooting technical skills that follow security and engineering principles.
• Must understand agile processes and concepts.
• Must understand how to identify and instill industry best practices.
• Ability to translate technical issues into understandable business language for end users.
• Team player with proven leadership, communication, organizational, and strong interpersonal skills. The role requires significant interaction with many different teams across a global company.
• Self-motivated, with keen attention to detail and excellent judgment skills.
• Ability to establish new standards for quality, performance or productivity.
• Must have excellent writing and communication skills, strong communicator with ability to maintain open communication with internal employees, contractors, managers, 3rd parties, and customers as needed.
• Able to integrate and apply feedback in a professional manner.

Able to prioritize and drive to results with a high emphasis on quality.

Equal Opportunity Policy Statement

Alight is an Equal Employment Opportunity employer and does not discriminate against anyone based on sex, race, color, religion, creed, national origin, ancestry, age, physical or mental disability, medical condition, pregnancy, marital or domestic partner status, citizenship, military or veteran status, sexual orientation, gender, gender identity or expression, genetic information, or any other legally protected characteristics or conduct covered by federal, state, or local law. In addition, we take affirmative action to employ disabled persons, disabled veterans, and other covered veterans.

Alight provides reasonable accommodation to the known limitations of otherwise qualified employees and applicants for employment with disabilities and sincerely held religious beliefs, practices and observances, unless doing so would result in undue hardship. Applicants for employment may request reasonable accommodations/modifications by contacting their recruiter.

Authorization to work in the Employing Country

Applicants for employment in the country in which they are applying (Employing Country) must have work authorization that does not, now or in the future, require sponsorship of a visa for employment authorization in the Employing Country and with Alight.

Note, this job description does not restrict management's right to assign or reassign duties and responsibilities of this job to other entities; including but not limited to subsidiaries, partners, or purchasers of Alight business units.

We offer you a competitive total rewards package, continuing education & training, and tremendous potential with a growing worldwide organization.

DISCLAIMER:

Nothing in this job description restricts management's right to assign or reassign duties and responsibilities of this job to other entities; including but not limited to subsidiaries, partners, or purchasers of Alight business units.

Originally posted on Himalayas