Security Engineer III

Job TitleResponsibilities:• The individual will be responsible for identifying opportunities for the automation of tasks, processes, or entire solutions and acting on them, as well as identifying any opportunities for improvement in the environment• Analyze, design, and support a highly complex, enterprise level Active Directory service in a hybrid on-premises and cloud hosted environment• Manage enterprise identity directories including Active Directory, Microsoft Azure AD, AWS Managed AD, ADFS, Azure AD Connect.• Translate business needs into workable technology solutions that meet the needs of internal customers• Participate in or lead troubleshooting and incident resolution of complex high severity incidents• Develop detailed architecture, standards, design, and implementation documentation• Analyze the current Directory Services environment to identify both technical and operational opportunities and develop continuous improvement action plans• Participate in disaster recovery, capacity planning, performance monitoring and maintenance to ensure high availability• Understands a high-availability, high-performance environment and performs work to those standards• Works with project management to achieve on time project implementationSkills:• Expert level knowledge of protocols such as: Kerberos, NTLM, TCP, UDP, SAML, OAuth, LDAP, SCIM• Expert level knowledge of Active Directory Sites and Services, including Bridge Head servers and Replication Connectors, Forest and Domain Trusts and Federation technologies• Expert level knowledge of DNS, DHCP and WINS, including hosts and lmhosts files• Expert level knowledge of protocols such as: Kerberos, NTLM, TCP, UDP, IPv4, IPv6, SAML, LDAP and Secure LDAP• Expert level knowledge of Windows server operating systems• Knowledge of Semperis ADFR and DSP