Security Engineer III (Chicago, IL)

Responsibilities Identify opportunities for the automation of tasks, processes, or entire solutions and act on them, as well as identify any opportunities for improvement in the environment. Analyze, design, and support a highly complex, enterprise level Active Directory service in a hybrid on-premises and cloud hosted environment. Manage enterprise identity directories including Active Directory, Microsoft Azure AD, AWS Managed AD, ADFS, and Azure AD Connect. Translate business needs into workable technology solutions that meet the needs of internal customers. Participate in or lead troubleshooting and incident resolution of complex high severity incidents. Develop detailed architecture, standards, design, and implementation documentation. Analyze the current Directory Services environment to identify both technical and operational opportunities and develop continuous improvement action plans. Participate in disaster recovery, capacity planning, performance monitoring, and maintenance to ensure high availability. Understand a high-availability, high-performance environment and perform work to those standards. Work with project management to achieve on-time project implementation. Skills Expert level knowledge of protocols such as Kerberos, NTLM, TCP, UDP, SAML, OAuth, LDAP, and SCIM. Expert level knowledge of Active Directory Sites and Services, including Bridge Head servers and Replication Connectors, Forest and Domain Trusts, and Federation technologies. Expert level knowledge of DNS, DHCP, and WINS, including hosts and lmhosts files. Expert level knowledge of protocols such as Kerberos, NTLM, TCP, UDP, IPv4, IPv6, SAML, LDAP, and Secure LDAP. Expert level knowledge of Windows Server operating systems. Knowledge of Semperis ADFR and DSP. Department: Preferred Vendors Contract position #J-18808-Ljbffr