Security Analytics Architect

Sr. IAM Engineer Directory Services (Contractor) The Sr. IAM Engineer Directory Services (Contractor) is responsible for supporting, maintaining, securing, and modernizing the organization's Active Directory and hybrid identity environment. This role serves as a key contributor to directory services operations, recovery readiness, identity security, and future modernization efforts. The ideal candidate possesses strong Active Directory expertise, an Identity and Access Management (IAM) mindset, and the ability to balance operational support with long-term strategic initiatives. This individual must be adaptable, capable of learning new technologies quickly, and comfortable working across multiple identity-related disciplines. Experience with Quest and One Identity solutions is highly desirable.

• Maintain and enhance Active Directory resiliency by supporting backup, recovery, disaster recovery planning, recovery testing, and operational readiness activities. 55%
• Provide advisory support and guidance on Active Directory standards, architecture design, and security best practices, including developing and maintaining policies, design guidelines, and governance frameworks for enterprise directory services. 20%
• Partner with IAM, Infrastructure, Security, and application teams to support authentication, authorization, identity lifecycle, and access management initiatives. 15%
• Maintain and enhance Active Directory resiliency by supporting backup, recovery, disaster recovery planning, recovery testing, and operational readiness activities. 5%
• Research, evaluate, and adopt new technologies, tools, and processes that improve directory services, security posture, operational efficiency, and user experience. 5%
• Performs other duties as assigned 5%

• Strong understanding of Microsoft Active Directory architecture, administration, security, and troubleshooting.
• Knowledge of hybrid identity environments, including Microsoft Entra ID integration.
• Experience administering and troubleshooting Group Policy Objects (GPOs).
• Understanding of Active Directory backup, recovery, and resiliency concepts.
• Familiarity with IAM principles, including authentication, authorization, identity lifecycle management, and access governance.
• Strong analytical and problem-solving skills.
• Ability to work independently while effectively collaborating across technical and business teams.
• Adaptable and quick learner with the ability to understand both tactical requirements and strategic objectives.
• Strong verbal and written communication skills.
• Experience with PowerShell or other automation technologies preferred.

• Lead by example by 'respecting and protecting' the health and safety of yourself and others
• Ensure your team and colleagues speak up report all accidents, 'near miss' incidents and work related ill health conditions
• Help your team follow HESS rules and procedures by promoting the HESS Golden Rules
• Attend HESS training & conduct risk assessments where required
• Demonstrate HESS leadership in accordance with our Heroes of Safe & Well programmed

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or equivalent work experience. Minimum of 5 7 years of hands-on Active Directory experience within medium-to-large enterprise environments. Experience supporting hybrid identity solutions involving Active Directory and Microsoft Entra ID. Working knowledge of Active Directory recovery and disaster recovery concepts. Ability to participate in operational support and project-related activities as needed.

• 5 7 years of enterprise Active Directory administration and engineering experience.
• Experience supporting Active Directory security, operations, maintenance, and troubleshooting.
• Experience working with Group Policy administration and troubleshooting.
• Experience supporting Active Directory recovery, resiliency, backup, or disaster recovery initiatives.
• Experience working in an Identity and Access Management (IAM) environment or supporting IAM-related initiatives.
• Experience collaborating with infrastructure, security, and application teams on identity-related projects.

• Experience with Quest Change Auditor.
• Experience with Quest Recovery Manager for Active Directory.
• Experience with One Identity solutions.
• Experience consolidating or migrating multiple Active Directory forests.
• Experience supporting Active Directory modernization programs.
• Experience with PowerShell automation and scripting.
• Experience supporting large, distributed, or global enterprise environments.

Our benefits package includes: Comprehensive medical benefits Competitive pay 401(k) retirement plan and much more!

About OpenKyber Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients' business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities.

OpenKyber provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, OpenKyber complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities.

For applications and inquiries, contact:View email address on us.fitly.work