Security Engineer - Directory Services

The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.

Need Help? (

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (View email address on click.appcast.io?subject=Accommodation%20request)

(accommodation requests only; other inquiries won't receive a response).

Regular or Temporary:

Regular

Language Fluency: English (Required)

Work Shift:

1st shift (United States of America)

Please review the following job description:

Come join a growing team that is responsible for the design/engineering/operation of the following foundational infrastructure technology services:

• Microsoft Active Directory Domain Services

• Microsoft Active Directory Federation Services (ADFS)

• Microsoft Active Directory Certificate Services

• Microsoft DHCP

• Microsoft DNS

• Microsoft Entra Connect

• Microsoft Distributed File System (DFS)

• Microsoft Key Management Services (KMS)

• Microsoft Identity Manager (MIM)

• Microsoft Remote Desktop Licensing (RDL)

• Symantec product suite

• Quest product suite

• Cisco Identity Services Engine (ISE)

ESSENTIAL DUTIES AND RESPONSIBILITIES

Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

• Performs problem tracking, diagnosis and root-cause analysis, replication, troubleshooting, and resolution for complex issues. In this capacity, performs programming and debugging activities.

• Responds to issues in a timely manner by receiving and investigating incidents or service tickets.

• Analyzes and observes trends with technical issues and develops recommendations for long- term improvements.

• Documents all relevant end-user interactions and steps taken to resolve incidents.

• Has occasional contact with end-users.

• Communicates status of issue resolution to internal customers.

• May engage and manage outside vendors.

• Applies in-depth knowledge of application support and an understanding of best practices.

• Typically leads moderately complex projects and participates in larger, more complex initiatives.

• Solves complex technical and operational problems.

• Acts as a resource for teammates with less experience.

• May have people management responsibilities for a small team.

Qualifications

Required Qualifications

The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Bachelor’s degree or equivalent education, training, and work-related experience.

• Minimum of 5 years of experience in security engineering or related cybersecurity roles.

• Advanced knowledge in cybersecurity principles, theories, and concepts.

• Proven experience in software development lifecycle security practices.

• Advanced knowledge of threat modeling, security testing, and penetration testing.

• Experience implementing and managing complex information security technologies.

Preferred Qualifications

• Bachelor's degree and five years of experience in development or application support or an equivalent combination of education and work experience.

• In- depth knowledge in information systems and ability to identify, apply, and implement best practices.

• Understanding of key business processes and competitive strategies related to the IT function.

• Ability to plan and manage projects.

• Ability to solve complex problems by applying best practices.

• Ability to provide direction and mentor less experienced teammates.

• Ability to interpret and convey complex, difficult, or sensitive information.

• Banking or financial services experience.

• Knowledge of and experience with the following technology systems and platforms is preferred:

• Microsoft Active Directory Domain Services

• Microsoft Active Directory Federation Services (ADFS)

• Microsoft Active Directory Certificate Services

• Microsoft DHCP

• Microsoft DNS

• Microsoft Distributed File System (DFS)

• Microsoft Key Management Services (KMS)

• Microsoft Identity Manager (MIM)

• Microsoft Remote Desktop Licensing (RDL)

• Quest product suite

• Hewlett Packard Enterprise physical servers

• Dell physical servers

• Windows Server operating systems (Windows Server 2025 through Windows Server 2012 R2)

• PowerShell scripting knowledge and ability to write customized scripts is preferred.

• Knowledge of networking and firewall rulesets is preferred.

OTHER JOB REQUIREMENTS / WORKING CONDITIONS

Sitting

Frequently (25% - 50% of the time)

Lifting

Up to 25 lbs.

Visual / Audio / Speaking

Able to access and interpret client information received from the computer and able to hear and speak with individuals in person and on the phone.

Manual Dexterity / Keyboarding

Able to work standard office equipment, including PC keyboard and mouse, copy/fax machines, and printers.

Availability

Able to work all hours scheduled, including overtime as directed by manager/supervisor and required by business need.

Travel

Up to 25%

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist’s generous benefit plans, please visit our Benefits site (

. Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.

Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.

EEO is the Law (

E-Verify (

IER Right to Work (