[Hiring] Technical Solutions Architect @NTT DATA

Role Description

The NTT DATA Services Security organization is looking for talented security-oriented Systems Engineering Specialist Advisor with strong Active Directory/Entra ID/PIM/AD Manager/Manage Engine/Identity skills. This role will be part of a larger dedicated security team dedicated to supporting, troubleshooting, upgrading Active Directory, Entra ID and related Identity technologies.

Role Responsibilities:

• Identity Governance and Administration (IGA)
• Access Certification and Entitlement Reviews
• Certificate Services
• Role-Based Access Control (RBAC)
• Privileged Access Governance
• Identity Lifecycle Management
• Compliance Reporting and Metrics
• Audit Readiness Activities
• Zero Trust Identity Alignment

Qualifications

• Minimum 5 years relevant experience in Architecture and designing, solutions & Migrating Active Directory, Entra ID, Windows & End points
• Strong demonstrated experience with Active Directory migration tool or equivalent and consolidation of Global Forest and Domains
• Hands-on experience in successful consolidation of AD Forests and Domains
• Must have hands-on experience working on Entra ID (Azure Active Directory)
• Extensive experience working as Entra Admin for enterprise Active Directory setup and maintenance
• Strong experience in AD Trusts, two-way Trusts and one-way Trusts
• Deep knowledge of Active Directory Schemas and meta data
• Strong knowledge on Entra ID Identity Management & Integration with on premise
• Strong knowledge of Azure Active Directory technologies, including authentication models, federation, Multifactor Authentication (MFA), conditional access policies and other relevant capabilities
• Knowledge of best practices in AD/Azure Privileged access management and modern AD/Azure Secured Administration practices
• Strong PowerShell scripting
• Strong knowledge on IAM disciplines like PIM and Privilege Administrative Accounts PAM solutions such as CyberArk
• Good knowledge on ADFS and Entra ID sync connectors
• Strong familiarity with DNS Active Directory integrated, partitions and Infoblox & DHCP systems
• Demonstrated knowledge and experience in AD assessment in terms of OU delegation, GPOs, permission etc.
• Expertise in Active Directory versions 2003, 2008R2, 2012R2 & 2016, 2019 and Azure Active Directory
• Good knowledge and hands-on experience in setting up lab based on the solution requirements
• Demonstrated working knowledge and hands-on experience in AD disaster recovery, Replication issues and resolution using tools such as repadmin
• Demonstrated experience in writing and applying GPOs, especially related to domain consolidations
• Good knowledge on Active Directory & windows audit logs and levels and SIEM integration
• Good knowledge on Networking, firewalls, including host firewalls, DNS, DHCP, Client & Network load balancers and Secure Global Directory or Secure LDAP
• Good knowledge on Cryptography, certificates, PKI, symmetric, asymmetric keys, Encryption & hash algorithms
• Good knowledge on AD authentication protocols Kerberos, NTLM, LDAP, LDAPS & LDAP-Start TLS
• Good knowledge on Network log capturing & analyzing the network packet captures through the tools Wireshark, Tshark, Microsoft NM etc.
• Good knowledge on application integration with LDAP & Kerberos i.e. Keytab, krb5 etc.
• Good knowledge on AD migration tools like ADMT, Quest etc.
• Knowledge on AD trusts, forest, domain tree structures, sites, DNS, GPOs, OU, FRS, DFSR
• Good knowledge on any Identity & Access Management tools like FIM, MIM, OIM, Quest etc.
• Exposure to SAML, OAuth, OpenID and other security/IAM related standards
• Strong hands-on familiarity with host-based security solutions, Forensic & Investigation agents, and Compliance scanning and reporting
• Knowledge of single sign-on, federation, active directory/LDAP, Kerberos/NTLM authentication & integrated Windows authentication
• Good knowledge on Identity management and Role based access control, attribute-based access control & entitlement management
• Good knowledge on PowerShell scripting with AD modules or VB .Net and ability to write scripts based on the requirement
• Excellent communication skills, especially verbal and written
• Good documentation skills to write design & configuration documents version controls
• Excellent interpersonal skills and ability to work as part of a team
• Ability to work some weekends and late nights performing approved changes
• ITIL V3 or later experience, experience in writing change request and attending Change Advisory Boards (CAB) meeting
• Experience with Security Controls and compliance

Benefits

• Medical, dental, and vision insurance
• Flexible spending or health savings account
• Life and AD&D insurance
• Short-and long-term disability coverage
• Paid time off
• Employee assistance
• Participation in a 401k program with company match
• Additional voluntary or legally required benefits