[Hiring] IAM Engineer - Active Directory @Hitachi

Role Description

As an experienced, technically sound IAM Engineer, you will join a team of IAM analysts, developers, and engineers, reporting to the Director of Identity and Access Management. Working closely with other teams, you will help to mature the Identity and Access Management program at Hitachi Vantara.

Your tasks will include:

• Mastering your skills related to on-prem Active Directory
• Assisting with escalations of Tier 2 support tickets to resolution
• Management of Active Directory objects
• User accounts
• Computer accounts
• AD Group structure
• Service and Resource accounts
• AD Domain structure
• Forest and Child topology
• GPO object creation/modification/deletion
• GPO topology
• Active Directory domain controller maintenance
• Domain health checks
• Promoting and demoting servers into the domain environment
• Prep new servers for domain promotion
• Post-installation of security tools
• Prep demoted servers for decommissioning
• Troubleshooting replication issues
• Updating the operating system
• Installing security patches
• Sites and Service topology management
• Management of DNS Zones and Objects
• Create/Modify/Delete objects
• Troubleshoot DNS resolution issues
• AWS Console management
• EC2 instance management
• EC2 instance backups
• Development of reporting and management scripts in PowerShell
• Okta data retrieval
• Ad-Hoc reports on the fly when tasked
• Report formatting standards
• Scripting standards

Qualifications

• Strong working knowledge and experience with Microsoft Active Directory implementation and administration
• AD Replication Management tools
• Sites and Services Topology
• Active Directory Users and Computers management
• Organizational Units Structure and Design
• Security Access Control Lists (ACL’s)
• Security Group Types
• Forest and Child Domains
• Working knowledge with AD group policies (GPO’s Local and Domain)
• Prefer experience with Active Directory Group Policy Manager (AGPM)
• Understanding AGPM policy deployment in the domain environment
• A strong understanding of Domain Naming Services (DNS)
• A good understanding of DNS Zones, forwarders, conditional forwarders and PTR records
• DNS management tools
• Familiar with Lightweight Directory Access Protocol (LDAP and LDAPS)
• Knowledge of Active Directory integration with Distributed File System Replication (DFSR)
• Experience with PowerShell is encouraged
• Knowledge of Amazon Web Services (AWS) is a plus
• AWS console management
• Elastic Compute Cloud (EC2) instance management
• Understanding EC2 instance storage requirements
• AWS EC2 instance backups
• Knowledge of AD Quest tools is a plus
• RMAD DRE AD backup
• Security IT Search
• Change Auditor
• SQL DB interaction with Quest tools

Benefits

• Industry-leading benefits packages
• Flexible arrangements that work for you (role and location dependent)
• Support for holistic health and wellbeing
• Creative and inclusive culture