Security Engineer III; Chicago, IL

Responsibilities

• Identify opportunities for the automation of tasks, processes, or entire solutions and act on them, as well as identify any opportunities for improvement in the environment.
• Analyze, design, and support a highly complex, enterprise level Active Directory service in a hybrid on-premises and cloud hosted environment.
• Manage enterprise identity directories including Active Directory, Microsoft Azure AD, AWS Managed AD, ADFS, and Azure AD Connect.
• Translate business needs into workable technology solutions that meet the needs of internal customers.
• Participate in or lead troubleshooting and incident resolution of complex high severity incidents.
• Develop detailed architecture, standards, design, and implementation documentation.
• Analyze the current Directory Services environment to identify both technical and operational opportunities and develop continuous improvement action plans.
• Participate in disaster recovery, capacity planning, performance monitoring, and maintenance to ensure high availability.
• Understand a high-availability, high-performance environment and perform work to those standards.
• Work with project management to achieve on-time project implementation.

• Expert level knowledge of protocols such as Kerberos, NTLM, TCP, UDP, SAML, OAuth, LDAP, and SCIM.
• Expert level knowledge of Active Directory Sites and Services, including Bridge Head servers and Replication Connectors, Forest and Domain Trusts, and Federation technologies.
• Expert level knowledge of DNS, DHCP, and WINS, including hosts and lmhosts files.
• Expert level knowledge of protocols such as Kerberos, NTLM, TCP, UDP, IPv4, IPv6, SAML, LDAP, and Secure LDAP.
• Expert level knowledge of Windows Server operating systems.
• Knowledge of Semperis ADFR and DSP.

Department:
Preferred Vendors

Contract position