Identity Security Analyst

Scope of Work

The selected resource shall provide technical administration and operational support for the following technology areas:

• Enterprise backup and recovery platforms
• Okta identity and access management services
• Zscaler internet access and private access services
• Infoblox DNS, DHCP, and IPAM services
• Related integrations, reporting, documentation, and operational support

• Administer backup policies, schedules, retention rules, and backup plans.
• Monitor daily backup job status, failures, warnings, and success rates.
• Troubleshoot failed or incomplete backup jobs.
• Perform file-level, server-level, and application-level recovery as required.
• Support backup configuration for virtual machines, physical servers, databases, file shares, and cloud workloads.
• Validate backup coverage for critical systems.
• Support backup agent installation, upgrade, and removal activities.
• Assist with disaster recovery readiness and recovery testing.
• Generate backup compliance, capacity, and operational reports.
• Maintain documentation for backup procedures, configurations, and escalation steps.
• Coordinate with application, server, storage, and security teams for backup-related issues.

• Administer Okta users, groups, applications, policies, and integrations.
• Support single sign-on, multi-factor authentication, lifecycle management, and provisioning configurations.
• Troubleshoot authentication, MFA, SSO, provisioning, and directory synchronization issues.
• Review Okta system logs to investigate access issues, failed logins, policy denials, and user activity.
• Support integration with Active Directory, Microsoft 365, SaaS applications, and other enterprise systems.
• Assist with Okta policy updates, including sign-on policies, MFA policies, application access policies, and device trust controls.
• Support access reviews, user deactivation, account lifecycle events, and group membership validation.
• Document Okta configurations, operational procedures, and troubleshooting steps.
• Assist with security and audit requests related to identity access activity.

• Administer Zscaler policies, application segments, forwarding rules, access controls, and user/group assignments.
• Troubleshoot user access issues related to ZIA, ZPA, Client files, tunnels, app connectors, and cloud connectors.
• Review logs and analytics to investigate blocked traffic, denied access, application access failures, and policy enforcement.
• Support SSL inspection policies, URL filtering, cloud firewall rules, security policies, and exceptions.
• Maintain and update Client files or forwarding profiles as needed.
• Support Zscaler Client Connector deployments, upgrades, and user troubleshooting.
• Monitor Zscaler service health, connector status, and policy effectiveness.
• Document Zscaler configuration standards, troubleshooting procedures, and operational runbooks.

• Administer Infoblox DNS, DHCP, IPAM, Grid, and DNS view configurations.
• Create, modify, and delete DNS records, DHCP scopes, reservations, fixed addresses, and IPAM objects.
• Support DNS zones, forwarders, views, name servers, and delegated domains.
• Troubleshoot DNS resolution, DHCP lease, Grid replication, member synchronization, and service availability issues.
• Monitor Grid health, service status, replication status, and system alerts.
• Support Infoblox upgrades, hotfixes, backups, and configuration validation.
• Manage role-based access controls for DNS/DHCP/IPAM administration.
• Review audit logs and administrative activity as required.
• Assist with cloud-hosted Infoblox appliances in Azure or AWS, where applicable.
• Maintain operational documentation, configuration standards, and troubleshooting guides.

• Consultant will be expected to provide:
• Weekly or monthly operational status reports.
• Backup job health and compliance reports.
• Okta access, authentication, and policy review reports.
• Zscaler access, policy, and application troubleshooting summaries.
• Infoblox DNS/DHCP/IPAM change and health reports.
• Updated technical documentation and runbooks.
• Incident and problem resolution summaries.
• Change request documentation.
• System configuration and access review documentation.
• Recommendations for operational improvements.