Application Engineer - Active Directory

Job Title: Application Engineer
Location: Orlando, FL
Duration: 12 Months
POSITION SUMMARY: The Directory Services Engineer’s role is responsible for daily and long-term administration of UO’s Microsoft Active Directory and windows-based systems across the enterprise including directory and identity management solutions. Responsibilities include taking the conceptual idea and develop into the planning, monitoring, analyzing and execution of Active Directory Security Enhancement (ADSE) project. Resolves and appropriately completes assigned cases and change requests and acts as an escalation for support issues. The core infrastructure technology duties include enterprise Microsoft Active Directory, Active Directory security and policy configuration, and top-level support for enterprise-wide initiatives. Responsible for the proactive service/system monitoring of AD and Windows privileged and elevated access.
ESSENTIAL DUTIES AND RESPONSIBILITIES:

• Provide subject-matter expertise with Active Directory identity protection best-practices and assist Sr. Leadership in defining, administering, and maintaining policies for the enterprise-level design of AD. Serves as an escalation point for application support and troubleshooting, provides guidance and direction in resolution of escalated issues and/or complex production, application or system problems. Assist with Active Directory Security Enhancement project including secure configuration, risk assessment findings, monitoring and logging.
• Help review and assess Active Directory integration and hardening with virtualization infrastructure and Hyper-V platform. Create and document detailed guides and tracking documents to leverage as part of Active Directory hardening and overall infrastructure enhancements. Help engineer, deploy and manage Active Directory Services in a globally distributed environment.
• Collaborate with InfoSec team and stakeholders to grow and deliver new capabilities/solutions related to Access Management for Active Directory and Windows Systems. Maintain software and OS level to the latest standards.
• Successfully deliver projects, meet project milestones and communicate issues/ risks appropriately. Provide technical expertise in threat/risk assessments for new enhancements. Enhance and improve existing infrastructure through automation and reporting.
• Understand and actively participate in Environmental, Health & Safety responsibilities by following established UO policy, procedures, training and team member involvement activities.
• Perform other duties as assigned.

EDUCATION: Bachelor’s degree in Business Administration or Computer Science is preferred.
EXPERIENCE:

• 5+ years’ experience in IT and with Security and Compliance that includes defining strategy, implementing new processes, project management, vendor and contract management
• Active Directory expert with demonstrated ability in the Microsoft’s Enhanced Security Architecture Environment (ESAE) “Red Forest”.
• Experience with integration of applications with Active Directory via LDAP and Kerberos for authentication and authorization. Multi-Forest/Multi-Domain AD environments.
• At least one Microsoft Administration Platform (SCCM, SCVMM, Hyper-V)
• Security generalist with meaningful experience in many of the following areas: authentication methods - Kerberos, MFA/2FA, SSO, Federation, etc.
• Experience in an engineering, designing, and integrating both infrastructure components (domain controllers, sites and services, connectivity, etc. Logical aspects GPO management, directory structure, and management toolsets.
• Extensive experience with infrastructure and server theories, principles and concepts; application infrastructure and standards; networking fundamentals; Windows; Physical Server architecture; Virtualization Technologies (e.g. Client, HyperV) and LAN/WAN/Firewall/VPN network technologies.
• Knowledge of JIT, backup and out-of-band technologies: Client OneView, Cyberark, Remediant, Client Netbackup.
• Extensive knowledge and experience working with applicable data security and privacy practices and laws.
• Ability to conduct research into software-related issues and products.
• Highly self motivated and directed.
• Keen attention to detail.
• Proven analytical and problem-solving abilities.
• Ability to effectively prioritize and execute tasks in a high-pressure environment.
• Experience working both independently and in a team-oriented, collaborative environment.
• Overtime hours may be required to meet project deadlines.
• Certifications: ClientSE/ClientSA, Azure, CISSP, CISA or other comparative information security certifications.