Security Engineer- Active Directory/Sso

We’re looking for a dynamic and highly motivated Sr. Cybersecurity Engineer that is seeking a position with the global leader in commercial real estate services. This position is within our Global Cyber Security Office with a focus on designing, implementing, and maintaining the global deployment of Active Directory, Domain controllers, PKI as well as Directory Services solutions within the Identity Access Management Program.

Day to Day Responsibilities:

• Act as a subject matter expert for authentication and authorization including Active Directory, ADFS and Cloud IAM.
• Active Directory Administration and maintenance. Active directory is critical.
• Manage DNS and support Domain Controllers
• Provide L3 technical support for critical Directory Services problems as needed.
• Manage and support Multi-Factor Authentication (MFA), 2FA within ADFS.
• Roadmap items, some sunsetting, upgrading, etc.
• Take on the day-to-day project directly related to Active Directory.
• Group policy management, upgrading servers, debugging, applying security patches.

Years’ Experience Required:

• 7-10 years
• Enterprise experience with supporting Directory Services ( DNS, Active Directory - AD, Azure Active Directory – AAD, AADConnect, ADFS 2.0, 2012 R2, 2016, 2019)

Education Requirements:

• Bachelor of Science in Computer Science or related field.

Systems/Software Proficiencies:

• Azure, Cloud platforms

Certifications:

• Industry related preferred

Top 5 Must have Skills:

• Subject matter expert support SSO federation protocols (SAML 2.0, WS-Federation, OAuth 2.0, OIDC).
• Ability to troubleshoot Directory Services and SSO issues leveraging tools such as session tracing.
• Ability to manage multiple priorities.
• Intermediate to advanced knowledge of scripting languages such as PowerShell.
• Subject matter expertise with cloud-based products and services within Amazon Web Services (AWS), Google Cloud Platform (GCP), and Microsoft Azure platforms preferred.

Job Type: Contract

Salary: $71.00 - $73.94 per hour

Expected hours: 40 per week

Schedule:

• 8 hour shift

Experience:

• SSO federation protocols (SAML, OAuth, OIDC): 8 years (Required)
• PowerShell: 5 years (Required)
• Active Directory: 8 years (Required)
• AWS, GCP or Azure: 3 years (Required)

Work Location: Remote