Job Description :
Job Title : Active Directory Engineer
Location : Santa Clara , CA
Duration : 12 months contract
Job Description:
What we''re looking for
Works within Corporate It Active Directory team to perform the analysis and process improvements for access management in relation to Active Directory This position will effort in the analysis and implementation of security controls to ensure the integrity, confidentiality, and availability of Citrix''s assets.
Position Overview
This person will be responsible for analyzing account access of directory services and lifecycle governance processes around Active Directory and Azure AD objects, including user accounts, non-user accounts, group management, OU structure and GPOs.
Responsibilities
* Analyze and document existing Active Directory environment
* Create a User Role for Access Control, Access Policy, and Privileged roles
* Proficient in defining identity governance
* Proficient in defining and designing ACL, AD Groups, OU
* Must be familiar with Domain Controller build and decommission process
* Troubleshoot Domain controller and replication issues
* Proficient in FSMO roles and maintenance
* Familiar with Active Directory Trusts and configuration.
* Should have in depth knowledge about DNS and Name resolution
* Proficient in Domain Controller Hardening and Disaster recovery
* Should have very good understanding about Capacity planning, Performance tuning, AD Design Consideration and Best practices
* In depth knowledge of Group policy and maintenance
* Streamline processes and recommend upgrades to Access Management services
* Provide access management gap analysis and recommend process improvements
* Experience with Active Directory PowerShell
* Familiar with Privileged Access Management solutions
* Familiar with an Identity Management & SSO solution
* Familiar with Windows Server 2012, 2016 and 2019
* Familiar with RSAT tools
* Must have strong written and verbal communication skills, as well as the ability to coordinate multiple demands and be highly self-motivated
* Must possess strong Microsoft Excel skills manipulating large spreadsheets
* Good to know Azure AD
Basic Qualifications
* Strong knowledge of Microsoft Active Directory and associated components (LDAP/Kerberos)
* Windows Server 2008/2012/2016
* Experience with PowerShell a plus
* Familiar with an Identity Management solution such as SailPoint
* Familiar with a Password Filtering Solution such as SpecOps
* Familiar with Privileged Access Management solutions
* Operating system security for Windows - internals and hardening
* Understanding of networking and firewalls
* Must possess strong analytical skills and convey findings clearly and concisely to a technical and non-technical audiences
* Must be able to successfully execute against project tasks and deliverables
* Must be able to create and maintain clear and easily understandable documentation for the current and proposed state of processes within the scope of the position
* Must possess strong Microsoft Excel skills manipulating large spreadsheets including but not limited to pivot tables, data analysis, and data queries
* Ability to analyze, propose, and implement workflows and process improvements
* Experience adhering to a change management process for all production changes
* Must have strong written and verbal communication skills, as well as the ability to coordinate multiple demands and be highly self-motivated
* Demonstrated experience providing excellent customer service in a professional environment
Functional/Technical Requirements
* Bachelor''s degree in Information Systems, Computer Science, or equivalent experience.
* Must have at least five years of IT related experience in a role where their function is supporting Active Directory in a geographically-dispersed environment with at least 5,000 users.