Sr Active Directory Security Engineer at Chubb in Whitehouse Station, New Jersey

Job Description:

The Senior Active Directory Security Engineer provides support, implementation, and design services for Microsoft Active Directory and Windows-based systems across the enterprise, including directory and identity management solutions.  Resolves and appropriately implements assigned change requests and acts as an escalation for support issues.  Applies new solutions through research and collaboration with team and determines course of action for new identity managment initiatives.  The core duties include enterprise Microsoft Active Directory and Windows file services architecture creation and management, global system security and policy configuration, and top-level support for enterprise-wide initiatives.  This person will be part of the Global Information Security Identity Management team and should have a solid understanding of key controls and with an emphasis in detection and prevention.  This person will work to bridge the gaps between process and controls not soley on Active Directory services but across all owned security managed platforms.

Key Job Responsibilites:

• Automate system monitoring, verifying the integrity and availability of all hardware, server resources, systems and key processes, reviewing system and application logs, and verifying completion of scheduled jobs.


• Own Root Cause Analysis and Problem Management for internal Identity Management environment.  Work with consumer identity team as our liasion and team correspondant.


• Create and maintain system documentation for domain technologies, including installation, configuration, and appropriate troubleshooting steps.


• Improve existing processes through automation solutions to recurring problems and enhancements to existing solutions or documentation.


• Produce enterprise-level designs for Active Directory and Windows File Services for global initiatives following those through to implementation via collaboration with project and support teams.


• Provide training and mentorship to Jr. team members.  Train any tier 1 or 2 team members in best practices and act as escalation contact for all identity/security related issues


• Ability to work across multiple projects and provide best practice advice and contribute to technical tasks.


• Automate security controls to reduce risk in our environments


• Work closely with our IT/Security teams to provide account analysis and reporting capabilites on accounts across multiple domains. Automate reporting, monitoring, and provide corrective actions across accounts.


• Provide detailed reports to managment and action plans on how to address the data.  Provide trending and reporting on how improved process and controls have affected the environment

Preferred Skills/Experience

• Experience working with Microsoft Identity technologies including Active Directory, Windows File Services, and Group Policies.


• Experience working across AS400, ACF2, RACF, Linux, Unix, LDS, and other common corporate platforms.


• Expert knowledge in administering Active Directory (AD) and GPO’s.


• Expert knowledge of AD, ADFS, PKI in Windows Server environments


• Expert knowledge of DNS, DHCP, WINS, DFS, in a Windows server enviornment.


• Knowledge of Microsoft Exchange, Quest Active Roles Server (ARS), Quest Product Suite


• Must show a progressive advancement in responsibility including deep troubleshooting technical skills.


• Must have an understanding of how to identify and instill industry best practices.


• Ability to translate technical issues into understandable business language for end users.


• Team Player with proven leadership, communication, organizational, and strong interpersonal skills. The role requires significant interaction with many different teams across a global company.


• Must be able to work in a team environment with a “can do” attitude capable of overcoming difficult challenges.

Qualifications:

• B.S. degree in a computer science, information technology, computer related discipline or 7+ years IT work experience in a global information technology infrastructure/security environment.


• Advanced Powershell Scripting and other languages commonly used for adminstering active directory domains (Python, C#, Ruby, Java, etc)


• Preferred SME in following applications suites:  Oracle 12C, Quest Product Suite (ARS, Identity Manager, CyberArk, Varonis, Centrify)