Description

What You'll Do:

• Analyze, assess, and remediate vulnerabilities identified through tools such as Qualys, Nessus, Tenable, and other vulnerability management platforms.
• Perform Active Directory security hardening, configuration reviews, privilege management assessments, and remediation activities.
• Manage and optimize Group Policy Objects (GPOs) to enforce security standards and compliance requirements.
• Conduct privileged account reviews, entitlement validations, and access-control assessments.
• Enhance Microsoft Entra security controls including Conditional Access, Multi-Factor Authentication (MFA), Identity Protection, and Privileged Access Management.
• Troubleshoot and resolve security findings, provisioning issues, workflow failures, and integration problems within ISAM on Linux environments.
• Coordinate remediation planning, testing, deployment activities, and post-remediation validation processes.
• Collaborate with infrastructure, security, and application teams to implement corrective actions and security improvements.
• Perform root-cause analysis for security incidents and recurring platform vulnerabilities.
• Maintain remediation trackers, audit evidence, compliance documentation, and risk reports.
• Support governance, risk, and compliance initiatives related to identity security.
• Participate in change-management and release-management activities to ensure secure implementation of remediation measures.
• Monitor identity platforms and security controls to identify opportunities for continuous improvement.

Expertise You'll Bring:

• 5–8 years of experience in Identity and Access Management, Security Engineering, Directory Services, or related domains.
• Strong hands-on expertise in Active Directory administration, security hardening, and Group Policy management.
• Experience working with Microsoft Entra, including Conditional Access, MFA, Identity Protection, and privileged access controls.
• Hands-on knowledge of ISAM on Linux administration, troubleshooting, and integration.
• Strong understanding of LDAP, authentication, authorization, and directory services.
• Experience with vulnerability assessment, remediation planning, and security hardening processes.
• Knowledge of Privileged Access Management (PAM), Identity Governance, provisioning, and access certification processes.
• Experience working with vulnerability management tools such as Qualys, Nessus, Tenable, or equivalent platforms.
• Familiarity with PowerShell scripting and automation of identity management tasks.
• Exposure to SailPoint IdentityIQ, CyberArk, or similar identity governance and PAM solutions is preferred.
• Understanding of ITIL processes, change management, and operational support frameworks.
• Strong analytical, troubleshooting, and problem-solving capabilities.
• Effective communication and stakeholder management skills.
• Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field

Key Skills

Education

Any Graduate