Job Description

Concentrix is a technology-enabled global business services company specializing in customer engagement and improving business performance. We partner with ambitious, progressive executives around the world to future-proof their business and stay ahead of the competition and customer expectations. Role and Key Responsibilities: - Active Directory plus Azure AD design knowledge while providing the support for the Integration with platforms and Applications. - Understanding the architecture of directory solutions for Windows, UNIX, and related platforms. - Understand the requirements and support a plan for any services i.e., DNS, DHCP, and Certificate Services (PKI) etc. - Strong Azure Active Directory single sign-on (SSO) knowledge and hands-on familiarity with SAML, OAuth, OpenID. - Knowledge on Azure AD Identity Management and Integration with on premise. - Knowledge of Azure Active Directory technologies, including authentication models, federation, Multifactor Authentication (MFA), conditional access policies and other relevant capabilities. - Knowledge of best practices in AD/Azure Privileged access management and modern AD/Azure Secured Administration practices. - Support active directory design requirements from or with platforms and Applications and AD connector to Azure. - Auditing the security logs analysis and review. - Vulnerability Assessment and Management related to Active Directory, Azure AD, DNS and Windows platforms. - Knowledge of recommend security best practices to achieve stated business objectives, advises on risk assumptions for any variances granted, and provides alternatives to achieve desired end results. Key skills & knowledge: - Minimum 2+ years relevant experience in supporting and designing, solutions for Active Directory, Azure AD, Windows and End points - Must have strong hands-on experience working on Azure AD (Azure Active Directory) - Extensive experience working as Azure Admin for enterprise Active Directory setup and maintenance - Some experience and knowledge of Active Directory Schemas and meta data - Strong Knowledge on Azure AD Identity Management and Integration with on premise - Strong knowledge of Azure Active Directory technologies, including authentication models, federation, Multifactor Authentication (MFA), conditional access policies and other relevant capabilities. - Knowledge of best practices in AD/Azure Privileged access management and modern AD/Azure Secured Administration practices - Hands-on experience in coding in PowerShell scripting - Some knowledge on IAM disciplines like PIM and Privilege Administrative Accounts PAM solutions such as CyberArk - Good knowledge on ADFS and Azure AD sync connectors - Strong familiarity with DNS Active Directory integrated, DHCP systems and services from Active Directory to any DNS platform - Demonstrated knowledge and experience in AD assessment in terms of OU delegation, GPOs, permission etc., - Experience in Active Directory versions 2008R2, 2012R2 and 2016, 2019 and Azure Active Directory - Demonstrated working knowledge and hands on experience in AD disaster recovery, Replication issues and resolution - Demonstrated experience in writing and applying GPOs, especially related to the support of the different domain environments both in Azure AD and in Active Directory domains - Good Knowledge on Active Directory and windows audit logs and levels and SIEM integration such as Qradar - Good knowledge on Networking, firewalls, including host firewalls, DNS, DHCP, DFS and Network load balancers and Secure Global Directory or Secure LDAP - Some knowledge on Cryptography, certificates, PKI, symmetric, asymmetric keys, Encryption and hash algorithms - Good knowledge on AD authentication protocols Kerberos, NTLM, LDAP, LDAPS and LDAP-Start TLS - Some knowledge on Network log capturing and analyzing the network packet captures through the tools Wireshark, Tshark, Microsoft NM etc., - Good knowledge on application integration with LDAP and Kerberos i.e., Keytab, krb5 etc. - Some knowledge on AD migration tools like ADMT, Quest, Bititan etc., knowledge on AD trusts, forest, domain tree structures, sites, DNS, GPOs, OU, FRS, DFSR. - Strong hands-on familiarity with SAML, OAuth, OpenID and other security/IAM related standards - Knowledge of single sign-on, federation, active directory/LDAP, Kerberos/NTLM authentication and integrated Windows authentication - Good knowledge on Identity management and Role based access control, attribute-based access control and entitlement management - Good knowledge on power shell scripting with AD modules and ability to write scripts based on the requirement - Excellent communication skills, especially verbal and written - Good documentation skills to write a design and configuration documents version controls - Excellent Interpersonal skill and ability to work as part of a team - Home office for remote work - Ability to work some weekends and late nights performing approved changes - ITIL V3 or later experience, experience in writing change request and attending Change Advisory Boards (CAB) meeting - Experience with Security Controls and compliance Education - Graduate Disclaimer: - \'Neither Concentrix nor any authorized 3rd party who assist with our recruitment process, ever ask candidates for \'recruitment\', \'processing\' or any other kind of fees in exchange for offer letters from Concentrix. Offer letters and other recruiting correspondence from Concentrix are printed on Concentrix letter head with authentic signatures of appropriate Concentrix authorities.\'

foundit