IAM Consultant
Job Location:
Monthly Salary:
Experience Required:
Posted on:
Vacancies:
Job Summary
Duration: 06 months
Location: WAYZATA MN (Onsite)
The clients Identity Security team is looking for an IAM professional with extensive Active Directory experience to improve our AD implementation and modernize it with extension into our Amazon Web Services (AWS) and broader cloud environment.
Responsibilities include but are not limited to:
Design engineer operate and secure Active Directory forests domains trusts organizational units Group Policy and domain controllers.
Partner with IAM and PAM teams to design and support privileged access controls including administrative group structures and delegated administration models.
Monitor troubleshoot and remediate Active Directory health issues including authentication failures replication DNS dependencies domain controller availability and account state incidents.
Support integrations between Active Directory and identity governance access request authentication and certification platforms.
Develop and maintain standards runbooks and operational documentation for Active Directory services and domain controller operations.
Participate in change management incident response audits and continuous improvement initiatives aligned to the IAM roadmap and security strategy.
Develop integration patterns with AWS to facilitate authentication with AD using LDAP or Kerberos
Develop application development patterns encouraging app devs to leverage Kerberos over just LDAP
Required Qualifications include:
Handson experience administering Microsoft Active Directory in large complex enterprise environments.
Strong understanding of Active Directory security principles delegation models and privileged group management.
Experience operating Active Directory as part of an integrated Identity and Access Management (IAM) ecosystem.
Proven troubleshooting skills across authentication replication DNS account lifecycle and access issues.
Experience working with AWS and any of its Active Directory implementation options (e.g. Managed AD self-hosted etc.)
Experience integrating Active Directory with identity governance or privileged access management platforms.
Experience supporting global multidomain or multiregion Active Directory environments.
Required Skills:
Microsoft Active Directory Active Directory security principles delegation models and privileged group management Troubleshooting skills across authentication replication DNS account lifecycle and access issues AWS & Active Directory implementation
Required Education:
Bachelors Degree
