Security Operations Engineer – Identity-IAM

Introduction

Join a leading financial services team securing enterprise identities! This role involves diving into hybrid AD/SSO/cloud environments, automating with PowerShell/Python, and driving AWS/Azure compliance using Quest/Semperis and Radiant Logic. The position can work remotely but should be willing to go for onsite meetings at least once a week.

Responsibilities

• Secure and optimize hybrid AD/SSO (on-prem/cloud)
• Manage tools such as Quest/Semperis, Radiant Logic; automate user/group tasks
• Oversee AWS infra; build secure solutions based on business needs
• Troubleshoot P1 incidents; script pipelines/serverless automations
• Document architectures/standards; enhance Authentication Services

Requirements

Must-Have Skills (5+ Years Each Unless Noted):

• Enterprise Active Directory (DC ops, GPO, replication, domain mgmt, user/group lifecycle)
• Quest/Semperis (ARS, Change Auditor, Password Manager, AD Recovery Manager)
• Radiant Logic VDS/Global Sync
• AWS (EC2, CloudFormation); 3+ yrs AWS/Azure
• Automation scripting (PowerShell, VBScript, YAML, Python)
• ADDS engineering/Ops (senior); Splunk (queries/dashboards); New Relic (NIST/GPO)
• CICD/DevOps (Git, Jira, Confluence, ServiceNow)
• AD Domain Services 2016/2020 (advanced replication/sites/GP/DC)

Certifications:

• AWS Solutions Architect or MS SC-300 preferred.

Minimum Qualifications:

• HS Diploma/GED + 4+ yrs cybersecurity/IT; 1+ yr each in AD/AWS, Quest/Semperis, Radiant Logic.

Preferred:

• Financial services IAM/security experience.
• Local to Dallas/McLean for hybrid.