Active Directory Consultant

BB31514

Denver, CO 80231

1 year +

Sr. Active Directory Consultant

The Infrastructure Access Management Team is part of the Identity and Access Management Solution Delivery team and performs assessments, design, implementation, remediation, and integration of end-to-end solutions for securing Kaiser Permanente infrastructure. A Senior Active Directory Engineer in the Infrastructure Access Management Team will provide expertise on all aspects of Active Directory engineering including: design, development, integration, migration, security and maintenance. This position requires knowledge of Active Directory architecture, design and infrastructure with specific knowledge in privilege access management, security, group policies, and user account life cycle.

Essential Functions:

Provide Design and Engineering support for Active Directory and Windows operating system security, particularly in the area of access management and privilege management
Review requirements for application integrations with Active Directory and design and implement security solutions.
Proposing and presenting Active Directory configuration changes and technology upgrade paths to IT management
Developing documentation, requirements, specs, test strategies and implementation plans
Providing technical assessments and recommendations for Active Directory
Scripting, coding and task automation for Active Directory and Windows provisioning and access management
Interface with team members and partners of varied levels from across the organization to ensure that business requirements are met without compromising security.
Ensures implementation of system access controls based upon client-IT Information Protection policies and standards
Responsible for enforcement of Systems Development Lifecycle and programming standards
Designs the integration and implementation of various technologies and systems architectures.
Performs second and third level problem determination and resolution.

Basic Qualifications:

Bachelor's degree in a related field and/or 4 years of equivalent work experience.
A minimum of 5 years Information Technology (IT) experience including development, implementation, communication, monitoring and maintenance of information security policies and procedures.
A minimum of 4 or more years of experience with Active Directory and Windows operating system Security and administration
Experience with Information Security and Identity and Access management
Fluency with Power Shell and VBScript for task automation
Ability to evaluate risk for varied types of projects and to adapt security controls to best mitigate the risk based upon the situation
Hands-on experience designing and building Active Directory solutions for a large-scale enterprise.

Preferred Qualifications:

Experience with Windows Privilege Management including any of the following Vendors/products: Beyond Trust, Avecto, AppSense, Viewfinity
Programming experience with Java and/or C#
Experience with Apple/Macintosh Security, authentication, access control
UNIX Security administration and Unix Shell Scripting or Perl Scripting
Certified Information Systems Security Professional (CISSP)
MCTS: Windows Server 2008 Active Directory, Configuration
Minimum number of years of experience required, 5 years

Top 3 - 5 Daily responsibilities

- Design and Engineering for Active Directory
- Developing documentation, designs and implementation plans for AD
- Providing technical assessments and recommendations for Active Directory
- Performing second and third level problem determination and resolution

Top 3 - 5 Required Skills

- Active Directory Design, Engineering, Implementation
- Information Security
- Identity and Access Management

Soft Skills

- Strong communication (verbal & written) skills
- Ability to work well will cross functional teams
- Self-starter, able to work independently

# of people supervised
- N/A

Size of the team
- 10

Stage of the project
- Ongoing/sustaining

Educational Requirement:
- Bachelor's degree in a related field and/or a minimum of 4 years of equivalent work experience

Will this Req convert to a FTE position?
- Maybe

If so, do you only want to see individuals eligible to convert to FTE status?
- No

Do you require a face to face interview, or will you hire from a phone interview
- Face to face preferred, but not required

Can the contractor work remotely or do they need to be onsite.
- They must be on site part time, remote part time

Does this position require a health screen?
- No