IAM Associate AD Engineer (hybrid)

Department: Information Security Office
Salary/Grade: ITS/78

Job Summary

The Active Directory Associate Engineer provides support for a complex environment(s). They provide knowledge, skillsets and subject matter expertise (SME) of Microsoft AD Architecture, infrastructure and identity integrations with various technologies and services.

In this role, you will apply your knowledge and skillsets to provide support, consultation, testing, documentation and implementation for Microsoft Active Directory, Cayosoft, Azure AD, Unity Sync and Windows based systems. That will include configuration/implementation of new functionality, versioning, modify existing set ups, and provide Tier 3 support for trouble shooting various issues or incidents. You will also provide an array of consultative information, guidance and/or assistance to various groups within NUIT as well as NU schools and units.

As an AD Associate Engineer you will need to have acquired experience 1-3 years hands on with Active Directory Server (ADS), Azure AD and other Microsoft and Identity products. You will assist with strategic planning and will work to ensure that IAM systems/solutions are both resilient and adaptive to an evolving Identity landscape. The IAM AD Engineer works on IAM projects within the MS team and provides guidance to other staff, as well as ensures compliance with all security associated NU. Works closely with stakeholders throughout Northwestern to implement IAM best practices and controls.

Specific Responsibilities:

Strategic Planning

• Contribute to Risk Assessment and IAM Evaluations
• Contribute to yearly and roadmap planning of the IAM portfolio.
• Participate in support processes and systems around vulnerability assessments, security risks and help with IAM changes to move to best practices.

Administration

• Act as IAM point-of-contact for MS team products and back up as necessary.
• Serve as Tier 3 support and an escalation point for domain technology issues that cannot be solved by Tier 1 and Tier 2 support. Perform/Own root cause analysis, problem management, documentation and communication for Identity Environment(s).
• Perform daily system monitoring, verifying the integrity and availability of all hardware, server resources, system and key processes, reviewing system logs and verifying completion of scheduled tasks/jobs.
• Create and maintain system documentation for domain technologies, including installation, configuration, and appropriate trouble shooting steps.
• Monitor systems and services for conformity to existing policies, standards, and guidelines

Engineer

• Ability to make AD configuration changes, schema extensions/modifications, set up or modify GPO's, OU's, trusts, etc.
• Implement solutions for Active Directory infrastructure for efficiency and continuous improvement opportunities as directed by lead.
• Ability to learn to create powershell scripts, read code, utilize Git for versioning and use an orchestration tool like (Cloudbees, Rundeck or other) for automation.
• Participate in projects in the design, development, testing, and implementation of technical solutions which advance strategic initiatives in IAM.
• Implement recommendations for assigned projects, in consultation with project team(s) and/or other NUIT staff
• Draft and review documentation such as analyses of technical, administrative, or procedural issues; procedural documentation/playbooks; and team documentation

Performance

• Collaborate with other Identity staff or NUIT staff as needed for incident remediation or incident investigations
• Provides troubleshooting and investigation assistance to MS Team regarding potential or actual Identity incidents.
• Develop IAM MS team expertise through university-provided and external training/seminars/courses; staying abreast of industry trends, methods, and published literature; and participating in professional development programs/initiatives and approved by information security management.

Miscellaneous

• Other duties as assigned.

Minimum Qualifications: (Education, experience, and any other certifications or clearances)

• Successful completion of a full 4-year course of study in an accredited college or university leading to a bachelor's or higher degree in a major such as computer science, information technology, or related; OR appropriate combination of education and experience.
• Knowledge of MS Active Directory services. (Windows Server on premise or Azure AD).
• Ability to learn installing, configuring, upgrading, AD configuration changes, schema extensions/modifications, set up GPO's, OU's, trusts, etc.
• Ability to learn scripting in Powershelll and the ability to read code, utilize Git and automate activities.
• Ability to learn AD reports and usage of splunk.
• Ability to learn problem resolution/ Tier 3 troubleshooting, on call and incident response.
• Ability to learn to monitor and performance tune Windows operating systems including - connectivity, synchronization, replication, netlogon, time services, schema, database partitions, DNS settings, SRV records, certificate authorities and trust relationships.
• Ability to learn and support IAM on premise systems, SAAS and Cloud based solutions.
• active directory design, administration
• identity management/provisioning
• information security
• Microsoft Office (Word, Excel, Powerpoint, Access, Outlook)
• Microsoft SharePoint
• Microsoft PowerShell
• Shell Scripting
• Puppet/Chef/Ansible
• Server hardware
• Windows Operating System
• Quest tools
• Microsoft (MCSE, MCSD, MCSA)
• critical thinking
• Debugging
• judgment
• problem solving
• read & interpret architectural drawings
• Troubleshooting
• Technical documentation
• collaboration and teamwork
• functional documentation
• organizational skills
• planning
• workflow development & documentation

Minimum Competencies: (Skills, knowledge, and abilities.)

• Successful completion of a full 4 year course of study in an accredited college or university leading to a bachelor's or higher degree in a major such as computer science, information technology, or related; OR appropriate combination of education and experience
• Strong oral and written communications skills.
• Excellent interpersonal skills to interact with customers, team members, and senior leaders (verbal and written)

Preferred Qualifications: (Education and experience)

• Bachelor's degree in a computer science or related field
• Experience in a higher education environment
• Knowledge of system administration - basic AD server platform knowledge.
• Knowledge and Experience with : IT Operations and help desk tickets and troubleshoot issues.
• Desire to learn industry skillsets and certifications.
• Analytical skills with ability to relate to technical and non-technical personnel.

Preferred Competencies: (Skills, knowledge, and abilities)

• Knowledge of Cloud environments (AWS, Azure, GCP) with relation to Identity

Target hiring range for this position will be between $72,339-$78,000 per year or per hour. Offered salary will be determined by the applicant's education, experience, knowledge, skills and abilities, as well as internal equity and alignment with market data.

Benefits:
At Northwestern, we are proud to provide meaningful, competitive, high-quality health care plans, retirement benefits, tuition discounts and more! Visit us at https://www.northwestern.edu/hr/benefits/index.html to learn more.

Work-Life and Wellness:
Northwestern offers comprehensive programs and services to help you and your family navigate life's challenges and opportunities and adopt and maintain healthy lifestyles.
We support flexible work arrangements where possible and programs to help you locate and pay for quality, affordable childcare and senior/adult care. Visit us at https://www.northwestern.edu/hr/benefits/work-life/index.html to learn more.

Professional Growth & Development:
Northwestern supports employee career development in all circumstances whether your workspace is on campus or at home. If you're interested in developing your professional potential or continuing your formal education, we offer a variety of tools and resources. Visit us at https://www.northwestern.edu/hr/learning/index.html to learn more.

Northwestern strongly recommends COVID-19 vaccinations and boosters for people who can obtain them as a critical tool for minimizing severe illness. More information can be found on the COVID-19 and Campus Updates webpage.

The Northwestern campus sits on the traditional homelands of the people of the Council of Three Fires, the Ojibwe, Potawatomi, and Odawa as well as the Menominee, Miami and Ho-Chunk nations. We acknowledge and honor the original people of the land upon which Northwestern University stands, and the Native people who remain on this land today.

Northwestern University is an Equal Opportunity, Affirmative Action Employer of all protected classes, including veterans and individuals with disabilities. Women, racial and ethnic minorities, individuals with disabilities, and veterans are encouraged to apply. Click for information on EEO is the Law.