Deloitte Innovation Hub I Cyber Security I Active Directory Security - IAM Senior Engineer, Cairo, Egypt.

Innovation Hub I Cyber Security I Active Directory Security - IAM Senior Engineer, Cairo, Egypt.

Deloitte, established globally in 1845, is the world’s largest and leading professional services firm, providing audit and assurance, tax, consulting, financial advisory, and risk advisory services to public and private clients spanning multiple industries. We are present in more than 150 countries, and as the world's largest management consulting business, Deloitte is distinct in its ability to help clients solve their most complex problems, from strategy to implementation.

Deloitte innovation hub (DIH) is a strategic initiative/priority established by Deloitte North & South Europe (NSE) to support our ambition to become the leading business transformation partner of choice for our clients and to expand and scale our delivery footprint across EMEA. With access to a scaled, diverse, highly skilled, motivated, and engaged workforce, DIH is delivering complex technical solutions for clients’ most complex business problems, across Portfolios that include ‘Strategy & Transactions’, ‘Customer’, ‘Engineering, AI & Data, ‘Enterprise, Technology & Performance’ and ‘Cyber’. DIH is aiming to become the destination for top talents in Egypt for a long, exciting career.

We invest in outstanding people of diverse talents and backgrounds and empower them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Our organization has grown in scale and diversity, providing services across the region, with our shared culture remaining the same. We aim to help clients realize their ambitions, make a positive difference in society, and maximize the success of our people. This drive fuels the commitment and humanity that run deep through our every action.

Connect to your career at Deloitte

Deloitte drives progress. Using our vast range of expertise, that covers audit, risk advisory, and consulting services across tax, legal, business, technology and corporate finance, we help our clients become leaders wherever they choose to compete. To do this, we invest in outstanding people. We build teams of future thinkers, with diverse talents and backgrounds, and empower them all to reach for and achieve more.

What brings us all together at Deloitte? It’s how we approach the thousands of decisions we make every day. How we behave, our beliefs and our attitudes. In other words: our values. Whatever we do, wherever we are in the world, we lead the way, serve with integrity, take care of each other, foster inclusion, and collaborate for measurable impact. These five shared values lead every decision we make and action we take, guiding us to deliver impact how and where it matters most.

Connect to your opportunity

We are seeking Active Directory security engineers and architects. The candidate will have a strong background in Active Directory architecture and engineering, with the ability to design, configure and troubleshoot Active Directory. The ideal candidate will be adept at working across on-premise, hybrid and legacy environments, navigating complex architectural and technical constraints. This role will involve working closely with cross-functional teams to ensure effective Active Directory remediation/hardening across a complex environment that integrates with other systems and applications. As part of this role, you will be expected to:

• Define Active Directory architectural principles and security best practices, considering functional, non-functional, and technical specifications, e.g. privileged management, access control, authentication, and hardening.

• Due diligence / data gathering Conducting a comprehensive assessment of the client’s Active Directory environment to identify potential risks and vulnerabilities (e.g., use of insecure legacy authentication protocols, misconfigurations, non-managed privileged accounts etc.), whilst minimizing business disruption. Using the AD console and other relevant tools to analyze Active Directory and conduct remediation activity that accurately addresses known and unknown vulnerabilities in a complex environment.

• Implement properly designed and tested security remediations for Active Directory:
• Deliver hands-on engineering, architectural, and remediation work for the client.
• Define the security specifications to support the hardening of Active Directory
• Work with IT teams (e.g., Windows, Cloud, Networks) to ensure pre-requisites and dependencies are defined and adhered to
• Integrate Active Directory remediation activity with existing enterprise applications/systems such as Linux, cloud applications, and third-party identity providers. For example, you will consider the impact of any configuration changes in Active Directory onto dependent systems, services, and applications. The client has business critical systems hosted on Linux that authenticate and integrate with an Active Directory domain.

• Execute testing and troubleshooting (e.g., authentication failures, replication failures, directory and schema issues etc.)
• Deliver services post-implementation, from hyper-care support, resolving additional issues in production through advanced troubleshooting and debugging to ensure smooth operation of Active Directory
• Conduct knowledge transfer to client IAM teams through technical training sessions on operating and maintaining the solution, empowering clients to effectively manage and support the IAM environment

Connect to your skills and professional experience

To succeed in this role, you will need the following:

• Experience — 4 years to 9 years of hands-on experience in the Active Directory domain.
• Bachelor’s degree in information technology, Cybersecurity, computer science or a related field.
• Solid understanding of core Active Directory concepts; domains, forests, trusts, sites, replication, OUs, to name a few.
• Strong experience in design and architecture, configuration, maintenance, remediation, and migration of Active Directory.
• Hands-on experience with Group Policy management, authentication protocols (Kerberos and NTLM), LDAP, DNS and DHCP. Understanding of network architecture and networking principles.
• Technical skills including data analysis and scripting (PowerShell and SQL).
• Experience in carrying out advanced integration with the IAM solution, and developing, configuring, using out of the box and custom connectors to onboard applications (e.g., AD, LDAP, Exchange etc).
• Understanding of the software development life cycle processes.
• Industry expertise of financial services clients and their unique sector challenges (the criticality of systems, regulatory challenges, legacy applications that are difficult to remediate, etc). Confidence navigating change management processes in a financial services context.