security systems engineer

Leisure

ELV Engineer with strong technical knowledge and hands-on experience in ELV systems, standards, and government authority coordination. The candidate will be responsible for ensuring compliance, system performance, and coordination with contractors and authorities. Operates and Manages all ELV systems in all Parks and BOH, manages AMC and non-AMC Contractors.Key Responsibilities<ul><li>High level of knowledge of industry standards, international guidelines (like NFPA, ISO, BS) and local government guidelines (such as QCS) and best practices. Should have high level of knowledge of Qatar Civil Defense and Ministry of Interior &ndash; SSD regulations in relation with Fire Alarms, Fire Fighting, CCTV systems</li><li>Experience in Fire Alarm, CCTV system, Security Systems, Lighting Control Systems, Turnstiles / E-gates, BMS, FM200 suppression systems, etc. Well versed in installation / integration / maintenance / Testing and Commissioning.</li><li>Ensures all AMC Contractors have a valid PTW and work safely in the parks</li><li>All PPM and CM tasks shall be recorded in CMMS and actioned in a timely manner</li><li>Prepares for MOI and QCD inspections, ensures that system health, documentation and other prerequisites are proper and in place, attends inspections along with all necessary AMC specialists</li></ul>Qualifications &amp; Experience<ul><li>Degree or Diploma in Electrical / Electronics / ELV Engineering or related field.</li><li>Minimum of 3-5 year of experience in the same field</li><li>NFPA 72, 101 standards, ELV system design knowledge</li><li>Able to manage different tasks from different design briefs at the same time</li><li>Technical ability and knowledge of computer software and hardware</li><li>Proven experience in ELV systems.</li><li>Strong coordination and documentation skills.</li><li>Ability to work independently and manage multiple stakeholders.</li></ul>Preferred Skills<ul><li>Experience working with government authorities.</li><li>Familiarity with CMMS platforms.</li><li>Strong communication and problem-solving skills.</li></ul>Application Question(s):<ul><li>Mention your current salary and expected salary</li><li>Mention your notice period and expected date of join</li></ul>Education:<ul><li>Diploma (Required)</li></ul>Experience:<ul><li>ELV Engineer: 3 years (Required)</li></ul>Work Location: In person

ELV Engineer

CyberKnight

<div>
 
 We are looking to hire an Associate Cybersecurity Engineer to join our growing team in Riyadh. If you are passionate about cyber security and eager to build a strong career in the cyber security domain, we want to hear from you.
 
 
 
 
 
 
 Key Responsibilities:
 
 
 
 - Conduct presentations, demonstrations and proof of concepts of cybersecurity solutions.
 
 
 - Assist in implementation, deployment, administration, configuration and support of cybersecurity solutions.
 
 
 - Responding to RFPs and preparing technical documentation.
 
 
 
 
 
 
 Requirements:
 
 
 
 -
 
 
 Important
 
 
 : Valid Saudi Council of Engineers membership (Must have an active membership in the Saudi Council of Engineers,
 
 please attach your Saudi Council of Engineers Certificate along with your CV/Resume
 
 )
 
 
 - Experience: 0&ndash;2 years (Fresh Graduates are welcome to apply)
 
 
 - Ability to communicate effectively in both English and Arabic (fluency in both languages is a plus, but not required).
 
 
 - Graduated with an Engineering degree or similar qualifications (e.g., Cybersecurity, Computer Science, Software Engineering, IT, etc.).
 
 
 - Solid knowledge of the basics/fundamentals of Network, Operating Systems &amp; Cybersecurity
 
 
 - Good analytical, problem-solving, and communication skills
 
 
 - Ability to work collaboratively within a technical team
 
 
 
</div>

Associate Cybersecurity Engineer (Saudi National)

Intelligent Technical Solutions

<div>Job Description

We are seeking a CMMC Security Engineer to design and build compliant Azure and Microsoft 365 environments for our CMMC consulting clients. This is a hands-on technical role. You will provision GCC and GCC High tenants, architect network security (Azure Firewall, VPN, NSGs), configure Entra ID with Conditional Access and Privileged Identity Management, deploy Intune for endpoint management, stand up Microsoft Sentinel for SIEM/SOAR, configure Purview for data protection, and deploy Defender for Endpoint across client environments. You will work from documented SOPs and a Control-Task Tracker that maps each NIST 800-171 control to specific Azure/M365 configurations. You will also capture technical evidence (screenshots, configuration exports, audit logs) to support the compliance documentation created by our GRC Consultants.

Job Responsibilities
<ul>
<li>Design and deploy CMMC-compliant enclave architectures in Azure: cloud-only (GCC/GCC High), hybrid (on-prem + GCC), and on-premises environments. Select and implement the appropriate topology (hub-spoke, segmented) based on client requirements.</li>
<li>Provision and configure Microsoft 365 GCC and GCC High tenants including initial setup, domain verification, licensing assignment, and tenant hardening.</li>
<li>Configure Microsoft Entra ID: user provisioning, Security Groups, Administrative Units, Conditional Access policies (MFA, device compliance, location-based, session controls), Privileged Identity Management (PIM), and Identity Protection risk policies.</li>
<li>Deploy and configure Microsoft Intune: device enrollment, compliance policies, configuration profiles, security baselines (CIS/STIG), BitLocker encryption with FIPS 140-2 compliance, Windows Update for Business rings, and application management via Company Portal.</li>
<li>Deploy and configure Microsoft Sentinel: Log Analytics workspace setup, data connector deployment (M365, Entra ID, Defender, Azure Activity, Firewall, NSG flow logs), KQL-based analytics rules, automation playbooks (Logic Apps), and CMMC compliance workbooks/dashboards.</li>
<li>Deploy and configure Microsoft Defender for Endpoint: device onboarding, antivirus policies, Attack Surface Reduction (ASR) rules, endpoint DLP, network protection, web content filtering, and vulnerability management.</li>
<li>Configure Microsoft Purview: sensitivity labels (CUI, FCI, Public), auto-labeling policies, DLP policies across Exchange, SharePoint, Teams, and endpoints, and information barriers where required.</li>
<li>Design and implement Azure networking: Virtual Networks, subnets, NSGs, Azure Firewall, Azure Bastion, VPN Gateway (site-to-site and point-to-site), Private Endpoints, route tables, and DDoS Protection.</li>
<li>For hybrid environments: configure Azure AD Connect (or Cloud Sync), hybrid device join, pass-through authentication or password hash sync, split DNS, and Azure Arc for on-premises server management.</li>
<li>Configure encryption across the environment: BitLocker (XTS-AES 256), FIPS 140-2 compliance mode, TLS 1.2+ enforcement, VPN encryption (IKEv2/AES-256), and Purview encryption for CUI-labeled content.</li>
<li>Execute remediation tasks from the CMMC Remediation Tracker as assigned by the GRC Consultant. Each task maps a specific NIST 800-171 control objective to an Azure/M365 configuration with step-by-step instructions.</li>
<li>Capture and organize technical evidence for each implemented control: configuration screenshots, policy exports (JSON), audit log samples, compliance reports, and test results.</li>
<li>Support incident response capability deployment: Sentinel playbook creation, automated notification workflows, and incident response procedure testing.</li>
<li>Perform client environment migrations to GCC/GCC High (tenant-to-tenant migration using BitTitan, ShareGate, or native Microsoft tools).</li>
<li>Work across 4-7 concurrent client environments at various stages of build and remediation.</li>
</ul>
Job Qualifications 
Required Technical Experience
<ul>
<li>Willing to work in a hybrid setup&mdash;remotely or on-site at client locations, as required.</li>
<li>3+ years hands-on experience administering Microsoft Azure and M365 environments in a professional capacity (not lab-only).</li>
<li>Direct experience configuring Conditional Access policies, Entra ID PIM, and identity architecture (cloud-only and hybrid with Azure AD Connect).</li>
<li>Direct experience deploying and managing Microsoft Intune for endpoint compliance, configuration profiles, security baselines, and BitLocker management.</li>
<li>Direct experience deploying Microsoft Sentinel including data connectors, KQL query writing, analytics rules, and automation playbooks.</li>
<li>Experience configuring Azure networking: VNets, NSGs, Azure Firewall or third-party NVA, VPN Gateway, and network security architecture.</li>
<li>Experience deploying Microsoft Defender for Endpoint including device onboarding, ASR rules, and vulnerability management.</li>
<li>Proficiency with PowerShell and Microsoft Graph API for automation and bulk configuration tasks.</li>
<li>Understanding of NIST SP 800-171 controls and how they map to specific Azure/M365 technical implementations.</li>
</ul>
Strongly Preferred Technical Experience
<ul>
<li>Experience with Microsoft 365 GCC or GCC High environments (tenant provisioning, licensing nuances, feature differences from commercial M365).</li>
<li>Experience with tenant-to-tenant migrations (commercial to GCC/GCC High) using BitTitan MigrationWiz, ShareGate, or native Microsoft tools.</li>
<li>Experience configuring Microsoft Purview: sensitivity labels, auto-labeling, DLP policies across Exchange, SharePoint, Teams, and endpoints.</li>
<li>Experience with FIPS 140-2 configuration and DISA STIG or CIS benchmark implementation via Intune or GPO.</li>
<li>Experience supporting defense industrial base (DIB) or federal contractor IT environments.</li>
<li>Experience with Azure Arc for hybrid server management and Azure Bastion for secure remote administration.</li>
</ul>
Required Certifications

(must hold at least two from this list):
<ul>
<li>Microsoft Certified: Azure Solutions Architect Expert (AZ-305) - Architecture design and decision-making.</li>
<li>Microsoft Certified: Azure Administrator Associate (AZ-104) - Core Azure resource management.</li>
<li>Microsoft Certified: Security Operations Analyst Associate (SC-200) - Sentinel, Defender, and security operations.</li>
<li>Microsoft Certified: Identity and Access Administrator Associate (SC-300) - Entra ID, Conditional Access, PIM.</li>
<li>Microsoft Certified: Information Protection and Compliance Administrator (SC-400) - Purview, DLP, sensitivity labels.</li>
<li>Microsoft Certified: Endpoint Administrator Associate (MD-102) - Intune and device management.</li>
</ul>
Preferred Certifications

(significant advantage):
<ul>
<li>CompTIA Security+ (SY0-701)</li>
<li>CMMC Registered Practitioner (RP) - Understanding of CMMC framework from technical perspective.</li>
<li>Microsoft Certified: Cybersecurity Architect Expert (SC-100)</li>
<li>Microsoft 365 Certified: Administrator Expert (MS-102)</li>
<li>Certified Information Systems Security Professional (CISSP)</li>
<li>GIAC certifications (GSEC, GCIA, GCIH) - Deep security operations knowledge.</li>
</ul>
Skills &amp; Competencies
<ul>
<li>Execution-focused: ability to follow SOPs and runbooks precisely while identifying when something does not match documented steps and escalating appropriately.</li>
<li>Multi-tenant management: comfortable switching between 4-7 different client Azure/M365 environments daily without cross-contaminating configurations.</li>
<li>Documentation discipline: every configuration change is documented, every evidence artifact is captured, every deviation from the SOP is noted.</li>
<li>Troubleshooting: when Conditional Access blocks legitimate users, when Sentinel data connectors go unhealthy, or when WDAC blocks a required application, you can diagnose and resolve without waiting for escalation.</li>
<li>Security mindset: you understand why least privilege matters, why default-deny is the correct network posture, and why FIPS-validated encryption is required for CUI.</li>
<li>Clear written communication: when you find something in the client environment that does not match what the GRC Consultant scoped, you can document it clearly so the team can make decisions.</li>
</ul>
Compensation

 Pay rate ranges from $120,000.00/annum up to $170,000.00/annum and may vary by experience and location.

Benefits
<ul>
<li>Medical Insurance Plan</li>
<li>Dental &amp; Vision</li>
<li>Life Insurance</li>
<li>Disability Coverage</li>
<li>Paid Time Off (starts at 15 days per year)</li>
<li>Maternity/Paternity Leave</li>
<li>Paid US Holiday</li>
<li>Retirement Plan</li>
<li>Salary Advancement/Loan</li>
<li>Health &amp; Wellness Program</li>
<li>Company-paid training and certification</li>
<li>Supplemental Life Insurance (Employee-paid)</li>
<li>Supplemental Health Plans (Employee-paid)</li></ul></div>

CMMC Security Engineer (US Hybrid)

Prime Gate

<div>Job summary
 
 
Responsible for designing, implementing, and maintaining the organization&rsquo;s cybersecurity infrastructure and controls to protect information assets, systems, and networks from cyber threats. This role delivers proactive threat detection, incident response, vulnerability management, and security compliance aligned with NCA ECC/CCC frameworks and Saudi regulatory requirements, ensuring a resilient and secure operational environment. 
 
Key responsibility : 
<ul><li>Security Infrastructure Management: Deploy, configure, and maintain security solutions including firewalls, IDS/IPS, SIEM, WAF, EDR, DLP, and endpoint protection platforms to safeguard organizational assets
</li><li>Threat Monitoring &amp; Incident Response: Continuously monitor security events and alerts; investigate and respond to security incidents following documented incident response procedures; perform root cause analysis and implement corrective actions</li><li>Vulnerability Management: Conduct regular vulnerability assessments and penetration tests on systems, networks, and applications; prioritize and track remediation activities to minimize organizational risk
</li><li>Security Policy &amp; Compliance: Develop, maintain, and enforce security policies, standards, and procedures; ensure alignment with NCA ECC, CCC, OTCC, PDPL, and other applicable regulatory frameworks
</li><li>Cloud Security: Implement and monitor cloud security controls including CSPM, CWPP, and identity management across cloud platforms; ensure cloud workloads meet security baseline requirements</li></ul> 

Qualification &amp; Experience:
 
Identity &amp; Access Management: Administer IAM solutions including RBAC, PAM, MFA, and SSO; enforce least-privilege access principles across systems and applications 
 
<ul><li>Security Awareness &amp; Training: Conduct security awareness training and phishing simulation campaigns to promote a security-conscious culture across the organization</li></ul> 
<ul><li>Bachelor&rsquo;s degree in computer science, Cybersecurity, Information Technology, Computer Engineering, or a related technical field</li><li>At least one professional cybersecurity certification is required, such as CompTIA Security+, CEH (Certified Ethical Hacker), or equivalent
</li><li>Advanced certifications (CISSP, CISM, CISA, GIAC, or equivalent) are highly desirable
</li><li>NCA-aligned training or certifications are a significant advantage</li><li>Minimum 3 years of hands-on experience in cybersecurity engineering, information security, or a related IT security role
</li><li>Proven experience operating and managing security tools such as SIEM, firewalls, IDS/IPS, EDR, and WAF</li><li>Experience implementing security controls aligned with NCA ECC/CCC or equivalent frameworks (ISO 27001, NIST CSF)
</li><li>Exposure to cloud security concepts and securing workloads on major cloud platforms (AWS, Azure, GCP, or Alibaba Cloud</li></ul></div>

Cybersecurity Engineer

AECOM

<div>Company Description 
Work with Us. Change the World.
At AECOM, we're delivering a better world. Whether improving your commute, keeping the lights on, providing access to clean water, or transforming skylines, our work helps people and communities thrive. We are the world's trusted infrastructure consulting firm, partnering with clients to solve the world&rsquo;s most complex challenges and build legacies for future generations.
There has never been a better time to be at AECOM. With accelerating infrastructure investment worldwide, our services are in great demand. We invite you to bring your bold ideas and big dreams and become part of a global team of over 50,000 planners, designers, engineers, scientists, digital innovators, program and construction managers and other professionals delivering projects that create a positive and tangible impact around the world.
We're one global team driven by our common purpose to deliver a better world. Join us. 
Job Description 
AECOM is seeking a seasoned Cyber-Physical System (CPS) Security &amp; Resiliency growth leader to establish and grow our Cyber-Physical System Security &amp; Resiliency team. This role builds the firm&rsquo;s capability to help clients strengthen and modernize cyber-physical environments through integrated security, risk, and resilience strategies.
While governance and risk may intersect with information technology (IT), this role is not IT-centric. The focus is on the safety, security, and resilience of cyber-physical systems across CPS/OT environments (e.g., industrial control systems (ICS), supervisory control and data acquisition (SCADA), OT) and digitally enabled CPS/IT systems.
Role Primary Objectives:<ul><li>
Establish the CPS Security &amp; Resilience Team as a source of top and bottom-line growth within the Energy Practice.
</li><li>Strengthen client confidence and executive trust in AECOM&rsquo;s ability to manage modern infrastructure risk.</li><li>
Establish a repeatable, scalable CPS capability that integrates with existing AECOM services.</li><li>
Position AECOM as a trusted consultant on the convergence of infrastructure, automation, AI, and physical consequence.</li><li>
Establish governance, risk, and resilience models for the integration of AI and advanced analytics into CPS/OT and CPS/IT environments, with explicit focus on physical consequence, system safety, and operational continuity.</li></ul>
Responsibilities:
Cyber-Physical Systems (CPS) Security &amp; Resilience Strategic Growth and Market Engagement<ul><li>
Establish the CPS Security &amp; Resilience practice for the Power sector</li><li>
Develop and execute go-to-market, recruitment, and top- and bottom-line growth strategies for the CPS Security &amp; Resiliency workstream</li><li>
Support strategic pursuits and key accounts from the cyber-physical resiliency lens, where CPS risk influences project outcomes or client confidence.</li><li>
Engage client executives, boards, and regulators on system-level risk, resilience, and governance.</li><li>
Act as a strategic partner to leadership on infrastructure resilience, reliability, and operational risk</li><li>
Advise clients on cyber-physical risk and resiliency implications of AI-enabled grid modernization, automation, DER integration, advanced protection schemes, and digitally enabled control environments</li><li>
Oversee and guide the development of reusable tools, templates, frameworks, and best practices for CPS Security &amp; Resiliency</li></ul>
Advisory &amp; Enterprise Alignment<ul><li>
Partner closely with Advisory leadership to align CPS services with broader operational, digital, and risk advisory offerings</li><li>
Coordinate with existing IT, OT, and cyber resources across AECOM to avoid duplication and fragmentation</li></ul>
Client Engagement, Delivery, and Practice Growth<ul><li>
Work closely with senior leadership to shape AECOM&rsquo;s CPS Security &amp; Resilience offerings and expand market presence</li><li>
Lead project workstreams while teaching and mentoring junior staff</li><li>
Support capture and proposal activities, including developing scopes of work, methodologies, and strategic content</li><li>
Build and maintain strong client relationships to identify new opportunities and ensure successful delivery</li><li>
Serve as a bridge between technical specialists and executive-level client discussions</li></ul>
Cyber-Physical Systems (CPS) Security &amp; Resilience Practice Elements:<ul><li>
Lead OT engagements related to cyber-physical systems</li><li>
Lead client engagements addressing AI-enabled CPS risk, resilience, and governance across CPS/OT and CPS/IT environments, including model risk, autonomy, decision authority, and failure propagation into physical systems</li><li>
Lead cybersecurity assessments, vulnerability analyses, and program reviews to help clients identify risks and prioritize improvements</li><li>
Conduct maturity assessments, risk evaluations, gap analyses, and policy reviews to help clients define long-term CPS/OT and CPS/IT strategies</li><li>
Develop OT governance models, operational frameworks, and investment plans that guide clients through modernization and lifecycle planning</li><li>
Facilitate workshops, interviews, and stakeholder meetings to gather requirements and translate them into strategic recommendations</li><li>
Embed CPS risk considerations into pursuits, delivery models, and client engagements</li><li>
Develop OT and ICS cybersecurity programs aligned with frameworks such as NIST CSF, NERC CIP, and IEC 62443</li><li>
Prepare guidance for OT security controls, monitoring approaches, segmentation strategies, governance, and compliance</li></ul>
CPS Security &amp; Resilience Leadership<ul><li>
Provide industry leadership and guidance on CPS/OT and CPS/IT security &amp; resiliency, promoting alignment with enterprise risk management, regulatory expectations, and delivery realities</li><li>
Advise clients on CPS architecture concepts, technology options, integration considerations, and migration strategies</li><li>
Oversee and guide master planning for CPS, including AI-enabled CPS, grid modernization, SCADA and EMS/DMS evolution, advanced automation, digital substations, and next-generation OT and CPS/IT architectures</li><li>
Evaluate operational risks and recommend solutions that improve resiliency, reliability, and worker safety in CPS/OT environments</li></ul> 

Qualifications 
Minimum Requirements<ul><li>
BS degree in Engineering, Computer Science, Information Systems, Cybersecurity, or a related field and 10 years of related experience</li><li>
Minimum of 10 years of business leadership experience in cyber-physical systems, OT/ICS, infrastructure security, or resilience.</li><li>
Minimum of 10 years of experience delivering advisory services (strategy, governance, road mapping, program development, compliance) into cyber-physical system OT, ICS, and SCADA environments.</li><li>
Minimum years of OT or ICS experience in consulting, engineering, or cyber-physical environments.</li><li>
Proven track record of growth, building, and scaling capabilities inside large engineering (AEC), EPC, or infrastructure organizations.</li><li>
Proven ability to translate risk into executive-level decision frameworks and business outcomes.</li><li>
Experience working across matrixed organizations with multiple business lines and stakeholders.</li><li>
Advanced knowledge of relevant CPS, OT, and cyber risk frameworks and regulatory constructs applicable to cyber-physical systems within critical infrastructure environments.</li><li>
Strong communication skills with experience developing client-facing reports, strategies, roadmaps, and presentations.</li><li>
Deep understanding of Power sector systems and the operational realities of infrastructure delivery.</li></ul>
Preferred Qualifications<ul><li>
Master of Business Administration (MBA) preferred</li><li>
15 years of OT or ICS experience in consulting, engineering, or cyber-physical environments.</li><li>
Cyber-physical training or certifications are preferred, e.g. &ndash;<ul><li>
C|CISO, GICSP, CISSP</li><li>
Consequence-focused training for Physical &amp; Digital Infrastructure, e.g. Consequence-Driven, Cyber-Informed Engineering (CCE ACCELERATE)</li><li>
AI-governance and/or AI-risk related training</li></ul></li><li>
15 years of P&amp;L ownership experience</li><li>
Previous experience developing CPS service offerings</li><li>
Previous experience developing and managing CPS-related managed services</li><li>
Industry voices and distinction preferred, e.g. &ndash;<ul><li>
Previously published in industry journals.</li><li>
Previous conference speaking engagements.</li><li>
Participated in various media such as TV, radio, podcasts, and webinars.</li></ul></li></ul> 

Additional Information 
This position does not offer sponsorship now or in the future.
This position does not offer relocation assistance.<div></div>
About AECOM
AECOM is proud to offer comprehensive benefits to meet the diverse needs of our employees. Depending on your employment status, AECOM benefits may include medical, dental, vision, life, AD&amp;D, disability benefits, paid time off, leaves of absences, voluntary benefits, perks, flexible work options, well-being resources, employee assistance program, business travel insurance, service recognition awards, retirement savings plan, and employee stock purchase plan.
AECOM is the global infrastructure leader, committed to delivering a better world. As a trusted professional services firm powered by deep technical abilities, we solve our clients&rsquo; complex challenges in water, environment, energy, transportation and buildings. Our teams partner with public- and private-sector clients to create innovative, sustainable and resilient solutions throughout the project lifecycle &ndash; from advisory, planning, design and engineering to program and construction management. AECOM is a Fortune 500 firm that had revenue of $16.1 billion in fiscal year 2025. Learn more at aecom.com.
What makes AECOM a great place to work
You will be part of a global team that champions your growth and career ambitions. Work on groundbreaking projects - both in your local community and on a global scale - that are transforming our industry and shaping the future. With cutting-edge technology and a network of experts, you&rsquo;ll have the resources to make a real impact. Our award-winning training and development programs are designed to expand your technical expertise and leadership skills, helping you build the career you&rsquo;ve always envisioned. Here, you&rsquo;ll find a welcoming workplace built on respect, collaboration and community&mdash;where you have the freedom to grow in a world of opportunity.
As an Equal Opportunity Employer, we believe in your potential and are here to help you achieve it. All your information will be kept confidential according to EEO guidelines.</div>

AVP, Team Lead, Cyber-Physical Systems (CPS) Security & Resiliency (Power Sector)

NTT DATA

Req ID: 366994
 
NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.
 
We are currently seeking a Active Directory/Azure AD Senior Identity Access Management (IAM) Architect - to join our team in Plano, Texas (US-TX), United States (US).
 
Systems Eng. Sr. Specialist Advisor– Active Directory/Entra ID
 
Role Overview
 
The NTT DATA Services Security organization is looking for talented security-oriented Systems SR. Engineering with strong Active Directory, DNS, DHCP, GPO, ADFS/Entra ID, MFA, SSO and related Identity skills. This role will be part of a larger dedicated security team dedicated to supporting, troubleshooting, upgrading Active Directory, Entra ID and related Identity technologies.
 
Role Responsibilities: 
<ul>
<li>Active Directory designing, Architecture Solutions, Integration with platforms Applications</li>
<li>Develop an architecture of directory solutions for Windows, Unix, and related platforms</li>
<li>Experience in consolidations of multiple forest and domains and demonstrated understanding on User accounts, machine accounts, GPOs</li>
<li>Understand the requirement and create a migration plan for any services i.e. DNS, DHCP, and Certificate Services (PKI) etc.</li>
<li>Analyzing the requirement and design a solution to fulfil the requirement with zero impact to other platforms</li>
<li>Develop a power shell scripting with AD modules or VB .Net based on the requirements</li>
<li>Manage Azure active directory design, Architect Solutions, Integration with platforms Applications and AD connector to Entra</li>
<li>Auditing the security logs and integrating with SIEM</li>
<li>Conducting POC with multiple vendors for AD solutions and prepare detailed test cases. Create a clear recommendation document with pros and cons for senior management</li>
<li>Vulnerability Assessment and Management related to Active Directory, DNS Windows platforms</li>
<li>Active Directory consolidations including application integration working with application teams</li>
<li>Recommend security best practices to achieve stated business objectives, advises on risk assumptions for any variances granted, and provides alternatives to achieve desired end results</li>
</ul>
Required Qualifications: 
<ul>
<li>Minimum 8 years relevant experience in Architecture and designing, solutions Migrating Active Directory, Entra ID ,Windows End points</li>
<li>Strong Demonstrated experience with Active Directory migration tool or equivalent and consolidation of Global Forest and Domains. Hands on experience in successful consolidation of AD Forests and Domains</li>
<li>Must have strong hands-on experience working on Entra ID (Azure Active Directory)</li>
<li>Extensive Experience working as Entra IDmin for enterprise Active Directory setup and maintenance</li>
<li>Strong experience in AD Trusts, two-way Trusts and one-way Trusts and deep knowledge of Active Directory Schemas and meta data</li>
<li>Strong Knowledge on Entra ID Identity Management Integration with on premise</li>
<li>Strong knowledge of Entra ID technologies, including authentication models, federation, Multifactor Authentication (MFA), conditional access policies and other relevant capabilities.</li>
<li>Knowledge of best practices in AD/Azure Privileged access management and modern AD/Azure Secured Administration practices</li>
<li>Strong hands-on experience in coding in PowerShell scripting</li>
<li>Strong Knowledge on IAM disciplines like PIM and Privilege Administrative Accounts PAM solutions such as CyberArk</li>
<li>Good knowledge on ADFS and Entra ID sync connectors</li>
<li>Strong familiarity with DNS Active Directory integrated, partitions and Infoblox DHCP systems and Migration of services from Active Directory any platform</li>
<li>Demonstrated knowledge and experience in AD assessment in terms of OU delegation, GPOs, permission etc.,</li>
<li>Expertise in Active Directory versions 2003, 2008R2, 2012R2 2016, 2019 and Azure Active Directory</li>
<li>Good knowledge and hands on experience in setting up lab based on the solution requirements</li>
<li>Demonstrated working knowledge and hands on experience in AD disaster recovery, Replication issues and resolution using tools such as repadmin</li>
<li>Demonstrated experience in writing and applying GPOs, especially related to domain consolidations</li>
<li>Good Knowledge on Active Directory windows audit logs and levels and SIEM integration</li>
<li>Good knowledge on Networking, firewalls, including host firewalls, DNS, DHCP, DFS Network load balancers and Secure Global Directory or Secure LDAP</li>
<li>Good knowledge on Cryptography, certificates, PKI, symmetric, asymmetric keys, Encryption hash algorithms</li>
<li>Good knowledge on AD authentication protocols Kerberos, NTLM, LDAP, LDAPS LDAP-Start TLS</li>
<li>Good knowledge on Network log capturing analyzing the network packet captures through the tools Wireshark, Tshark, Microsoft NM etc.,</li>
<li>Good knowledge on application integration with LDAP Kerberos i.e. Keytab, krb5 etc.,</li>
<li>Good knowledge on AD migration tools like ADMT, Quest etc., knowledge on AD trusts, forest, domain tree structures, sites, DNS, GPOs, OU, FRS, DFSR.</li>
<li>Good knowledge on any Identity Access Management tools like FIM, MIM, OIM, Quest etc.,</li>
<li>Exposure to SAML, OAuth, OpenID and other security/IAM related standards</li>
<li>Strong hands-on familiarity with host-based security solutions, Forensic Investigation agents, and Compliance scanning and reporting, Hardening Active Directory</li>
<li>Knowledge of single sign-on, federation, active directory/LDAP, Kerberos/NTLM authentication integrated Windows authentication</li>
<li>Good knowledge on Identity management and Role based access control, attribute-based access control entitlement management</li>
<li>Good knowledge on power shell scripting with AD modules or VB .Net and ability to write scripts based on the requirement</li>
<li>Excellent communication skills, especially verbal and written</li>
<li>Good documentation skills to write a design configuration documents version controls</li>
<li>Excellent Interpersonal skill and ability to work as part of a team</li>
<li>Home office for remote work</li>
<li>Ability to work some weekends and late nights performing approved changes</li>
<li>ITIL V3 or later experience, experience in writing change request and attending Change Advisory Boards (CAB) meeting</li>
<li>Experience with Security Controls and compliance</li>
</ul>
About NTT DATA
 
NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is a part of NTT Group, which invests over $3 billion each year in RD.
 
Whenever possible, we hire locally to NTT DATA offices or client sites. This ensures we can provide timely and effective support tailored to each client’s needs. While many positions offer remote or hybrid work options, these arrangements are subject to change based on client requirements. For employees near an NTT DATA office or client site, in-office attendance may be required for meetings or events, depending on business needs. At NTT DATA, we are committed to staying flexible and meeting the evolving needs of both our clients and employees. NTT DATA recruiters will never ask for payment or banking information and will only use @nttdata.com and @talent.nttdataservices.com email addresses. If you are requested to provide payment or disclose banking information, please submit a contact us form, https://us.nttdata.com/en/contact-us.
 
NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here. If you'd like more information on your EEO rights under the law, please click here. For Pay Transparency information, please click here.

Active Directory/Azure AD Senior Identity & Access Management (IAM) Architect -

Req ID: 366813
 
NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.
 
We are currently seeking a Active Directory/Azure AD-Senior Identity Access Management (IAM) Architect to join our team in Plano, Texas (US-TX), United States (US).
 
Systems Eng. Sr. Specialist Advisor– Active Directory/Entra ID
 
Role Overview
 
The NTT DATA Services Security organization is looking for talented security-oriented Systems SR. Engineering with strong Active Directory, DNS, DHCP, GPO, ADFS/Entra ID, MFA, SSO and related Identity skills. This role will be part of a larger dedicated security team dedicated to supporting, troubleshooting, upgrading Active Directory, Entra ID and related Identity technologies.
 
Role Responsibilities: 
<ul>
<li>Active Directory designing, Architecture Solutions, Integration with platforms Applications</li>
<li>Develop an architecture of directory solutions for Windows, Unix, and related platforms</li>
<li>Experience in consolidations of multiple forest and domains and demonstrated understanding on User accounts, machine accounts, GPOs</li>
<li>Understand the requirement and create a migration plan for any services i.e. DNS, DHCP, and Certificate Services (PKI) etc.</li>
<li>Analyzing the requirement and design a solution to fulfil the requirement with zero impact to other platforms</li>
<li>Develop a power shell scripting with AD modules or VB .Net based on the requirements</li>
<li>Manage Azure active directory design, Architect Solutions, Integration with platforms Applications and AD connector to Entra</li>
<li>Auditing the security logs and integrating with SIEM</li>
<li>Conducting POC with multiple vendors for AD solutions and prepare detailed test cases. Create a clear recommendation document with pros and cons for senior management</li>
<li>Vulnerability Assessment and Management related to Active Directory, DNS Windows platforms</li>
<li>Active Directory consolidations including application integration working with application teams</li>
<li>Recommend security best practices to achieve stated business objectives, advises on risk assumptions for any variances granted, and provides alternatives to achieve desired end results</li>
</ul>
Required Qualifications: 
<ul>
<li>Minimum 8 years relevant experience in Architecture and designing, solutions Migrating Active Directory, Entra ID ,Windows End points</li>
<li>Strong Demonstrated experience with Active Directory migration tool or equivalent and consolidation of Global Forest and Domains. Hands on experience in successful consolidation of AD Forests and Domains</li>
<li>Must have strong hands-on experience working on Entra ID (Azure Active Directory)</li>
<li>Extensive Experience working as Entra IDmin for enterprise Active Directory setup and maintenance</li>
<li>Strong experience in AD Trusts, two-way Trusts and one-way Trusts and deep knowledge of Active Directory Schemas and meta data</li>
<li>Strong Knowledge on Entra ID Identity Management Integration with on premise</li>
<li>Strong knowledge of Entra ID technologies, including authentication models, federation, Multifactor Authentication (MFA), conditional access policies and other relevant capabilities.</li>
<li>Knowledge of best practices in AD/Azure Privileged access management and modern AD/Azure Secured Administration practices</li>
<li>Strong hands-on experience in coding in PowerShell scripting</li>
<li>Strong Knowledge on IAM disciplines like PIM and Privilege Administrative Accounts PAM solutions such as CyberArk</li>
<li>Good knowledge on ADFS and Entra ID sync connectors</li>
<li>Strong familiarity with DNS Active Directory integrated, partitions and Infoblox DHCP systems and Migration of services from Active Directory any platform</li>
<li>Demonstrated knowledge and experience in AD assessment in terms of OU delegation, GPOs, permission etc.,</li>
<li>Expertise in Active Directory versions 2003, 2008R2, 2012R2 2016, 2019 and Azure Active Directory</li>
<li>Good knowledge and hands on experience in setting up lab based on the solution requirements</li>
<li>Demonstrated working knowledge and hands on experience in AD disaster recovery, Replication issues and resolution using tools such as repadmin</li>
<li>Demonstrated experience in writing and applying GPOs, especially related to domain consolidations</li>
<li>Good Knowledge on Active Directory windows audit logs and levels and SIEM integration</li>
<li>Good knowledge on Networking, firewalls, including host firewalls, DNS, DHCP, DFS Network load balancers and Secure Global Directory or Secure LDAP</li>
<li>Good knowledge on Cryptography, certificates, PKI, symmetric, asymmetric keys, Encryption hash algorithms</li>
<li>Good knowledge on AD authentication protocols Kerberos, NTLM, LDAP, LDAPS LDAP-Start TLS</li>
<li>Good knowledge on Network log capturing analyzing the network packet captures through the tools Wireshark, Tshark, Microsoft NM etc.,</li>
<li>Good knowledge on application integration with LDAP Kerberos i.e. Keytab, krb5 etc.,</li>
<li>Good knowledge on AD migration tools like ADMT, Quest etc., knowledge on AD trusts, forest, domain tree structures, sites, DNS, GPOs, OU, FRS, DFSR.</li>
<li>Good knowledge on any Identity Access Management tools like FIM, MIM, OIM, Quest etc.,</li>
<li>Exposure to SAML, OAuth, OpenID and other security/IAM related standards</li>
<li>Strong hands-on familiarity with host-based security solutions, Forensic Investigation agents, and Compliance scanning and reporting, Hardening Active Directory</li>
<li>Knowledge of single sign-on, federation, active directory/LDAP, Kerberos/NTLM authentication integrated Windows authentication</li>
<li>Good knowledge on Identity management and Role based access control, attribute-based access control entitlement management</li>
<li>Good knowledge on power shell scripting with AD modules or VB .Net and ability to write scripts based on the requirement</li>
<li>Excellent communication skills, especially verbal and written</li>
<li>Good documentation skills to write a design configuration documents version controls</li>
<li>Excellent Interpersonal skill and ability to work as part of a team</li>
<li>Home office for remote work</li>
<li>Ability to work some weekends and late nights performing approved changes</li>
<li>ITIL V3 or later experience, experience in writing change request and attending Change Advisory Boards (CAB) meeting</li>
<li>Experience with Security Controls and compliance</li>
</ul>
About NTT DATA
 
NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is a part of NTT Group, which invests over $3 billion each year in RD.
 
Whenever possible, we hire locally to NTT DATA offices or client sites. This ensures we can provide timely and effective support tailored to each client’s needs. While many positions offer remote or hybrid work options, these arrangements are subject to change based on client requirements. For employees near an NTT DATA office or client site, in-office attendance may be required for meetings or events, depending on business needs. At NTT DATA, we are committed to staying flexible and meeting the evolving needs of both our clients and employees. NTT DATA recruiters will never ask for payment or banking information and will only use @nttdata.com and @talent.nttdataservices.com email addresses. If you are requested to provide payment or disclose banking information, please submit a contact us form, https://us.nttdata.com/en/contact-us.
 
NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here. If you'd like more information on your EEO rights under the law, please click here. For Pay Transparency information, please click here.

Active Directory/Azure AD-Senior Identity & Access Management (IAM) Architect

Search 8631+ Security systems engineer jobs near you this June. New roles added regularly across leading industries. Apply today.