Be an early applicantLess than 25 applicants

Company

Original Job Post

RedMatter Solutions · 4 days ago

Azure Cloud Engineer

Washington, DC

Full-time

Onsite

Mid Level

$130K/yr - $140K/yr

4+ years exp

Wonder how qualified you are to the job?

Maximize your interview chances

Cyber SecurityInformation Technology

Insider Connection @RedMatter Solutions

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

User Management: Efficiently handle user provisioning, deprovisioning, and account maintenance within Azure Active Directory.

Group Management: Create and manage user groups, ensuring effective access control and streamlined permissions.

Administrative Units: Configure and manage administrative units to delegate administrative tasks appropriately.

ZScaler Implementation: Manage, implement, and maintain Zscaler to meet business requirements.

Privileged Identity Management (PIM) - Role Management: Implement and manage PIM for role-based access control and enforce the principle of least privilege.

Single Sign-On Setup: Design and deploy Single Sign-On (SSO) solutions for seamless user authentication across applications and services.

Application Registrations - API Permissioning - Key Management: Perform application registrations, define API permissions, and manage cryptographic keys for secure application access.

Licensing - Group Based/Attribute Based Licensing: Handle licensing for users based on group memberships or user attributes, ensuring efficient resource utilization.

Azure AD Connect - Syncing On-prem AD to Azure AD: Manage Azure AD Connect to synchronize on-premises Active Directory with Azure Active Directory, establishing a robust hybrid identity solution.

Authentication: Implement Multi-Factor Authentication (MFA), Configure Windows Hello for Business, Implement Certificate-Based Authentication.

Conditional Access Policies: Design and enforce conditional access policies to control access based on specific conditions and user attributes.

Identity Governance: Create and manage access packages, conduct access reviews, implement lifecycle workflows to automate identity management processes.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Access ManagementOktaAzure ADSingle Sign-OnMulti-Factor AuthenticationContextual Access PoliciesConditional Access PoliciesAuthorization PoliciesMobile DevicesActive DirectoryLDAPAuthentication TechnologiesAuthorization TechnologiesSAMLWS-FedOAuthOpenIDOne-Time PasscodesPKIDerived CredentialsFIDOU2FRBACABACTechnical AnalysisAdvisory ServicesProject ManagementAzure Cloud SolutionsSecurityIdentity Access Management

Required

Education: bachelor’s degree (BS/BA) or equivalent

4+ years of experience designing, architecting, implementing, operating, and maintaining access management solutions supporting Okta and/or Azure AD single sign-on, multifactor authentication, contextual and conditional access policies, and authorization policies for desktop and mobile devices.

Demonstrated experience designing, architecting, implementing, operating, and maintaining access management solutions supporting single sign-on, multi-factor authentication, contextual and conditional access policies, and authorization policies for desktop and mobile devices.

Demonstrated experience with Azure AD or other similar access management products from Okta, Ping, ForgeRock, etc.

Demonstrated experience with Active Directory and LDAP

Demonstrated experience with authentication and authorization technologies and protocols such as SAML, WS-Fed, OAuth, OpenID/OpenID Connect, one-time passcodes, PKI, derived credentials, FIDO, U2F, RBAC, ABAC

Demonstrated experience working on complex projects and providing technical analysis and advisory services.

Preferred

3+ years of experience building and designing Azure cloud solutions and specific focus on Azure AD, security, and identity and access management

3+ years of experience with Active Directory and LDAP

3+ years of hands-on integration experience with authentication and authorization technologies and protocols such as SAML, WS-Fed, OAuth, OpenID/OpenID Connect, one-time passcodes, PKI, derived credentials, FIDO, U2F, RBAC, ABAC, PBAC

Demonstrated experience leading workstreams and scoping and managing complex access management projects and providing strategic and technical advisory services

Experience Deploying ZScaler or another Secure Access Service Edge (SASE) Solution

Knowledge and solid understanding of HSPD-12/PIV/CAC, FIPS 201, FICAM, NIST SP 800-53 and 800-63, FISMA, and other federal ICAM-related directives, standards, and mandates

Knowledge of AWS, GSA USAccess, HR Connect, ServiceNow, Salesforce, Office365

Demonstrated experience with cloud computing, APIs, zero trust security models, and mobile computing.

Okta and Microsoft Azure certification(s)