IAM Engineer - Silverfort

ENHiSecure Pvt Ltd; Hyderabad; On-site; INR 1,400,000 - 2,200,000; Full time

Job summary

ENHiSecure Pvt Ltd is seeking a Silverfort Administrator to demonstrate and implement Silverfort features, integrating with on-prem AD and securing privileged access accounts.

You will deploy infrastructure with load-balanced admin nodes, configure IdP connections, enforce MFA, and optimize risk-based access policies while auditing RBAC across cloud and on-prem environments.

Qualifications

• Must have hands-on experience with enterprise identity and access management.
• Experience deploying MFA across non-standard interfaces (RDP, SSH).
• Knowledge of securing hybrid cloud environments with RBAC.

Responsibilities

• Deploy Silverfort infrastructure with admin nodes in LB/failover setup.
• Configure and maintain connections with IdPs (AD, Entra ID, Okta).
• Enforce MFA across RDP, SSH, SMB interfaces.
• Integrate third-party MFA like MS Authenticator, Okta, Google Authenticator & Duo.
• Audit and tune RBAC to minimize privileged access across cloud and on-prem.
• Monitor authentication traffic and troubleshoot incidents to reduce risk.
• Ingest Silverfort logs to SIEM tools like Splunk, LogRhythm, Sentinel.
• Document deployments, runbooks, and incident handling procedures.

Skills

Analytical mindset

Troubleshooting

English communication

Networking fundamentals

Cloud fundamentals (AWS/Azure/GCP)

Security concepts

Education

Bachelor's in IT/EEE

Tools

Active Directory

Azure AD

Okta

Splunk

PowerShell

SSH/RDP security

Job description

As a Silverfort Administrator, responsiblefor demonstrating the capabilities of Silverfort features & products.Integrating the on-prem AD & secure the privileged access user accounts.Implementation of security policies to strengthen server access for divergeduser base. Monitoring & troubleshooting the infrastructure and handling theauthentication requests to improve security and reduce the blast radius.

1. Deploy the Silverfort infrastructure with Admin& nodes in load balancing and failover architecture.

2. Configure and maintain direct connections withIdentity Providers (IdPs), including Microsoft Active Directory, Entra ID, &Okta.

3. Enforce Multi-Factor Authentication (MFA) across non-standardinterfaces such as Remote Desktop Protocol (RDP), Command-Line interfaces(PowerShell, SSH), and SMB file shares.

4. Integrate 3 rd part MFA solutions like MS authenticator,Okta, Google Authenticator & Duo with Silverfort environment to extend theSilverfort capabilities with existing MFA solutions.

5. Oversee traffic interception parameters, ensure optimalperformance of Silverfort nodes, and troubleshoot authentications.

6. Create, tune, and optimize risk-based access policies utilizingSilverfort’s AI-driven threat engine.

7. Discover, map, and secure machine-to-machine communications bycreating behavioral baselines and automated protection policies.

8. Audit and adjust user Role-Based Access Control (RBAC) toeliminate unnecessary excessive privileges across both cloud and hybrid setups.

9. Set up and configure triggers to detect modern lateral movementattacks, brute-force strategies, and credential-dumping attempts.

10. Evaluate Silverfort traffic logs to trace anomalies and generateoperational risk metrics.

11. Ingesting Silverfort logs to SIEM solutions like Splunk, LogRhythm& Sentinel.

12. Document Silverfort platform deployments, runbooks, andexception-handling frameworks to maintain clean IT operational continuity.

13. Manage the daily operation, health monitoring, and system upgradesof the Silverfort admin console, nodes, and dependent services.

1. Understanding basic authenticationflow mechanics and troubleshooting common clock-skew time sync errors.

2. Creating and updating A, AAAA, CNAME,PTR, and SRV locator records manually.

3. Monitoring policy replication healthacross DCs using Distributed File System Replication (DFSR) commands.

4. Configuring Domain Name System (DNS)zones, Dynamic Host Configuration Protocol (DHCP) scopes, and IP AddressManagement (IPAM) structures.

5. Creating, managing, and rotatingpasswords for standard and Managed Service Accounts (MSAs).

6. Implementing different passwordcomplexity rules for specific high-risk user groups via password policies.

7. Configuring standard security andsharing tabs using inheritance and AGDLP (Account, Global, Universal, DomainLocal, Permissions) best practices.

8. Knowing the five Flexible SingleMaster Operation roles and their placements across domain controllers.

9. Enablingsecurity audit logs on OUs to trace which admin modified or moved a specificobject.

10. Applying Group Policy Objectsconditionally based on hardware traits like operating system version or laptopvs. desktop.

11. Mapping network printers, deployingregistry changes, and configuring local shortcut files natively

12. Understanding about networkingconcepts LAN, MAN & WAN.

13. Knowledge of IP addressing andsubnetting.

1.2. Goodto have skills:

1. Strong analytical mindset with an ability to troubleshoot basicissues.

2. High willingness to learn, adapt, and grasp new technologiesquickly.

3. Excellent verbal and written communication skills in English.

4. Understanding of networking & diagnosing system / vm relatedissues.

5. Understanding of cloud network architecture & administrationtechniques.

6. Exposure on AWS, Azure & GCP cloud platforms.

1. Bachelors in engineering indepartments such as IT/EEE are preferred.