IAM Engineer - Silverfort

EnH Corporation; Hyderabad; On-site; INR 600,000 - 900,000; Full time

Job summary

EnH Corporation is seeking a Silverfort Administrator to demonstrate and implement Silverfort features. You will integrate on-prem AD, secure privileged accounts, and enforce MFA across RDP, SSH, and SMB interfaces.

You will monitor, troubleshoot, and tune risk-based access policies in hybrid environments. Responsibilities include configuring IdP connections (AD, Entra ID, Okta), optimizing performance of Silverfort nodes, and integrating with SIEM tools for log ingestion.

Qualifications

• Strong analytical mindset and ability to troubleshoot basic issues.
• High willingness to learn, adapt, and grasp new technologies quickly.
• Excellent verbal and written communication skills in English.
• Understanding of networking and diagnosing system/VM related issues.
• Understanding of cloud network architecture and administration techniques.
• Exposure to AWS, Azure & GCP cloud platforms.

Responsibilities

• Deploy Silverfort infrastructure with admin nodes in load balancing and failover architecture.
• Configure and maintain direct connections with Identity Providers (IdPs) including Microsoft Active Directory, Entra ID, and Okta.
• Enforce MFA across non-standard interfaces such as RDP, PowerShell/SSH, and SMB file shares.
• Integrate third-party MFA solutions like MS Authenticator, Okta, Google Authenticator and Duo with Silverfort.
• Oversee traffic interception parameters and troubleshoot authentications for optimal performance.
• Create, tune, and optimize risk-based access policies using AI-driven threat engine.
• Discover, map, and secure machine-to-machine communications with behavioral baselines.
• Audit and adjust RBAC to minimize excessive privileges across cloud and hybrid setups.
• Set up triggers to detect lateral movement, brute-force, and credential-dumping attempts.
• Evaluate Silverfort traffic logs to trace anomalies and generate risk metrics.
• Ingest Silverfort logs to SIEM solutions like Splunk, LogRhythm & Sentinel.
• Document deployments, runbooks, and exception-handling frameworks for continuity.

Skills

Analytical mindset

Willingness to learn

English communication

Networking knowledge

Cloud architecture

Cloud platforms exposure

Education

Bachelors in engineering IT/EEE

Job description

As a Silverfort Administrator, responsiblefor demonstrating the capabilities of Silverfort features & products.Integrating the on-prem AD & secure the privileged access user accounts.Implementation of security policies to strengthen server access for divergeduser base. Monitoring & troubleshooting the infrastructure and handling theauthentication requests to improve security and reduce the blast radius.

1. Deploy the Silverfort infrastructure with Admin& nodes in load balancing and failover architecture.

2. Configure and maintain direct connections withIdentity Providers (IdPs), including Microsoft Active Directory, Entra ID, &Okta.

3. Enforce Multi-Factor Authentication (MFA) across non-standardinterfaces such as Remote Desktop Protocol (RDP), Command-Line interfaces(PowerShell, SSH), and SMB file shares.

4. Integrate 3 rd part MFA solutions like MS authenticator,Okta, Google Authenticator & Duo with Silverfort environment to extend theSilverfort capabilities with existing MFA solutions.

5. Oversee traffic interception parameters, ensure optimalperformance of Silverfort nodes, and troubleshoot authentications.

6. Create, tune, and optimize risk-based access policies utilizingSilverfort’s AI-driven threat engine.

7. Discover, map, and secure machine-to-machine communications bycreating behavioral baselines and automated protection policies.

8. Audit and adjust user Role-Based Access Control (RBAC) toeliminate unnecessary excessive privileges across both cloud and hybrid setups.

9. Set up and configure triggers to detect modern lateral movementattacks, brute-force strategies, and credential-dumping attempts.

10. Evaluate Silverfort traffic logs to trace anomalies and generateoperational risk metrics.

11. Ingesting Silverfort logs to SIEM solutions like Splunk, LogRhythm& Sentinel.

12. Document Silverfort platform deployments, runbooks, andexception-handling frameworks to maintain clean IT operational continuity.

13. Manage the daily operation, health monitoring, and system upgradesof the Silverfort admin console, nodes, and dependent services.

1. Understanding basic authenticationflow mechanics and troubleshooting common clock-skew time sync errors.

2. Creating and updating A, AAAA, CNAME,PTR, and SRV locator records manually.

3. Monitoring policy replication healthacross DCs using Distributed File System Replication (DFSR) commands.

4. Configuring Domain Name System (DNS)zones, Dynamic Host Configuration Protocol (DHCP) scopes, and IP AddressManagement (IPAM) structures.

5. Creating, managing, and rotatingpasswords for standard and Managed Service Accounts (MSAs).

6. Implementing different passwordcomplexity rules for specific high-risk user groups via password policies.

7. Configuring standard security andsharing tabs using inheritance and AGDLP (Account, Global, Universal, DomainLocal, Permissions) best practices.

8. Knowing the five Flexible SingleMaster Operation roles and their placements across domain controllers.

9. Enablingsecurity audit logs on OUs to trace which admin modified or moved a specificobject.

10. Applying Group Policy Objectsconditionally based on hardware traits like operating system version or laptopvs. desktop.

11. Mapping network printers, deployingregistry changes, and configuring local shortcut files natively

12. Understanding about networkingconcepts LAN, MAN & WAN.

13. Knowledge of IP addressing andsubnetting.

1.2. Goodto have skills:

1. Strong analytical mindset with an ability to troubleshoot basicissues.

2. High willingness to learn, adapt, and grasp new technologiesquickly.

3. Excellent verbal and written communication skills in English.

4. Understanding of networking & diagnosing system / vm relatedissues.

5. Understanding of cloud network architecture & administrationtechniques.

6. Exposure on AWS, Azure & GCP cloud platforms.

1. Bachelors in engineering indepartments such as IT/EEE are preferred.