Active Directory Engineer - 60019139

State of South Carolina; Columbia (SC); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health, dental, vision benefits

Paid time off

Job summary

State of South Carolina is seeking an Active Directory Engineer to lead daily support, configuration, and administration of MS Active Directory and related tools on a Columbia, SC, onsite team. You will collaborate with the DTO System Design Team on design, performance, and security, while guiding junior IAM engineers.

The role requires senior AD expertise, PowerShell automation, and strong governance knowledge.

Qualifications

• Bachelor's degree in computer science or related field and experience in computer system development and modification in either an on-premises, cloud-based, or hybrid environment.
• Senior level knowledge and extensive experience specific to Active Directory and Identity services with emphasis on identity management, privileged access management, password management, conditional access policies, role-based access control (RBAC), Azure AD, ADFS, configuration management, SSO\ SaaS integration and Group Policy management.
• Ability to provide strong technical guidance and leadership to junior level IAM engineers.
• Experience with automation using PowerShell Scripting is required.
• A thorough understanding of information security frameworks, governance, and regulatory compliance is required.
• CJIS Certification is a requirement of this position.

Responsibilities

• Perform senior level Identity and Access Management (IAM) to include support and administration of MS Active Directory infrastructure, support and administration of Azure Active Directory, integration of DTO AD users and roles with HR personnel information, password management, and privileged access management.
• Participate in identity, access, and governance lifecycle management and other IAM related tasks including auditing of identity and access status.
• Provide senior level support and administration of Dell Quest tools such as, Change Auditor, Enterprise Reporter, Active Role Server, Dell Password Manager.
• Perform advanced level support and administration of IBM BigFix root/relay servers and application.
• Support is to include installation, configuration, maintenance, and performance monitoring of underlying server and application software.
• Ensure daily administration procedures and processes conform to and are compliant with DTO standards and policies, and all appropriate statutory/regulatory requirements. Provide system administration of solutions to meet DIS 210 requirements, such as ObserveIT and CyberArk applications and their underlying infrastructure.
• Perform other duties as assigned.

Skills

Active Directory

Azure Active Directory

Identity & Access Management

Privileged access management

RBAC

SSO/SaaS integration

Group Policy management

PowerShell scripting

Configuration management

Education

Bachelor's degree in computer science or related field

Tools

Dell Quest tools

IBM BigFix

ObserveIT

CyberArk

Job description

Job Responsibilities
This posting is for internal candidates only.
Active Directory Engineer
The Department of Administration's Office of Technology and Information Services (OTIS) is the state’s central provider of IT services to state government agencies. OTIS oversees the state’s federated model for implementing, enhancing, and protecting information technology (IT) resources and the utilization of IT shared services across agencies. We are seeking a talented Active Directory Engineer to join our team. In this role, you will serve as lead engineer responsible for the daily support, configuration and administration of MS Active Directory, BigFix infrastructure servers, and Dell Quest tools. You will consult with the Division of Technology Operations (DTO) System Design Team on issues such as system design, limitations and capabilities, performance requirements, interfaces, and maintenance on a limited basis. You will assist junior team members with problem resolution, maintain, configure, update and monitor all systems utilizing approved software, conforming to agency standards and policies ensuring all procedures and processes will properly secure data, applications, and communications conforming specifically to agency security standards, policies and procedures.
This position is onsite Columbia, SC.
Responsibilities Of The Active Directory Engineer

• Perform senior level Identity and Access Management (IAM) to include support and administration of MS Active Directory infrastructure, support and administration of Azure Active Directory, integration of DTO AD users and roles with HR personnel information, password management, and privileged access management.
• Participate in identity, access, and governance lifecycle management and other IAM related tasks including auditing of identity and access status.
• Provide senior level support and administration of Dell Quest tools such as, Change Auditor, Enterprise Reporter, Active Role Server, Dell Password Manager.
• Perform advanced level support and administration of IBM BigFix root/relay servers and application.
• Support is to include installation, configuration, maintenance, and performance monitoring of underlying server and application software.
• Ensure daily administration procedures and processes conform to and are compliant with DTO standards and policies, and all appropriate statutory/regulatory requirements. Provide system administration of solutions to meet DIS 210 requirements, such as ObserveIT and CyberArk applications and their underlying infrastructure.
• Perform other duties as assigned.
  

Minimum And Additional Requirements

• A bachelor's degree in computer science or related field and experience in computer system development and modification in either an on-premises, cloud-based, or hybrid environment.
• Relevant experience may substitute for the bachelor's degree on a year-for-year basis.
  

Additional Requirements:

• Senior level knowledge and extensive experience specific to Active Directory and Identity services with emphasis on identity management, privileged access management, password management, conditional access policies, role-based access control (RBAC), Azure AD, ADFS, configuration management, SSO\SaaS integration and Group Policy management.
• Ability to provide strong technical guidance and leadership to junior level IAM engineers.
• Ability to solve moderately complex problems and apply critical thinking skills to needs or problems, both individually and as part of a team is required.
• Experience with automation using PowerShell Scripting is required.
• A thorough understanding of information security frameworks, governance, and regulatory compliance is required.
• CJIS Certification is a requirement of this position.
• Position may require overnight travel.
• Position may require employe to work evenings and weekends.
• Position requires on-call shifts and call back.
• Position will be required to report to work during emergency situations and hazardous weather events.
• This position may require the employee to work from a remote location beyond the standard 37.5 hours/week and could include working nights, weekends, and holidays.
• Employee will be required to carry a laptop and cell phone for after hours contact.
  

Applicants indicating college credit or degree(s) on the application may bring a copy of college transcript to the interview. A copy of the transcript may also be uploaded as an attachment to the application, if required by the hiring department or if desired by the applicant. Please note that some areas of the Department may require an official, certified copy of the transcript prior to hiring or within a specific timeframe required by that area, after hiring. Failure to produce an official, certified transcript may result in not being hired or termination.
Additional Comments
The Department of Administration is committed to providing equal employment opportunities to all applicants and does not discriminate on the basis of race, color, religion, sex (including pregnancy, childbirth, or related medical conditions including, but not limited, to lactation), national origin, age (40 or older), disability or genetic information.
Supplemental questions are considered part of your official application. Any misrepresentation will result in your disqualification from employment. Please complete the state application to include all current and previous work history and education. A resume will not be accepted nor reviewed to determine if an applicant has met the qualifications for the position.The South Carolina Department of Administration offers an exceptional benefits package for full time (FTE) employees

• Health, dental, vision, long-term disability, and life insurance for employees, spouse, and children. Click here for additional information.
• 15 days annual (vacation) leave per year
• 15 days sick leave per year
• 13 paid holidays
• Paid Parental Leave
• S.C. Deferred Compensation Program available (S.C. Deferred Compensation)
• Retirement benefit choices *
• State Retirement Plan (SCRS)
• State Optional Retirement Program (State ORP)
• Enrollment in one of the listed plans is required for all FTE employees; please refer to the contribution section of hyperlinked retirement sites for the current contribution rate of gross pay.
  
Benefits For State Employees
The state of South Carolina offers eligible employees generous benefits, including health and dental insurance; retirement and savings plan options; and paid vacation and sick leave. Plus, work-life balance programs such as telecommuting and flexible work schedules are available to employees of some state agencies.Insurance Benefits
Eligible employees may enroll in health insurance, which includes prescription coverage and wellness benefits. Other available insurance benefits include dental, vision, term life insurance, long term disability and flexible spending accounts for health and child care expenses.Retirement Benefits
State employees are also offered retirement plan options, including defined benefit and defined contribution plans. Additionally, eligible employees may elect to participate in the South Carolina Deferred Compensation Program, which is a voluntary, supplemental retirement savings plan offering 401(k) and 457 plan options.Workplace Benefits
State employees may also be eligible for other benefits, including tuition assistance; holiday, annual and sick leave; and discounts on purchases, travel and more.Note: The benefits above are available to most state employees, with the exception of those in temporary positions. Employees in temporary grant and time-limited positions may be eligible for all, some or none of these benefits as benefits are associated with each position type. For these positions, contact the hiring agency to determine what benefits may be available.
01
Supplemental questions are considered part of your official application. Any misrepresentation will result in your disqualification from employment. Please complete the state application to include all current and previous work history and education. I have read and acknowledge the above statement.

• Yes
• No
  
02
Will you now or in the future require sponsorship from the Department of Administration for employment visa status?

• Yes
• No
  
03
Are you a current Department of Administration employee occupying a FTE, time-limited, temporary grant, or temporary position?

• Yes
• No
  
04
Which of the following best describes your education and experience?

• At least a bachelor's degree in computer science or related field and experience in computer system development and modification in either an on-premises, cloud-based, or hybrid environment.
• An associate degree and at least two (2) years of experience in computer system, development and modification in either an on-premises, cloud-based, or hybrid environment.
• A high school diploma and at least four (4) years of experience in computer system, development and modification in either an on-premises, cloud-based, or hybrid environment
• None of the above.
• Required Question