Discovery / Identity & Automation Engineer
Must Have Technical/Functional Skills
- Varonis DAG: interpreting collector scan data, group membership analysis, over-permission and stale-access reporting and access reviews.
- NTFS ACL analysis and translation into SharePoint permission models.
- Active Directory group administration and Entra ID group management.
- Security group design to the three-group least-privilege pattern - service account, read-only and read/write.
- PowerShell and PnP. PowerShell: bulk site provisioning, permission assignment, inventory and evidence logs.
- Microsoft Graph and SharePoint CSOM scripting for reporting and bulk remediation.
- File-system analysis at scale - path-length inventories, duplicate and orphan detection and aging and size profiling.
- Retention label and policy application so existing retention carries forward correctly.
Required Experience
- Strong experience with Varonis DAG, NTFS ACL analysis, Active Directory, Entra ID and SharePoint permissions.
- Advanced PowerShell, PnP. PowerShell, Microsoft Graph and SharePoint CSOM scripting capability.
- Experience with large-scale file-system discovery, least-privilege design and retention controls.
Key Responsibilities
- Interpret Varonis and file-system discovery data to identify ownership, access and remediation needs.
- Translate NTFS ACLs into sustainable SharePoint permission models.
- Design service-account, read-only and read/write security groups using least privilege.
- Automate provisioning, permission assignment, inventory, reconciliation and evidence logging.
- Identify duplicates, orphaned content, stale data and long paths, and validate retention carry-forward.
Salary Range- $100,000-$120,000 a year
#LI-SP3
#LI-VX1
Location
Phoenix, AZ
Function
TECHNOLOGY
Role
Engineer
ID
435171
Skills
Powershell
Salary Range
$100,000 - $120,000