Identity & Access Ops Engineer (L2) - AD/LDAP/ADFS

Gruve; San Francisco (CA); In loco; USD 120.000 - 170.000; Tempo pieno

Descrizione del lavoro

Gruve is seeking an experienced L2 Identity & Access Administrator to manage AD, LDAP and ADFS for enterprise environments. You will handle incident resolution, authentication troubleshooting, access management and security compliance across global operations.

The role collaborates with L1/L3, Security, IAM, Network and Application teams to maintain identity service availability and secure access in a dynamic AI-powered tech startup setting.

Competenze

• Hands-on experience in Active Directory administration and troubleshooting.
• Strong knowledge of users, groups, account lockouts, authentication, Group Policy and AD replication.
• Working knowledge of LDAP, directory queries, bind operations and application integrations.
• Experience supporting ADFS, federation services, SSO and certificate-related issues.
• Understanding of DNS, Kerberos, NTLM, SSL/TLS and authentication protocols.
• Knowledge of service accounts, access permissions, privileged access and identity security practices.
• Experience with monitoring tools, ServiceNow or equivalent ITSM platforms.
• Understanding of ITIL Incident, Problem, Change and Request Management.
• Basic PowerShell scripting skills for identity administration and troubleshooting.
• Experience in enterprise 24x7 production operations and SLA-driven support.

Mansioni

• Provide L2 support for Active Directory incidents, alerts and service requests.
• Administer user accounts, groups, computer accounts, password resets, account unlocks and access permissions.
• Troubleshoot authentication failures, account lockouts, Group Policy issues and domain connectivity.
• Support AD replication, domain controller health checks, DNS and time synchronization troubleshooting.
• Perform approved Group Policy changes, account modifications and access-related activities.
• Support AD security reviews, privileged access controls and remediation of identified vulnerabilities.
• Support LDAP directory services, connectivity and authentication-related incidents.
• Troubleshoot LDAP bind failures, connection issues, directory queries and access permissions.
• Validate LDAP configurations, service account access and directory integration with applications.
• Monitor directory service availability and investigate replication or synchronization issues where applicable.
• Coordinate with Application and Directory Services teams to resolve integration issues.
• Provide L2 support for ADFS authentication, federation and single sign-on (SSO) incidents.
• Troubleshoot token issuance failures, federation errors, certificate issues and authentication problems.
• Perform basic health checks on ADFS services, federation servers and related components.
• Support approved certificate renewals, configuration changes and service validation.
• Troubleshoot relying-party trust and application federation issues.
• Escalate complex federation, claims-rule and architecture issues to L3 SMEs.
• Resolve identity-related incidents and service requests within defined SLAs.
• Monitor alerts and service health for AD, LDAP and ADFS infrastructure.
• Execute approved changes and follow established access management and security procedures.
• Support major incident restoration, problem investigation and root-cause analysis activities.
• Follow ITIL Incident, Problem, Change and Request Management processes.
• Maintain runbooks, operational documentation, incident records and shift handover notes.
• Coordinate with L1/L3, Security, IAM, Network, Windows and Application teams.
• Ensure timely escalation, SLA compliance and effective APAC–EMEA–NLAM shift handovers.

Conoscenze

Active Directory

LDAP

ADFS

Group Policy

DNS & Kerberos

SSO / Federation

PowerShell scripting

ITIL processes

Security compliance

Incident management

ServiceNow ITSM

Production 24x7 support

SAML

OAuth 2.0

OIDC

MFA

Conditional Access

Azure AD

Privileged access management

Descrizione del lavoro

Gruve is seeking an experienced L2 Identity & Access Administrator to manage AD, LDAP and ADFS for enterprise environments. You will handle incident resolution, authentication troubleshooting, access management and security compliance across global operations.

The role collaborates with L1/L3, Security, IAM, Network and Application teams to maintain identity service availability and secure access in a dynamic AI-powered tech startup setting.