Identity & Access Ops Engineer (L2): AD/LDAP/ADFS

Gruve; United States; Remoto; USD 90.000 - 140.000; Tempo pieno

Descrizione del lavoro

Gruve, a dynamic AI-focused software services startup, is seeking an L2 Identity & Access Administrator to support enterprise identity infrastructure (AD, LDAP, ADFS). You will resolve incidents, manage accounts, and ensure secure access across global operations.

You will collaborate with L1/L3, Security, IAM, and Application teams to maintain service availability, implement access controls, and drive improvements in authentication and security compliance within a dynamic, customer-focused

Competenze

• Hands-on experience in Active Directory administration and troubleshooting.
• Strong knowledge of users, groups, account lockouts, authentication, Group Policy and AD replication.
• Working knowledge of LDAP, directory queries, bind operations and application integrations.
• Experience supporting ADFS, federation services, SSO and certificate-related issues.
• Understanding of DNS, Kerberos, NTLM, SSL/TLS and authentication protocols.
• Knowledge of service accounts, access permissions, privileged access and identity security practices.
• Experience with monitoring tools, ServiceNow or equivalent ITSM platforms.
• Understanding of ITIL Incident, Problem, Change and Request Management.
• Basic PowerShell scripting skills for identity administration and troubleshooting.
• Experience in enterprise 24x7 production operations and SLA-driven support.

Mansioni

• Provide L2 support for Active Directory incidents, alerts and service requests.
• Administer user accounts, groups, computer accounts, password resets, account unlocks and access permissions.
• Troubleshoot authentication failures, account lockouts, Group Policy issues and domain connectivity.
• Support AD replication, domain controller health checks, DNS and time synchronization troubleshooting.
• Perform approved Group Policy changes, account modifications and access-related activities.
• Support AD security reviews, privileged access controls and remediation of identified vulnerabilities.
• Support LDAP directory services, connectivity and authentication-related incidents.
• Troubleshoot LDAP bind failures, connection issues, directory queries and access permissions.
• Validate LDAP configurations, service account access and directory integration with applications.
• Monitor directory service availability and investigate replication or synchronization issues where applicable.
• Coordinate with Application and Directory Services teams to resolve integration issues.
• Provide L2 support for ADFS authentication, federation and single sign-on (SSO) incidents.
• Troubleshoot token issuance failures, federation errors, certificate issues and authentication problems.
• Perform basic health checks on ADFS services, federation servers and related components.
• Support approved certificate renewals, configuration changes and service validation.
• Troubleshoot relying-party trust and application federation issues.
• Escalate complex federation, claims-rule and architecture issues to L3 SMEs.
• Resolve identity-related incidents and service requests within defined SLAs.
• Monitor alerts and service health for AD, LDAP and ADFS infrastructure.
• Execute approved changes and follow established access management and security procedures.
• Support major incident restoration, problem investigation and root-cause analysis activities.
• Follow ITIL Incident, Problem, Change and Request Management processes.
• Maintain runbooks, operational documentation, incident records and shift handover notes.
• Coordinate with L1/L3, Security, IAM, Network, Windows and Application teams.
• Ensure timely escalation, SLA compliance and effective APAC–EMEA–NLAM shift handovers.

Conoscenze

Active Directory administration

Authentication troubleshooting

LDAP

ADFS / SSO

Group Policy

DNS / Kerberos / NTLM

PowerShell scripting

ITIL processes

Monitoring tools (ServiceNow)

Strumenti

ServiceNow

Descrizione del lavoro

Gruve, a dynamic AI-focused software services startup, is seeking an L2 Identity & Access Administrator to support enterprise identity infrastructure (AD, LDAP, ADFS). You will resolve incidents, manage accounts, and ensure secure access across global operations.

You will collaborate with L1/L3, Security, IAM, and Application teams to maintain service availability, implement access controls, and drive improvements in authentication and security compliance within a dynamic, customer-focused