Identity & Discovery Automation Engineer

Volto Consulting; Phoenix (AZ); On-site; USD 120,000 - 160,000; Full time

Job summary

Volto Consulting in Phoenix/Dallas/Columbus seeks a Discovery / Identity & Automation Engineer to interpret Varonis scans, map ACLs to SharePoint models, and design security groups for least-privilege patterns. You will automate site provisioning with PowerShell and PnP.PowerShell, and use Graph/CSOM for bulk remediation and reporting.

Experience with Active Directory, Entra ID, and bulk remediation workflows is essential; strong analytical and scripting skills are required for scalable

Qualifications

• Varonis scan interpretation and over-permission cleanup.
• ACLs mapped to SharePoint permissions models.
• PowerShell provisioning and reconciliation.

Responsibilities

• Varonis DAG: interpreting collector scan data, group membership analysis, over-permission and stale-access reporting, access reviews.
• NTFS ACL analysis and translation into SharePoint permission models.
• Active Directory group administration and Entra ID group management.
• Security group design to the three-group least-privilege pattern service account, read-only, read/write.
• PowerShell and PnP.PowerShell: bulk site provisioning, permission assignment, inventory and evidence logs.
• Microsoft Graph and SharePoint CSOM scripting for reporting and bulk remediation.
• File-system analysis at scale path-length inventories, duplicate and orphan detection, aging and size profiling.
• Retention label and policy application so existing retention carries forward correctly.

Skills

Varonis interpretation

Over-permission cleanup

ACL-to-SharePoint mapping

Security group design

PowerShell provisioning

Tools

PowerShell

SharePoint CSOM

PnP.PowerShell

Microsoft Graph

Job description

Volto Consulting in Phoenix/Dallas/Columbus seeks a Discovery / Identity & Automation Engineer to interpret Varonis scans, map ACLs to SharePoint models, and design security groups for least-privilege patterns. You will automate site provisioning with PowerShell and PnP.PowerShell, and use Graph/CSOM for bulk remediation and reporting.

Experience with Active Directory, Entra ID, and bulk remediation workflows is essential; strong analytical and scripting skills are required for scalable