Senior Infrastructure Operations Analyst

Global Technical Talent, an Inc. 5000 Company; Owings Mills (MD); Hybrid; USD 90,000 - 103,000; Full time

Benefits offered by this job

Medical, Vision, Dental Insurance

401k Retirement Fund

Job summary

Global Technical Talent is seeking a Senior Infrastructure Operations Analyst in Owings Mills, MD for a 6-month contract. You will design, implement, and manage identity policies, user lifecycles, and authentication systems to secure digital identities across a complex environment.

You will lead initiatives, apply rigorous analysis, and help establish identity management standards while collaborating across teams and partners in a global technology ecosystem.

Qualifications

• Experience defining and managing user access roles, permissions, and entitlements.
• Strong Identity Lifecycle Management across Human, Machine, and Agent/Application.
• Maintains IAM platforms and directory services (Entra ID, MS ADCS, etc.).
• Performs access reviews, audits, and ensures regulatory compliance (PCI, GDPR).
• Implements certificates-based authentication and SSO, MFA, SAML/OAuth.
• Supports automation through scripting and responds to incidents rapidly.
• Deep PKI knowledge including Venafi CLM and SCEP-related workflows.
• Experience with Windows/Linux certificate usage and Defender-enabled security.
• Ability to work off-hours and on-call; strong teamwork and communication.

Responsibilities

• Identify and execute Certificate Lifecycle Management (CLM) projects.
• Fulfill ServiceNow requests related to Identity technologies.
• Monitor health of in-scope systems and improve observability.
• Perform incident and problem management as needed.
• Automate tasks to improve operations using scripting.
• Implement changes off-hours to support modernization and reduce risk.
• Collaborate with Enterprise Security on findings from tests and scans.
• Manage identity management across on-prem and cloud environments.
• Plan migration of on-prem workloads to alternate solutions.

Skills

Access Governance

Identity Lifecycle

System Administration

Security & Compliance

Authentication Protocols

Scripting (PowerShell/Python)

PKI & Certificates

MS ADCS

Active Directory/Entra ID

Observability/Monitoring

Education

Bachelor's degree

Tools

Entra ID

Venafi CLM

MS Defender

DigiCert

MS ADCS

Job description

Senior Infrastructure Operations Analyst

Location: Owings Mills, MD

Onsite Flexibility: Hybrid

Contract Details

• Position Type: Contract
• Contract Duration: 6 months
• Pay Rate: $65.00-$75.00 / Hour (USD)
• Work Authorization: Applicants must be authorized to work for ANY employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time.

Job Summary

A Senior Infrastructure Operations Analyst on the Identity Access Management team secures digital identities by designing, implementing, and managing access policies, user lifecycles (onboarding/offboarding), and authentication systems. This requires advanced identity management domain expertise and related security disciplines. The position leads high-profile initiatives, applies rigorous analysis to deliver innovative solutions, and establishes identity management standards across the organization. This role is an individual contributor who will be required to work closely with others to influence technical direction in this discipline and partner on the implementation of solutions.

The role is responsible for the configuration, administration, operation, and support of identity management technologies, including integration with networks, hardware, software, applications, and databases. Responsibilities also include end-to-end service delivery of identity management across all technology domains, encompassing backup, recovery, and disaster recovery capabilities. The candidate must have experience in supporting identity management technologies in a complex environment that includes data center, cloud providers, hosted vendor solutions, and co-location facilities in a global technology ecosystem.

Key Responsibilities

• Identify, plan, and execute Certificate Lifecycle Management (CLM) driven projects as needed.
• Fulfill service requests in ServiceNow related to Identity technologies.
• Monitor the health of in-scope systems and act when necessary, as well as enhance observability across supported services.
• Perform Incident and Problem management as needed.
• Improve operational rigor and efficiency through scripting and automation.
• Implement changes (typically off hours) to support modernization objectives and eliminate risks related to vulnerabilities.
• Work with Enterprise Security to assess and remediate any security findings that are discovered during Pen Tests and Vulnerability scans.
• Provide management of and support for all aspects of identity management.
• Plan and migrate on-premises workload to alternate solutions as part of the Data Center Exit strategy.

Required Skills

• Access Governance: Define and manage user access roles, permissions, and entitlements based on the principle of least privilege.
• Identity Lifecycle Management: Understanding all aspects of Identity - Human, Machine, and Agent/Application.
• System Administration: Maintain IAM platforms (e.g., Entra ID, Venafi, MS ADCS) and directory services.
• Security & Compliance: Perform access reviews, audit logs for unauthorized access, and ensure compliance with regulatory standards (e.g., PCI, GDPR).
• Authentication Protocols: Implement and support Certificate-based authentication, SCEP, Intune, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federation services (SAML, OAuth).
• Technical Support: Troubleshoot identity-related issues across the Human, Machine, Agent/Application spectrum and support incident response needs.
• Extensive understanding of Public Key Infrastructure (PKI), X.509 Certificates, Venafi CLM, and automated protocols such as SCEP.
• Deep knowledge of Microsoft Active Directory Certificate Services (MS ADCS), as well as external certificate partners like DigiCert.
• Knowledge in identity-based infrastructure: Active Directory, Entra ID, DNS, and DHCP.
• Intermediate knowledge of Windows and Linux operating systems, including how these machines use certificates.
• Experience with MS Defender and using the product to help keep the environment secure.
• Experience with scripting languages such as PowerShell and/or Python and how to use them to automate tasks.
• Strong communication skills (both verbal and written).
• Ability to participate in off-hour work, including scheduled On-Call.
• Demonstrated ability to work independently and as part of a team, and project management skills.
• Strong attention to detail, accuracy, and timeliness.
• Self-motivated with a desire to work as part of a creative team in a highly collaborative corporate environment.

Preferred Skills

• Detailed understanding of AWS and cloud computing principles and related expertise on identity management integrations.
• Hands-on experience configuring SSO solutions.
• Experience with Centrify, Netbackup, Quest Active Roles, and CyberArk.
• Experience with MS Intune and JAMF.

Education Requirements

• Bachelor's degree or the equivalent combination of education and relevant experience.

Required Experience

• 5 years of total relevant work experience.

Work Environment / Physical Requirements

• On-Call rotation required approximately once every 6-8 weeks, including the possibility of being contacted outside of scheduled call hours for critical incidents.
• Off-hours change implementation required to support modernization objectives.

Benefits

• Medical, Vision, and Dental Insurance Plans
• 401k Retirement Fund

About GTT

GTT is a minority-owned staffing firm and a subsidiary of Chenega Corporation, a Native American-owned company in Alaska. We highly value diverse and inclusive workplaces and support Fortune 500 organizations across banking, financial services, technology, life sciences, biotech, utilities, and retail sectors throughout the U.S. and Canada.

Job Number: 26-13557 Industry: Information Technology