Active Directory Engineer

Description:

Maxim is looking to bring on a Sr. Active Directory to join their Systems Engineering team. Maxim has over 4,800 users across 200 sites in the U.S.

Maxim is going to try to train this person on IAM. They would like this person to have experience with advanced Active Directory and related technologies (GPO, ADFS, etc.), both on premise and O365 cloud based AD skills. Regions for these candidates first choice would be local to Columbia, MD but am willing to talk with resources in Raleigh, NC area.

****This person will primarily be working remote but should be open to coming on-site 1-2 days a week to their Columbia location.*****

Timelines- TBD

· 2022- focus ASAP for test tenants for staffing company and how to build out the configurations

o The goal would be to migrate Exchange, AD / MFA in 2022

· The other services- MS Teams, Power BI, etc. (TBD)

Hybrid Exchange environment

· Exchange 2013 on prem

· Archive mailbox is in Office 365

· maxhealth.com is the current domain

· They would like to create a separate Office 365 tenant for each company (Maxim Homecare and Maxim Staffing)

Hybrid Active Directory environment

· ADFS on prem

· Using components of Azure for MFA

MS Teams

· Skype for business on-prem currently- replacing with MS Teams to increase collaboration

• Identity Access Management- privileged access management, multi-factor authentication

o Centrify- PAM solution

o Looking at different multi-factor authentication technologies (Azure based)

o Microsoft FIM; looking to migrate to MIM

• Projects in the pipeline

o Migrations from on-prem to Azure AD

o Migrations from on-prem Exchange to Office 365

• On prem Active Directory / Azure AD

• Powershell scripting skills- should be able to create scripts from scratch

Please see the email below from Manager of Systems Engineering. Brandon is one of the Sr. Systems Engineers on the team currently responsible for a lot of the IAM Engineering work but he has a lot on his plate right now and they really need to bring on an Identity Engineer to take on this project workload.

“Below are some bullet points that the Manager of Systems Engineering has put together on current state with some possible short-term and mid-term objectives. Also, internal IAM discussions have reaffirmed that everything we would like to accomplish long-term, this position could be first as part of a group, and a great opportunity to help guide instead of just implement.”

Identity & Access Management

6-Month Objective – New IdM system & lifecycle management for all employee types

Build and release a new identity management (IdM) system in to production that manages the identities for all of Maxim’s employee types.

Issues that need to be addressed:

• There is no lower environment for our existing IdM system (FIM 2010 non-R2)

• We are currently running an unsupported version of FIM 2010 non-R2; need a more modern IdM system that is extensible and supported

• There are management agents no longer used and errors that need to be identified and resolved

• No lifecycle management process for some of our employee types (i.e. – internal/external contractor, medical coder, help desk agent, etc.); need an autonomous on-boarding and off-boarding process for all worker personas

• Documentation (e.g. – workflows, diagrams, Word documents, source controlled, etc.) of our lifecycle management processes do not exist

• Caregivers (our external contractors) exist in our HRIS system of record, however their identities – which reside in an on-prem AD lightweight directory service (LDAP) instance – are not connected and synchronized with our IdM system.

12-Month Objective – Refine and streamline business policy & rules and expand scope of connected identity stores

Work with stakeholders to identify gaps and issues with existing business policy/logic and implement solutions. Increase efficiency of existing management agents and connect MIM to other systems to synchronize their identity stores with the metaverse.

Issues that need to be addressed:

• HRIS (ADP) updates are received once per day via flat file; we need to have the ability to receive updates from HRIS in near real-time.

• The following infrastructure identity stores are not connected to MIM:

o Headquarters ID Badge System

• The following LOB and EMR identity stores are not connected to MIM:

o HealthMedx/NetSmart Vision

o Bullhorn eRecruit

o Learning Management System & MaximCare Mobile App (AD LDS/LDAP v3)

• Exchange mailbox and Skype lifecycle management is a separate system from our IdM system; we need these resources to be managed natively within MIM

• We do not have a way to report on historical changes to MIM resources (groups, sets, MPRs, etc.)

• We have no automated emergency user termination/disable process; business needs to have a process that automated, has approval workflows and can be audited – Possible ServiceNow integration required

• Connected or downstream identity stores are not updated at a regular frequency; need to have an increased identity convergence time across all systems (i.e. – all identity data should never be outdated on any system)

Position Description:

The Senior Systems Engineer is responsible for designing, building, and maintaining Maxim’s IT infrastructure technologies and services. The Senior Systems Engineer works collaboratively with the other Systems Engineers and Solution Architects to implement projects. The Senior Systems Engineer acts as Third Tier support within the Enterprise Operations group to resolve production incidents, perform root cause analysis, provide guidance to junior team members on technical matters related to their specializations, and may include focused product research and analysis when required. The Senior Systems Engineer will be able to act as a thought leader for their core technical competencies as well as bring their diverse experience on all technical and operational disciplines to provide direction across the team.

Essential Duties and Responsibilities:

• Works with the Application Team to design and implement projects

• Creates and maintains configuration artifacts

• Provide third-level technical support for Microsoft SharePoint platform including SharePoint administration services, site administration; configure SharePoint application services, workflow management and content management for optimal performance.

• Defines and documents best practices and standard operating procedures

• Conducts capacity planning and performance management for the technologies they support

• Contributes to the architecture peer review process

• Provides after-hours support for Infrastructure related emergencies as well occasional weekend maintenance

• Interacts with customers and staff at the technical level, as required

• Provide technical guidance and mentoring of junior Systems Engineers and System Administrators.

• Performs other duties as assigned/necessary

Minimum Requirements:

• Bachelor’s Degree in a related area or 10-15 years of experience in the field

• Ten (10) years of direct experience with Microsoft products, to include Windows Server, Exchange Server, as well as Active Directory

• MCSE or similar certifications are preferred

• Experience supporting and working with Software Development Lifecycle (Agile, SCRUM, DevOps), Project Management Lifecycle, and IT Service Management (ITIL) processes

• Direct leadership experience with a broad range of technologies and concepts listed below, have lead the delivery of projects for these technologies, and demonstrated technical knowledge as a Subject Matter Expert (SME) in several of these areas.

o Server and Storage hardware (Cisco, HP, NetApp, Pure Storage)

o Microsoft Windows Server platforms and services (DNS, DHCP, PKI)

o Microsoft SharePoint Server platform and services (Web front end, search and index function, application and search servers)

o System Management (Microsoft Systems Center, SolarWinds, SCCM)

o Virtualization and Cloud (VMware, Citrix, Hyper-V, Azure)

o Identity and Access Management (Active Directory, FIM/MIM, SSO/ADFS, Centrify)

o Enterprise Backup and Disaster Recovery (Rubrik, CommVault, Zerto)

o Enterprise Messaging (Exchange, Symantec Enterprise Vault, Lync)

o System Security (DLP, vulnerability assessment and remediation, Anti-Virus, Host-based Firewall)

o Web Server platforms (IIS, Apache, SharePoint, F5 Load Balancers)

• Familiarity with standard concepts, practices, and procedures within field

• Ability to effectively elicit/provide information to and from appropriate individuals (including, but not limited to, supervisors, co-workers, clients) via strong communication skills; proficiency in the English language may be required

Skills:

Windows, Active directory, Azure, Systems engineering

Top Skills Details:

Windows,Active directory,Azure,Systems engineering

Additional Skills & Qualifications:

This person should have experience implementing, configuring, and supporting Microsoft server infrastructure, virtual machines, and data center technologies.

About the company

"For more than 30 years, we have been making a difference in the lives of our patients, caregivers, and employees. Our nationwide suite of services includes home healthcare, companion and behavioral care, healthcare staffing, and workforce solutions. Our commitment to customer service, compassionate patient care, and filling critical staffing needs makes us a trusted partner wherever healthcare is needed."

About TEKsystems:

We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.

The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.