Open job positions

---

About the Opportunity:   

Currently looking for an Active Directory/Azure Active Directory Engineer for our client. Our client requires an experienced Active Directory/Azure Active Directory engineer to supplement the existing team. The right candidate must have a strong background in designing, building and maintaining complex global directory environments. This is a 6-month remote opportunity. 
 

Responsibilities:   

• Engineering, deploying, operationalizing, maintaining and supporting tools associated with Active Directory & Azure Active Directory 
• Contributing to the engineering and support of Active Directory and Azure Active Directory 
• Contributing to the engineering and support of Platform as a Service (PaaS) directory options such as Azure AD Domain Services and Amazon Web Services managed AD, integrated with traditional directory instances. 
• Communicating service directions, features and roadmaps 
• Providing technical leadership to others with less knowledge or experience 
• Liaising with, training, and supporting operational teams 
• Participating in on-call rotation for Active Directory, Azure Active Directory and PaaS directory platforms 

Required Skills:    

• Senior and experienced Active Directory Engineer (5-7+ years) with Azure Active Directory exposure 
• Experience with PaaS directory options such as Azure AD Domain Services and AWS managed AD exposure 
• Experience with large enterprise directories (10’s to 100’s of domain controllers) 
• Experience integrating cloud-based directories (Azure AD and PaaS directories) with traditional on-premises directory platforms 
• Solid understanding of Active Directory/Azure Active Directory Security 
• Experience with Azure AD Domain Services 
• Experience with AWS Managed AD 
• Experience with Active Directory in operational technology environments 
• Experience with implementing and maintaining AD Tools such as: 
• Microsoft ATA/AATP/Defender for Identity 
• Microsoft Azure Site Recovery (ASR); Microsoft ADRES (AD Recovery Execution Service) 
• Quest tools e.g., Change Auditor; Recovery Manager (RMAD); Enterprise Reporter; Migration Manager (or Binary Tree's products) 
• Alternative vendor tools that fall into the same area 
• Experience with processes that use these tools: 
• e.g., Supporting SOC with ATA/AATP/DFI 
• e.g., Periodic recovery testing of AD using RMAD, ADRES, ASR etc. 
• Experience of AD Business Continuity and Disaster Recovery Planning and testing processes 
• Experience with Active Directory cloud synchronization services (AAD Connect/Dirsync) 

Preferred Skills:     

• Experience with the Purdue Enterprise Reference Architecture (PURA) for operational technology environments 
• Business outcomes mindset 
• Excellent interpersonal communication skills with strong spoken and written English 
• Collaborative team worker 
• Flexibility to accommodate working across different time-zones 

Required Education:      

• Bachelor’s in Computer Science   

About the Opportunity:   

Currently looking for an Active Directory/Azure Active Directory Engineer for our client. Our client requires an experienced Active Directory/Azure Active Directory engineer to supplement the existing team. The right candidate must have a strong background in designing, building and maintaining complex global directory environments. This is a 6-month remote opportunity. 
 

Responsibilities:   

• Engineering, deploying, operationalizing, maintaining and supporting tools associated with Active Directory & Azure Active Directory 
• Contributing to the engineering and support of Active Directory and Azure Active Directory 
• Contributing to the engineering and support of Platform as a Service (PaaS) directory options such as Azure AD Domain Services and Amazon Web Services managed AD, integrated with traditional directory instances. 
• Communicating service directions, features and roadmaps 
• Providing technical leadership to others with less knowledge or experience 
• Liaising with, training, and supporting operational teams 
• Participating in on-call rotation for Active Directory, Azure Active Directory and PaaS directory platforms 

Required Skills:    

• Senior and experienced Active Directory Engineer (5-7+ years) with Azure Active Directory exposure 
• Experience with PaaS directory options such as Azure AD Domain Services and AWS managed AD exposure 
• Experience with large enterprise directories (10’s to 100’s of domain controllers) 
• Experience integrating cloud-based directories (Azure AD and PaaS directories) with traditional on-premises directory platforms 
• Solid understanding of Active Directory/Azure Active Directory Security 
• Experience with Azure AD Domain Services 
• Experience with AWS Managed AD 
• Experience with Active Directory in operational technology environments 
• Experience with implementing and maintaining AD Tools such as: 
• Microsoft ATA/AATP/Defender for Identity 
• Microsoft Azure Site Recovery (ASR); Microsoft ADRES (AD Recovery Execution Service) 
• Quest tools e.g., Change Auditor; Recovery Manager (RMAD); Enterprise Reporter; Migration Manager (or Binary Tree's products) 
• Alternative vendor tools that fall into the same area 
• Experience with processes that use these tools: 
• e.g., Supporting SOC with ATA/AATP/DFI 
• e.g., Periodic recovery testing of AD using RMAD, ADRES, ASR etc. 
• Experience of AD Business Continuity and Disaster Recovery Planning and testing processes 
• Experience with Active Directory cloud synchronization services (AAD Connect/Dirsync) 

Preferred Skills:     

• Experience with the Purdue Enterprise Reference Architecture (PURA) for operational technology environments 
• Business outcomes mindset 
• Excellent interpersonal communication skills with strong spoken and written English 
• Collaborative team worker 
• Flexibility to accommodate working across different time-zones 

Required Education:      

• Bachelor’s in Computer Science   

About the Opportunity:  

Hybrid Pathways is currently looking for a Cloud Network Security Engineer for our client. The Cloud Network Security Engineer is responsible for the design, implementation, and engineering support for our client's firewall, web proxy, and DNS environments both on-premise and in the Cloud as a member of the Internet Engineering team. The Engineer position would collaboratively work with team members to support all Internet Engineering infrastructure platforms/services under the Network & Collaboration umbrella. 

The Cloud Network Security Engineer provides network security expertise in the analysis, assessment, development, and evaluation of security solutions and architectures to secure applications, operating systems, databases, and networks. Additionally, the Cloud Network Security Engineer assists in the development of network security requirements, assists in technical regulatory compliance efforts, evaluates security services and technologies, and reviews and documents information security policies and procedures as well as provides monitoring and oversight for alerts in this environment. 

The Cloud Network Security Engineer has a broad, generalist knowledge of public cloud infrastructure and automation in multiple cloud provider environments. They’re able to develop infrastructure software in teams and are comfortable with modern approaches to testing and code reviews. They will ideally have a specialist area in network security (firewalls, web proxy, DNS/IPAM) but are able to turn their attention to a research spike and learn something new rapidly. This role will include capabilities on Amazon Web Services, Microsoft Azure, and GCP. This is a 6-month opportunity with the possibility to go full-time for the right candidate.

Responsibilities:      

• Consult with and train other units to ensure that problems are resolved, and effective knowledge transfer has occurred when new PC and/or server hardware/software is introduced to the environment 
• Anticipate and document the financial implications of assigned work 
• Serve as point of escalation for less experienced staff, involved in the determination of the need for vendor assistance in problem resolution 
• Provide team leader functions for projects (system upgrades, changes) 
• Train others on their own team to enable them to support the environment 
• Keep abreast of new cloud and automation developments, evaluate alternative approaches and recommend new software or modifications which enhance operations and development activities 
• Identify opportunities and make recommendations to improve availability, reliability, efficiency, performance, and overall service within the distributed computing environment and associated departments 
• Mentor less experienced team members by instructing, assisting, directing, responding to questions, and serving as an escalation point for problem resolution 
• Provide clear documentation of technical solutions and communicate plans to management and customers 
• Perform related duties as required or assigned 

Required Skills:  

• 3-5+ years of experience in Public Cloud technologies including Microsoft Azure, Amazon Web Services, and/or GCP, specifically in networking and security solutions and implementation. 
• 3-5+ years of experience in DevOps scripting and automation using tools such as Ansible, Puppet, Chef, and/or Terraform 
• 3-5+ years of technical experience with network security technologies (ex. Firewalls, proxy, and DNS/IPAM environments) 

Preferred Skills: 

• Experience with Cisco Network Security Technologies 
• Experience with McAfee or Forcepoint proxies 
• Experience with Infoblox 
• Information Technology/Cisco Certified Network Associate (CCNA) 
• Information Technology/Cisco Certified Network Professional Security (CCNP) 
• Information Technology/Linux+ Certification - Computing Technology Industry Association (Comp TIA) 

Required Education: 

• Bachelor's degree or equivalent experience in Computer Science 

About the Opportunity:   

Hybrid Pathways is currently looking for a Network Cloud Security Architect Consultant to join our team. The Network and Cloud Security Architect Consultant will provide engineering technical expertise covering a wide range of IT security and IaaS and PaaS cloud-based solutions. The position will provide a great opportunity to grow technically in a fast-paced and exciting environment. This is a combination of remote and travels onsite to clients after COVID.

Responsibilities:   

• Design, implement and support various on-premise or off-premise cloud security solutions/technologies with a specific focus on Amazon Web Services (AWS), Azure, GCP, other cloud offerings 
• Design technical solutions for Identity and Access Management, API Security, Logging and Monitoring, Network and Endpoint Security and Key Management 
• Design solution architecture in conformance to client’s standards 
• Perform information security risk assessments and threat models 
• Remediate risk by designing, engineering, and implementing controls defined by risk assessment findings 
• Run enterprise projects for IT Security and evaluate various proof-of-concept initiatives 
• Interface with various teams such as management, architecture, applications development, engineering, deployment, and operations on a regular basis 
• Draft technical designs, system deployment plans, new processes and procedures, technical risk remediation efforts, and support documentation 
• Work with architecture and engineering resources to research, evaluate, and select technologies/solutions based upon business needs and current standards 
• Develop security requirements and test plans for various security solutions followed with assistance during validation. 
• Assist in investigations and response to security incidents if required 
• Troubleshoot potential operational issues related to security solutions 
• Establish and manage relations with vendors 

Required Skills: 

• 5+ years of demonstrated security experience in a combination of technical engineering, architect, leads, or enterprise engineering roles 
• 2 + years of demonstrated experience in cloud security (experience with AWS or Azure IaaS cloud desired) including but not limited to IAM, Secrets Management, Key Management, Certificate Management, Intrusion Prevention Systems, Logging and Monitoring, Configuration Management Security, Scripting Security, API Security, etc. 
• 3 + years of demonstrated experience in network security 
• Identity and Access Management 
• Federation and Single Sign-On (e.g., SAML, OAuth) 
• Directory Services Authentication Protocols (e.g., LDAPS, Kerberos, etc.) 
• API Security including API Gateway Security 
• User and Entity Behavioral Analytics 
• Reverse proxy architecture and third-party authentication architecture 
• Python scripting a plus. 
• Experience with regulatory requirements such as PCI, GLBA, HIPAA, and SOX 
• Experience working with Enterprise Architecture standards and processes 
• Proven experience with the creation of technical diagrams and documentation 
• Ability to establish priorities, work independently and proceed with objectives 
• Strong communication skills to work with a collaborative cross-functional team of peers and departments within the company 
• Strong motivation and desire to learn 
• Strong organization skills and attention to detail 
•  IDS/IPS 
• NGFW 
• Packet Aggregation Technology (Network Packet Broker) 
• SSL decryption technology and PKI 
• Wireless Security 
• Web application firewalls and proxies 
• Endpoint security 
• Software-defined networking security and micro-segmentation 
• Experience with B2C Customer Identity Access Management for Voice including but not limited to Authentication and Authorization (Call Center, IVR, IOT, Mobile, Web, etc.) 

Preferred Skills:  

• SIEM and Data Analytics 
• Email Security 
• DLP 
• Mobile Security 
• Virtualization Security 
• Cloud Orchestration Security 
• Encryption 
• Privileged Access Management 
• Threat modeling (e.g., using MITRE’s ATT&CK threat framework) 
• Visibility and Cloud metering, performance management 
• Customer authentication and anti-fraud control design 
• Organized with attention to detail 
• Ability to manage and run enterprise projects 
• Self-starter 
• Familiar with IT Risk Control Standards and Frameworks (e.g., ISO 27001, NIST SP800-53, NIST SP800-63, OWASP, etc.) 
• Good documentation skills 

Required Education:  

• Bachelor’s in Computer Science, MIS or related field 

Preferred Education: 

• CISSP certified 
• Certifications from Cloud Security Alliance, Amazon (AWS), and Microsoft (Azure) 
• Experience in financial services 
• Coding/scripting skills 
• Customer authentication and anti-fraud experience 

About the Opportunity:  

Hybrid Pathways is currently looking for an experienced Workforce Identity and Access Management (IAM) Solution Architect & Engineer for our client. Our client requires an experienced Workforce Identity and Access Management (IAM) Solution Architect & Engineer to develop solution patterns to onboard / migrate / convert applications to the client’s target state workforce IAM architecture. The right candidate must have a strong background in designing IAM architecture for large, complex and global IAM environments that includes operational technology. This is a 7-month remote project. 

Responsibilities:   

• Development of omni-channel (Digital, Voice, Paper) standard patterns based on the target state IAM solution architecture and eco-system for client workforce members 
• Continue to drive workforce IAM solution architecture and scoping of engineering design and scoping to support the transformation initiative 
• Create engineering diagrams to support the overall solution architecture 
• Provide infrastructure-as-code examples to support the engineering diagrams 
• Maintain and update the overall solution architecture 
• Assist in building application consumption inventories and identify inventory and use cases for other IAM assets that are "unknown" 
• Solution Architecture and Engineering Diagrams for technical discovery and integration with other systems (e.g., CMDB and ITSM) 
• Support the development of basic use cases / role models for Day 1 (Birthright) access 
• Create engineering diagrams for implementation into IDMS 
• Solution Architecture Updates to Reflect Contractor Authoritative Decision 
• Support the implementation for target state digital identity records for employees, contractors and robots 
• Provide access management architecture and engineering services 
• Support the architecture and engineering for IDMS compliance across business sectors 
• Support architecture and engineering for enhancing access recertifications for better end user experience 
• Support AD / AAD architecture and engineering requirements 
• Covers the following pattern categories for IAM; 
• Registration / Onboarding 
• Authentication 
• Authorization 
• Third-party Service/API Access & Authorization 
• Invitation-Based User Registration 
• User Access Delegation 
• User De-provisioning 
• Helpdesk Processes 
• Omnichannel Services "Overlay" 
• Evaluation of current processes against the defined industry and leading practices including industry standards such as the National Institute for Standards and Technology (NIST) Special Publication (SP) 800-63; Digital Authentication, NIST Cybersecurity Framework (CSF) and NIST SP 800-53; Security and Privacy Controls   

Required Skills:  

• Senior and experienced IAM Architect (5-7 years) in creating solution architecture and engineering (design pattern diagrams) 
• Good understanding of IAM 
• Intimately familiar with IAM related protocols such as SAML, SPML, XACML, SCIM, OpenID and OAuth 
• Strong experience with Directories, SSO, Federation, Delegated administration, API gateways, SOA services 
• Experience with App Gateways, App Proxies 
• Good understanding of MFA, PAM and Risk Based Authentication 
• Deep technical understanding of IAM solutions across multiple vendors. Like Microsoft, Okta and Quest 
• Experience with NIST SP800-63 Digital Authentication Standard 
• Ability to work across teams  

Preferred Skills:   

• Business outcomes mindset 
• Directory services design experience such as AD and AAD 
• Excellent interpersonal communication skills with strong spoken and written English 
• Scripting experience 
• Implementation experience 
• Collaborative team worker 
• Flexibility to accommodate working across different time-zones   

Required Education:    

• Bachelor’s in Computer Science