Administer and manage the company's Active Directory (AD) and Entra ID environments, implement and manage Group Policies (GPOs) to ensure compliance and security. Ensure system availability, capacity, and performance for IAM technologies, including ownership for logging, monitoring, and alerting standards, processes, and systems, monitor and manage access controls, user permissions, and role-based access. Plan and manage system upgrade and patching projects, in collaboration with local and offshore teams, and platform subject matter experts (SMEs), communicate with vendors as needed to understand and research open issues, new versions, or changes. Explore and help build automation to enhance end-user experience, define and develop policies and procedures for system operations to ensure consistency, reduce rework, and improve quality. Ensure directory services adhere to company security policies and best practices. Provide second and third-level support for directory services-related issues (Provide On-call support, manage support tickets, engage with business teams as need be), perform root cause analysis of directory services outages and implement corrective actions. Maintain current, relevant industry knowledge to understand evolutions and advancements in the marketplace which could bring value to the team or the company. Collaborate with IT teams to integrate directory services with other applications and systems. Other duties as needed. Must Haves 10 years of IT Security or Identity & Access Management experience with good understanding of principles, policies, and best practices. Strong expertise in Microsoft Active Directory (AD DS), including domain services, replication, trusts, and Group Policy management. Hands-on experience with Microsoft Entra ID (Azure AD), hybrid identity, and directory synchronization technologies. Deep understanding of authentication protocols, including LDAP/LDAPS, Kerberos, SAML, OAuth, and OpenID Connect (OIDC). Proficiency in PowerShell scripting and automation for directory administration, reporting, and operational efficiency. Experience troubleshooting complex authentication, directory synchronization, and identity-related issues in enterprise environments. Strong knowledge of Active Directory security, privileged access controls, certificate management, and identity security best practices. Responsibilities may include the following and other duties may be assigned. Responsible for the planning, design and build of security architectures; oversees the implementation of network and computer security and ensures compliance with corporate cybersecurity policies and procedures. Monitors cybersecurity requirements for local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, and related network devices. Performs security assessments of applications and systems using penetration and vulnerability testing and risk analysis.

Function Specific:

Specialize in understanding cyber adversary tactics, technics, and procedures in the interest of protecting Healthcare's network. Ability to detect and mitigate cyber incidents and vulnerabilities. Cyber defense operations, specialized penetration testing and threat Client & forensics as well as advanced security management skills. Development expertise in cybersecurity considerations to meet evolving cloud computing, web development and mobile device requirements.

Technology:

Using technologies, processes, and practices to protect computers, networks, programs and data from unauthorized access or attacks that are aimed for exploitation. Monitor and protect products and systems.

SPECIALIST CAREER STREAM

Typically an individual contributor with responsibility in a professional discipline or specialty. Delivers and/or manages projects assigned and works with other stakeholders to achieve desired results. May act as a mentor to colleagues or may direct the work of other lower level professionals. The majority of time is spent delivering and overseeing the projects - from design to implementation - while and adhering to policies, using specialized knowledge and skills normally acquired through advanced education.

DIFFERENTIATING FACTORS

Autonomy:

Seasoned individual contributor. Works independently under limited supervision to determine and develop approach to solutions. Coaches and reviews the work of lower level specialists; may manage projects / processes.

Organizational Impact:

May be responsible for entire projects or processes within job area. Contributes to the completion of work group objectives, through building relationships and consensus to reach agreements on assignments.

Innovation and Complexity:

Problems and issues faced are difficult, and may require understanding of multiple issues, job areas or specialties. Makes improvements of processes, systems or products to enhance performance of the job area. Analysis provided is in-depth in nature and often provides recommendations on process improvements.

Communication and Influence:

Communicates with senior internal and external customers and vendors. Exchange information of facts, statuses, ideas and issues to achieve objective, and influence decision-making.

Leadership and Talent Management:

May provide guidance, coaching and training to other employees within job area. May manage projects, requiring delegation of work and review of others' work product.

Required Knowledge and Experience:

Requires advanced knowledge of job area combining breadth and depth, typically obtained through advanced education combined with experience. May have practical knowledge of project management. 4 years of experience with a with a high school diploma or equivalent.