IGS Energy is seeking a curious and innovative Security Engineer with a passion for information security, customer service, and compliance. The role involves guiding security best practices, managing Azure Entra infrastructure, and ensuring minimal risk exposure through effective security programs.
Responsibilities:
- Architect and manage Azure Entra infrastructure, including tenant design, hybrid identity configurations, and conditional access policies
- Maintain and optimize Active Directory environments, including domain controllers, group policies, organizational units, and security hardening
- Design and implement Active Directory Federation Services (ADFS) and manage complex federation trusts between internal and external identity providers
- Plan and execute domain trust relationships, including forest trusts, external trusts, and realm trusts across complex enterprise environments
- Lead identity platform through organizational transitions, including tenant-to-tenant migrations, directory consolidations, and identity lifecycle transitions
- Manage multi-tenant Microsoft 365 migrations, ensuring secure data transfer and seamless user transitions during organizational changes
- Develop and maintain disaster recovery and business continuity plans for identity infrastructure
- Implement identity security best practices, including privileged access management, MFA enforcement, and identity protection policies
- Monitor identity infrastructure health, performance, and security posture, responding to incidents and anomalies
- Collaborate with business stakeholders during organizational transitions to ensure smooth identity transitions with minimal business impact
- Work closely with IT and other departments to ensure security measures are integrated into all aspects of the organization's technology and operations
- Apply knowledge of information security principles and practices
- Ability to think strategically but willingness to handle, first-hand, the mechanics of technology services required by the business
- Other duties and responsibilities as assigned
Requirements:
- Proven experience managing complex Microsoft 365 environments, particularly multi-tenant migrations and consolidations
- Strong understanding of Active Directory Federation Services, domain trusts, and forest architectures
- Hands-on experience with Azure Entra, including conditional access, privileged identity management, and hybrid identity configurations
- Solid understanding of authentication protocols (SAML, OAuth 2.0, OpenID Connect, Kerberos, LDAP)
- Exceptional organizational skills, follow through, and multitasking abilities
- Decisiveness, good judgment, analytical aptitude, and problem-solving skills to act with authority and take risks in an environment with little direction from others
- Excellent communicator with strong organizational savvy and leadership skills necessary to interface with and influence all levels of organization
- Ability to work in a fast-paced and dynamic environment
- Minimum of 5 years of technical experience, with at least 3 years of security focus
- Demonstrated knowledge of, and experience in implementing security technologies and processes
- Applicants must be authorized to work in the US on a full-time basis
- Professional certifications within security-related areas, while not a minimum requirement, would be highly desirable