Lead Cybersecurity

Job Description:

“This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered”

About the Company:

Join AT&T and reimagine the communications and technologies that connect the world. Our Consumer Technology experience team is delivering innovative and reliable technology solutions to power differentiated, simplified customer experiences. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won’t just imagine the future-you’ll create it.

About the Team:

AT&T is seeking a highly skilled Active Directory and Azure Security Engineer to join our team. The ideal candidate will have extensive experience in securing Active Directory environments with a strong focus on cybersecurity and identity & access management (IAM).  Background with technologies such as Silverfort or Microsoft solutions to extend MFA to sensitive resources would be a plus.  Goal would be to gain visibility and insights for the corporate legacy AD environment, then apply risk-based policies to protect against modern threat vectors.  Proficiency in Microsoft Entra/Azure management, particularly integrating Entra ID with Active Directory, and experience with threat detection & protection tools such as Microsoft Defender for Endpoint (MDE), Microsoft Defender for Identity (MDI), Quest Software Change Auditor, and PKI security are essential.

Key Responsibilities:

• Active Directory Security Management: Ensure the security and integrity of Active Directory environments by identifying potential vulnerabilities, analyzing exposure risks, and implementing measures to protect against identity-based threats.

• Identity Management: Experience with user provisioning, account creation, and lifecycle management.  Administration of Silverfort a plus.

• Cloud Integration: Experience with Azure AD/Entra and hybrid AD environments including Conditional Access and MFA policies.

• Entra/Azure Management: Manage and secure Microsoft Entra/Azure environments, with a focus on integrating Entra ID with Active Directory to enhance identity management capabilities. This includes configuring and managing Entra ID / Azure Active Directory (Azure AD) services, such as Azure AD Connect, Azure MFA, and Conditional Access policies.

• Compliance and Auditing: Conduct regular security audits using Quest Software Change Auditor and Recovery Manager (RMAD) to ensure compliance with organizational security policies and standards.

• IAM Tools: Familiarity with IAM solutions such as SailPoint and PAM solutions such as CyberArk.

• GPO Implementation: Develop and implement Group Policy Objects to enforce security configurations and maintain network efficiency.

• Collaboration and Leadership: Collaborate with security and IT teams to design and apply identity management best practices, including least privilege access and role-based access controls. Provide guidance and mentorship to junior engineers on identity exposure best practices and techniques.

• Staying Updated: Stay current with the latest trends and developments in identity security, exposure analysis, and related technologies (ie. Zero Trust, Least Privilege, Tier Zero security posture, etc.).

Technical Requirements

• Education: Bachelor's degree in Computer Science, Cyber Security, Information Technology, or a related field; or equivalent work experience.

• Experience: Six or more years of experience with Active Directory, including security management and identity exposure analysis. Experience with Entra/Azure management and Microsoft MDE/MDI is required.

• Tools and Technologies: Proficiency in Quest Change Auditor, RMAD, PKI security, and GPO management. Strong understanding of AD and Entra ID architecture, security configurations, and identity lifecycle management.

• Scripting and Automation: Proficiency in scripting and automation tools, like PowerShell, with the ability to leverage other scripting languages as needed.

• Certifications: Relevant certifications such as Microsoft Certified: Identity and Access Administrator Associate are highly desirable.

Soft Skills:

• IAM Project Implementation: Experience in planning and executing IAM projects.

• Communication: Excellent communication skills to articulate complex technical concepts to non-technical stakeholders.

• <