Directory Services Security Engineer

Who we are

American International Group, Inc. (AIG) is a leading global insurance organization. AIG member companies provide a wide range of property casualty insurance in approximately 70 countries and jurisdictions. These diverse offerings include products and services that help businesses and individuals protect their assets and manage risks.

We’re also committed to making a positive difference for our colleagues and in the communities where we work and live. We encourage colleagues to give back to the causes they care most about, supporting these efforts through our Volunteer Time Off and Matching Grants Programs.

Get to know the business

At AIG, technology is at the heart of everything we do, from underwriting risks to processing claims. The Information Technology team equips our colleagues with the latest tools to complete their work efficiently and with the highest standards of excellence. The team is responsible for shielding the company’s systems from security risks, while designing technology strategies that enable AIG’s businesses to achieve their goals. AIG’s Information Technology functions include enterprise architecture, software and systems engineering, cybersecurity, and technology risk and compliance.

About the role

The Directory Services Security Engineer will be responsible for managing and supporting activities related to Active Directory security services, including Group Policies (GPO), Domain Name Services (DNS), and multiple Quest products, such as Change Auditor and Recovery Manager.  In this role, you will be responsible for architecting, engineering and deployment of security solutions to solve complex challenges in our directory services and IAM environments. The Directory Services Security Engineer will be for responsible for identifying opportunities to strengthen security, drive automation and promote being well managed. Other responsibilities this role includes, addressing security findings, analyzing large data sets in SIEM products such as Splunk and Snowflake or similar, and building reports in tools such as Enterprise Reporter. This role will provide you with an opportunity to help shape the direction of identity and directory security for AIG.

We have offices in Jersey City, NJ, Atlanta GA, Charlotte, NC, Reston, VA, Chicago, IL, Houston, TX and Dallas, TX and will consider applicants from any of these locations or applicants willing to relocate.

Responsibilities for this role include:

• Coordinate and/or implement new or enhanced security products and toolsets on supported platforms
• Participate in governance, audit and compliance support activities, as they pertain to identity and access management security
• Identify, define and implement continuous process improvements utilizing modern tools, technologies, and methodologies
• Architect, engineer, and deploy large-scale security initiatives in Active Directory / Entra ID including domain and application migrations between platforms
• Participate in implementation of large-scale security initiatives for new technologies being deployed globally
• Conduct regular configuration and security assessments of Active Directory and Azure and provide recommendations for changes based on industry standards and security guidelines utilizing tools such as, Microsoft On-demand Assessment, Bloodhound, Purple Knight, etc.
• Monitor AD logs to identify any potential security incidents, respond to security findings, and develop and maintain incident response procedures
• Support large-scale Active Directory domain consolidations and domain migration activities with a security-based approach
• Perform health checks, discoveries and cleanup of Active Directory and Entra ID Infrastructure
• Analyze, review and manage Active Directory services such as DNS, Group Policy etc.
• Document platform technical issues, analysis, communications, and resolutions as reference for future issue resolution in SharePoint, Confluence, ServiceNow or similar medium.
• Develop documentation such as, knowledge articles, How-to documents, and presentations for large audiences.
• Provide technical assistance, support and troubleshooting for IAM-related issues.
• Support team during incident management, problem management and disaster recovery activities

What we're looking for:

• 5+ years of Active Directory/Entra ID hands-on technical experience in an enterprise
• 4+ years supporting and implementing Active Directory security related products, such as Quest Change Auditor, Enterprise Reporter and Recovery Manager, or similar
• 4+ years of hands-on technical experience Identity and Access Management (IAM) on Active Directory.
• 3+ years of hands-on technical experience with tools
• 3+ years writing code, including sc