Lead Cybersecurity

Job Description:

This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered.

About the Company:

Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won’t just imagine the future-you’ll create it.

About the Team:

AT&T is seeking a highly skilled Active Directory and Azure Security Engineer to join our team. The ideal candidate will have extensive experience in securing Active Directory environments with a strong focus on cybersecurity threat detection and mitigation. Proficiency in Microsoft Entra/Azure management, particularly integrating Entra ID with Active Directory, and experience with Microsoft Defender for Endpoint (MDE), Microsoft Defender for Identity (MDI), Quest Software Change Auditor, and PKI security are essential.

Key Responsibilities

• Active Directory Security Management: Ensure the security and integrity of Active Directory environments by identifying potential vulnerabilities, analyzing exposure risks, and implementing measures to protect against identity-based threats.

• Threat Detection and Mitigation: Utilize tools like Microsoft MDE and MDI to detect and respond to security incidents, ensuring timely mitigation of threats.

• Entra/Azure Management: Manage and secure Microsoft Entra/Azure environments, with a focus on integrating Entra ID with Active Directory to enhance identity management capabilities. This includes configuring and managing Entra ID / Azure Active Directory (Azure AD) services, such as Azure AD Connect, Azure MFA, and Conditional Access policies.

• Compliance and Auditing: Conduct regular security audits using Quest Software Change Auditor and Recovery Manager (RMAD) to ensure compliance with organizational security policies and standards.

• PKI Security: Manage Public Key Infrastructure (PKI) to ensure secure authentication and encryption across the network.

• GPO Implementation: Develop and implement Group Policy Objects to enforce security configurations and maintain network efficiency.

• Collaboration and Leadership: Collaborate with security and IT teams to design and apply identity management best practices, including least privilege access and role-based access controls. Provide guidance and mentorship to junior engineers on identity exposure best practices and techniques.

• Staying Updated: Stay current with the latest trends and developments in identity security, exposure analysis, and related technologies (ie. Zero Trust, Least Privilege, Tier Zero security posture, etc.).

Technical Requirements

• Education: Bachelor's degree in Computer Science, Cyber Security, Information Technology, or a related field; or equivalent work experience.

• Experience: Six or more years of experience with Active Directory, including security management and identity exposure analysis. Experience with Entra/Azure management and Microsoft MDE/MDI is required.

• Tools and Technologies: Proficiency in Quest Change Auditor, RMAD, PKI security, and GPO management. Strong understanding of AD and Entra ID architecture, security configurations, and identity lifecycle management.

• Scripting and Automation: Proficiency in scripting and automation tools, like PowerShell, with the ability to leverage other scripting languages as needed.

• Certifications: Relevant certifications such as Microsoft Certified: Identity and Access Administrator Associate are highly desirable.

Soft Skills

• Communication: Excellent communication skills to articulate complex technical concepts to non-technical stakeholders.

• Problem-Solving: Strong problem-solving skills to address complex security challenges.

• Adaptability: Ability to adapt quickly to evolving cybersecurity threats and technologies.

• Leadership: Proven leadership skills to guide teams through high-pressure security incidents.

• Collaboration: Strong collaboration skills to work effectively with cross-functional teams.

Job Contribution:

-Senior level technical expertise. Deep technical knowledge and subject matter expert on