Systems Architect jobs in Rock Hill, SC

RESPONSIBILITIES:
Kforce has a client in Rock Hill, SC that is seeking an Identity Architect.

Summary:
In this role, the Identity Architect provides design, implementation and support of Microsoft's on-premises and cloud identity platforms including Microsoft Windows Active Directory, Entra ID, Intune, and Microsoft Active Directory Federation Services. The Identity Architect is also a subject matter expert in using GPO to implement security standards on Domain Controllers and Domain Member Servers. This hands-on position will lead the vision, architecture and strategy of the identity and access platforms. The ideal candidate will possess a strong IAM background with expertise in identity governance, AD, Entra ID, Conditional Access Policies, SSO, MFA, and ZTNA concepts such as Entra Global Secure Access(GSA).

Responsibilities:
* Manages and architects enterprise solutions including, but not limited to Active Directory, Entra ID, Intune, M365 Enterprise Applications, Conditional Access Policies, RBAC, Application Authentication, and Identity Management
* Identify gaps in security, consult with cyber security, and implement protocols to reduce exposure and manage risk
* Prepare and deliver training and documentation to the Cyber, Infrastructure and Operations teams
* Adapt environment to new best practices and standards as they emerge
* Anticipates and mitigates potential attacks through close monitoring of access platforms and coordination with the cyber security team
* Promotes and contributes to the continuous improvement of the security strategy based on risk prioritization and business objectives
* Assist team with day-to-day management and troubleshooting including, but not limited to AD, Entra ID, GSA, DNS, DHCP, CA, and vulnerability management
* Responds to and resolves helpdesk tickets relevant to job duties
* Participates in project management activities, as assigned

REQUIREMENTS:
* Bachelor's degree in Information Systems or Computer Science
* One or more of the following: Microsoft Certified Cybersecurity Architect Expert, Microsoft Certified Azure Security Engineer, CIAM, Microsoft Identity and Access Administrator, Microsoft Certified Azure Administrator
* 9 years of relevant experience in the IT field
* 9 years of increasing responsibility architecting and delivering complex Active Directory and Entra ID hybrid solutions on a global scale
* Expert understanding of, but not limited to, major authentication/authorization platforms/standards including certificate authentication, password less authentication, ADFS, PIM, PAM, RADIUS, Hello, Multifactor authentication, conditional access, RBAC (role-based access control), Kerberos, and SAML
* Demonstrated expertise with architecting and administering a tiered active directory environment
* Strong experience with PowerShell scripting and automation
* Strong knowledge of Windows Server 2016, 2019, 2022, Linux
* Familiarity with data governance and compliance requirements
* A strong technologist with pragmatic view and creative mind, and a natural collaborator with line of business architects, engineers, developers, application owners, service providers, and senior management
* Due to the requirements of this position, the selected incumbent must be qualified to access, and implement and maintain access restrictions on, Controlled Unclassified Information at restriction levels including NOFORN
* Project Management skills
* Excellent communication skills (written and verbal)
* Demonstrated ability to assume independent and team-based responsibilities
* A strong technologist with pragmatic view and creative mind, and a natural collaborator with line of business architects, engineers, developers, application owners, service providers, and senior management
* Strong teamwork, interpersonal and customer service skills a must
* Highly organized

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.