Job summary:
Title:
Windows Infrastructure Consultant
Location:
Phoenix, AZ, United States
Length and terms:
Long term - W2 or C2C
Position created on 01/26/2022 07:48 pm
Job description:
** Webcam interview.** Initial PO for 12 months; usually projects with this customer goes for 3+ years *** Initial remote due to covid then onsite.
JOB SUMMARY:
The Technology Services Division of the Arizona State Retirement System (ASRS) is seeking an experienced Infrastructure Systems Engineer to fill a role within our Enterprise Infrastructure Services (EIS) Team for several top-priority projects.
Please note: Do not apply for this position without experience and skills outlined below. This position is not a day-to-day/operational system administrator working on existing, in-place systems.
Candidates must have extensive, expert-level experience analyzing, designing, building, testing and deploying complex systems related to the following technologies:
- Enterprise Windows File Servers with an emphasis on network file shares, DFS, NTFS permissions for least-privileged access.
- Role-based access controls (RBAC) leveraging nested Active Directory groups for clean control over rights management/authorization of applications and file server permissions.
- Auditing, analyzing and reporting on all of the above using tools such as Icacls, Quest Change Auditor and the like.
- Powershell for automation and data analysis.
Selected candidate will be dedicated to developing and deploying solutions on the following projets:
- ASRS intends to start from scratch with a brand new file server architecture, security model and associated policies, processes and procedures. Candidates shall have experience with designing/building/deploying new file servers according to best practices that strike an acceptable balance between usability and security.
- ASRS has a role-based active directory groups security model in place today; however, a re- org was performed and now, this structure must be analyzed and corrected to reflect the current state of the agency. A method to update groups to change in-step with future organizational changes will also be development and implemented.
Note: Depending on the effort level and run rate of the aforementioned project, additional infrastructure-related projects may be assigned to the selected candidate.
THE POSITION DUTIES INCLUDE:
- Serve as technical Infrastructure SME/practitioner on an agency-wide projects to:
- Re-architect the ASRS file server infrastructure using best practices for data classification, tree design and least-privileged access.
- Adjust/re-architect role-based Active Directory groups governing file server and application authorization to match current organizational structure and job functions.
- Develop change auditing and alerting mechanisms to detect unauthorized/incorrect permission conditions.
- Develop data-owner access attestation process.
- Establish/update policies and procedures governing unstructured data storage.
- Establish multifactor authentication for critical systems access.
- Assist project manager and ASRS management in creating project vision documents to define the project requirements, solutions, benefits, costs, risks, etc.
- Research technologies related to project solutions and present recommendations/pros/cons/costs for available options.
- Perform hands-on system creation/configuration/troubleshooting/issue resolution forb assigned projects.
- Regularly report status/progress/risks/issues.
- Daily/weekly - Record time spent on project assignments in JIRA System.
KNOWLEDGE, SKILLS & ABILITIES:
- Bachelors degree in Computer Science or equivalent experience.
- Excellent oral and written communication skills.
- Minimum 7 years experience creating and operating Microsoft Windows File Servers including DFS, DFS replication, ABE, EFS, SMB Shares/NTFS, folder structures in an enterprise business environment with multiple data owners.
- Minimum 7 years experience with Microsoft Active Directory, especially in the area of role- based groups and thoughtful group nesting to govern access to applications and files.
- Minimum 5 years experience with PowerShell to query large data sets and automate bulk commands/functions.
- Minimum 5 years experience creating/managing login scripts and Active Directory Group Policy.
- Experience working on medium-large scale infrastructure projects, especially related to Windows file servers and active directory groups.
- Ability to organize, analyze and interpret large, complex data sets.
- Proven ability to multi-task on concurrent projects.
- Ability to document status/progress on project activities and record time spent in a timely, accurate and complete manner.
IDEAL CANDIDATE:
- Certifications in relevant technologies are desirable.
Contact the recruiter working on this position:
The recruiter working on this position is Abaka Kartik(Shaji Team)
His/her contact number is +(1) (571) 2812089
His/her contact email is karthik.abaka@msysinc.com
Our recruiters will be more than happy to help you to get this contract.