Active Directory Adfs and Ad Connect Ldap

**ACTIVE DIRECTORY ADFS AND AD CONNECT LDAP**
**-**
**(**
**0101705**
**)**

**Description**

**Job Description**:
Working within the End User Computing team (EUC) which forms part of the wider IT Operations Team and
reporting to the EUC Operations Manager, the EUC IAM Engineer performs an integral role in the
configuration and support of Identity and Access Management (IAM) platforms across EUC with
responsibilities including Active & Azure Active Directory (AD / AAD), AD Connect in a Hybrid environment,
ADFS, Enterprise Applications, B2B and B2C to name but a few.
As part of the role, you will work towards continual change and improvements to ensure a reliable, user
friendly and secure experience by securing data and ensuring its integrity during transfer as well as
following and contributing to the EUC Strategy and Road Map, with a split across projects and business as
usual work (BAU). The individual will be an experienced technical specialist who can demonstrate success
in the above-mentioned key areas along with a deep technical understanding of current security standards
and protocols, including but not limited to SAML, OAuth, LDAP, Kerberos & SCIM.
Responsibilities/Accountabilities
Role Specific Responsibilities & Accountabilities
- Maintain the stability, integrity and availability of our core Endpoint Management Systems

primarily including Domain Controller availability and Active Directory.
- Have responsibilities that will include privileged access management (PAM) and Identity

Governance and Administration (IGA).
- Work with EUC Technical Lead, EUC Lead Solution Architect and the EUC Operations Manager

Continual Improvement plans and Team/Department roadmaps.
- Provide 3

rd line support for the wider EUC team on complex, problem, and major incidents, where
required working in collaboration with the wider IT Operations Team.
EUC IAM Engineer AA Standard Job Description
Job Ref: xxxx Evaluation date: xxxx page 2 of 3
Previous reference: xx-000
AA Group Standard JD Template v1.0 (14.8.15)
- Experience with raising Microsoft support calls to full resolution state
- Contribute to the design, delivery, and management of EUC Projects using best practice and proven

methodologies.
- Ensure the EUC Incident and Request queue is monitored and managed in line with agreed SLA’s.
- Maintain our corporate standards including infosec policies or those that are related to EUC or the

wider business.
- Providing input to creating End User materials such as brochures and training leaflets across all

device types.
Standard Responsibilities
Ensure Treating Customers Fairly (TCF) is embedded in the culture of the AA to deliver the six customer
outcomes of right culture, right information, right delivery, right targeting, right advice, and right post sales
treatment.
Health and safety requirements
Conduct yourself, and carry out work, to ensure compliance with the Company’s Health, Safety and
Environmental Policies.
The Individual
Capability, Knowledge and Experience:

- Must have excellent and demonstrable working knowledge of Modern identity & Access

Management Systems in a Hybrid model with a minimum of 5 years experiencing working as a
technical expert in the following fields:

- Active Directory & Azure Active Directory (AD / AAD) / AD Connect / Azure AD Seamless
Single Sign-On (Azure AD Seamless SSO).
- Active Directory Federated Services (ADFS)
- Conditional Access
- Multi Factor Authentication (MFA) / Self-Service Password Reset (SSPR)
- Role Based Access Control (RBAC) / AAD Privileged Identity Management (PIM)
- Enterprise Application (SSO) & Application Registration
- Strong working knowledge of current security standards, protocols & features including but not

limited to SAML, OAuth, LDAP, Kerberos, SSO & FIDO.
- Strong experience in using cloud-based identity models including external identities i.e., B2B & B2C
- Highly advantageous area of Technical Experience although not essential include:

- Microsoft Identity Manager (MIM)
- Azure AD User Provisioning (Joiners / Movers / Leavers)
- Azure Identity Governance (Identity Protection, Access Reviews, Entitlement Management)
- PKI Certificate Management.
- Great communication skills, both verbally and in writing, with colleagues, clients and customers at

all levels, a strong communicator who develops relationships for mutual gain.
- Highly motivated and solution focussed.

management.
EUC IAM Engineer AA Standard Job Description
Job Ref: xxxx Evaluation date: xxxx page 3 of 3
Previous reference: xx-000
AA Group Standard JD Template v1.0 (14.8.15)
- Takes personal ownership and pride in the quality of solutions delivered.
- Take initiative to keep own skills up to date and maintain awareness of developments in the IT

industry.
- Good knowledge of analytical techniques, methods, and problem-solving skills.
- Comfortable working with senior staff, both business and IT.
- Experience of working with outsource partners and delivering solutions into