IT Security Analyst - Active Directory

Job description

Come to work and be ready to think on your feet, grow your skills, and embrace the many opportunities. Our Distribution Centers are the key to getting new products out to TJ Maxx, Marshalls, HomeGoods, Sierra, Winners, Homesense, and TK Maxx. To keep up with our ever-changing inventory, we stay nimble and adaptable. No day is the same, and that’s just how we like it. Every shift is a new opportunity to Discover Different—and support each other along the way.

Posting Notes: Marlborough  || MA  

 

TJX is looking for an experienced Cyber Security Analyst to become a key contributor on our IAM team. As a member of the team you will help develop and implement strategy around Identity and Access Management (IAM) systems, including Azure Active Directory, Oracle Identity Cloud (OIDCS), Active Directory (AD), and Centrify.

This position will assist in implementing security controls to ensure the confidentiality, integrity and availability of TJX’s IT assets. This position will responsible for the security implementation of directory services and lifecycle governance processes around Active Directory, Azure AD, OIDCS and Centrify objects, including user accounts, group management, and OU structure as it relates to security and GPOs.

 

Specific responsibilities include:

·  Design and Implement industry-aligned security controls to TJX IAM platforms which balance the complex, global demands of TJX business users with the objectives of security to keep TJX secure
·  Mentor more junior members of the team and extend your technical skills and knowledge through training, workshops and conference attendance
·  In partnership with Architecture and IAM Team peers, own and lead the IAM AD, Azure AD, OIDCS and Centrify security strategy (Infrastructure will NOT be owned by IAM or this role)
·  Work within an Agile team to design and deliver enterprise solutions
·  Troubleshoot and resolve AD, GPO, Kerberos, Active Directory Federated Services, MS Azure, Centrify and other password authentication and authorization systems (this is not a front-line support role, however the candidate is expected to help resolve the most complex issues)
·  Create and update technical documentation including design documents, use cases and runbooks
·  Serve as a technical expert for second and third level support groups
·  Collaborate and communicate with Security Architecture, Security Consulting, Enterprise Infrastructure and other internal departments and vendor partners to deliver solutions
·  Provide problem solving leadership based on experience with directory services, IAM systems and authentication and authorization technologies, solutions and best practices
·  Act as a member of the Identity and Access Management team in providing timely and efficient support to assigned operations
·  Follow and apply configuration and security standards and policies within a defined Change Management process
·  Ensure that system improvements and changes follow the corporate change management procedures and are implemented correctly and completely, and monitor all effects of the modifications
·  Architect medium to complex business systems using a mixture of standard and custom hardware and software to meet TJX business needs
·  Works under general direction from Manager of IAM
·  Establish/recommend policies on system use and services
·  Provide after hours and on-call level 2/3 support as part of a rotation

Minimum Qualifications:
·  Passionate cyber security professional, eager to learn and build upon existing skills into new technologies or applications of technologies
·  Demonstrated expertise in designing and architecting AD Infrastructure, including design and implementation of Group Policy and forest/domain design for large-scale organizations.
·  Proven experience planning and designing OU structure and Group Policy Objects to ensure compliance of company policies and standards for user accounts and group objects
·  Experience with Microsoft Advanced Group Policy Management, experience initiating a GPO governance model highly preferred
·  Extensive experience scripting against Azure AD and AD to automate processes for data collection and to make changes
·  Demonstrated expertise with federation protocols, standards, best practices and tools, including SAML2, OAuth and OpenID Connect – Azure, Okta or CA SiteMinder
·  Bachelor’s degree in Cyber Security, Information Technology or related field or equivalent experience
·  6+ years’ experience in Information Technology in an Enterprise environment with at least 10,000 employees and contractors required, including 5 years of experience working in a large IT organization (200+ people) with distributed operations

Additional Qualifications
·  High level of energy, perseverance, and confidence to act as an agent of change in a complex and demanding organization
·  Certifications: CISSP, MCSE: Server Infrastructure, MCSA: Windows Server 2012, MCITP: Enterprise Administrator on Windows Server 2008
·  Advanced Degree in Cyber Security, Information Technology or related field

Come Discover Different at TJX—we think you’ll find that it’s so much more than a job. We move a lot of inventory—at all times of the day—and that takes working, learning, and growing together. When you’re a part of our TJX family, you have the full support of a diverse, close-knit team in our Distribution Centers.

As you think about where to work, know that we take care of our people. We offer competitive pay and great benefits. We consider all applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, gender identity and expression, marital or military status. We also provide reasonable accommodations to qualified individuals with disabilities in accordance with the Americans with Disabilities Act and applicable state and local law.

 Posting Notes: Marlborough  || MA

Nearest Major Market: Boston
Job Segment: Corporate Security, Database, Oracle, Consulting, Security, Technology