Directory Security Engineer, Capital One

• High School Diploma, GED or equivalent certification
• At least 4 years of experience in Cyber Security, Computer Science, Information Technology or Information Systems
• At least 3 years of experience with Active Directory
• At least 2 years of experience securing enterprise level Active Directory environments
• At least 2 years of experience monitoring and analyzing logs from Active Directory
• At least 2 years of experience developing scripts or queries to generate reports against Active Directory, LDAP, or SQL

Desirable

• Capital One is seeking an experienced engineer within the Cyber Identity and Access Management organization to be a member of a team responsible for managing and securing Capital One’s enterprise Directory Services that includes Active Directory, Azure Active Directory, AWS managed Microsoft Active Directory, and Google Cloud Domain Directory
• Candidates for this role should have experience in engineering, deploying and supporting comprehensive and secure authentication solutions
• In addition, this includes performing risk assessments, addressing key attack vectors and driving automated solutions to complex problems
• Analyze, design, and support a highly complex, enterprise level Active Directory and Single Sign On services in a hybrid on-premise and cloud hosted environment
• Protecting and securing Capital One’s enterprise Active Directory environments, including on-premise and cloud environments from Amazon, Microsoft, and Google
• Manage enterprise cloud infrastructures in AWS, Azure, and Google cloud platforms
• Develop automated solutions using scripts, pipelines, and cloud based server-less computing platforms
• Manage and automate vulnerability remediation and perform security testing to proactively identify and remediate security risks within the Active Directory environment
• Participate in the analysis, troubleshooting, investigation and remediation of operations or security related incidents
• Develop and generate periodic security audits to ensure the various platform environments adhere to Capital One’s and industry standard security, risk and compliance requirements
• Participate in disaster recovery, capacity planning, performance monitoring and maintenance to ensure high availability
• Support tools from Microsoft, Quest, and OneID to better protect the environment and monitor for security breaches, intrusions and irregular system and user behavior
• Partner with CyberSecurity teams to support forensic investigations and ensure integration with enterprise SIEM systems such as Splunk
• Be familiar with technologies such as, SSO, FIDO/FIDO2, Passwordless, AuthZ, AuthN and products like, Ping, Okta, and Windows Hello