About us
StrataNorth is a young Boston-based IT advisory consultancy passionate about providing our customers with the best outcomes. We help businesses of all sizes, from startups to large enterprises, who understand that having the right strategy, technological footprint, secured environments, and a focus on customer-centricity is directly tied to their ability to stabilize, scale, and sustain their growth. Our consultants utilize a comprehensive, in-depth, and analytical approach to deliver successful outcomes that help our customers make smarter business decisions. We provide exceptional world-class service with solutions tailored to our customer’s business. We are committed to being solution agnostic, allowing us to consider a wide range of solutions to provide outcomes that truly meet our customers' business needs.
Vision Statement
Create innovative solutions that empower every organization to deliver on its promises.
Mission Statement
To deliver strategic advisory services of unmatched quality by continuously being inspired by change, doing all we do with integrity, and driving excellence in our execution.
We are seeking an Identity and Access Management engineer who can contribute expert knowledge to help our customers streamline and secure their complex security and identity infrastructures. The Senior Identity and Access Management Engineer will be responsible for architecting and engineering solutions to solve complex business problems, creating project plans for analysis, running workshops, overseeing third-party partner implementations, creating procedures, and performing assessments of identity solutions.
Our engineers conduct in-depth analyses, identify technical requirements and industry trends, and establish best practices. The Consultant will be customer-facing, lead project engagements, and provide advisory and guidance to the customer at the executive level. This role will require communicating complex identity and security concepts and their direct business value to customers. The ideal candidate will produce high-quality deliverables relying on their exceptional interpersonal and communication skills.
Responsibilities
Identity Engineering
- Design, implement, and maintain identity platforms and authentication systems and protocols for customer organizations such as Active Directory, Azure AD, SAML/SSO, Okta, etc.
- Provide analysis, implementation design, project planning, and project lead services for customer Active Directory Migrations and Cloud Suite Migrations (Azure, Google Workspace, etc.).
- Act as a technical subject matter expert and advisor to organizational IT teams for the aforementioned migration efforts
- Work alongside members of customer IT teams focused on Identity and Security to establish operational procedures, introduce new abilities, and offer suggestions for creating guidelines and frameworks for managing identities and access.
- Perform supplemental administration and maintenance of identity solutions as needed.
- Troubleshoot issues and escalate them with vendor support.
- Provide design and configuration documentation to organizational IT teams to support
- Identify new concepts and operational and design improvements to existing systems and processes.
- Coordinate the implementation of process improvements and automation and manage escalations, issues, or high-priority tasks.
- Orchestrate the execution of enhancements in procedures and automation.
- Provide mentorship and guidance to junior customer IT teams.
General consulting
- Ability to disseminate customer business needs, determine requirements, provide consultative guidance, and drive the analysis required to solve their business challenges
- Understand organizational practices, technology trends, and industry best practices.
- Analyze the people, processes, and technology as they align with organizational change management for the business.
- Serve as the key trusted security advisor to the customer.
- Engage with customers to define the project scope and create plans, timelines, and roadmaps.
- Provide project management and drive projects to completion.
Candidate Requirements
Education
- 10+ years of Identity and Systems Management
- Preferred Certifications: Microsoft MCSA or MSCE in relevant discipline
- 5+ years as a principal engineer level
Technical Knowledge
- Expert-level knowledge (TIER 4) of the following areas: Active Directory (Child domains, multi-forest organizations, Group Policy, Domain Controllers, DNS), LDAP, RBAC Best Practices.
- High proficiency in the following areas: Powershell Scripting, Performing Migrations (Active Directory, File Servers, Cloud Suites), Microsoft Cloud (Azure AD, Office 365, Microsoft Teams, Sharepoint, Exchange Online), File Systems (DFS-N, DFS-R, Windows Permissions on File Servers).
- Experience with the following capabilities a plus: Identity platforms (CyberArk, SailPoint, OKTA, Ping Identity, DUO), Power Automate, Azure AD App Registrations, Authentication (SAML/SSO, OAuth, OpenID Connect), NPS, Mail Gateways (Proofpoint, Cisco, Mimecast, etc.).
- Fundamental understanding of the following technology concepts: Networking (Firewalls, VPNs, Switching, Routing), Storage, and Virtualization (SAN, NAS, VMware, Hyper-V, Hyper Converge, etc.)
Professional Acumen
- Adept in process improvements, automation, and high-priority task management, as well as effectively handling escalations and issues
- Strong analytical and problem-solving skills, attention to detail, and ability to work independently and with cross-functional teams on complex problems
- Advanced troubleshooting skills and highly self-motivated
- Ability to identify improvements in process and technical configurations
- Superb written and oral communication skills
- Excellent interpersonal skills with a focus on customer excellence
- Analytical mindset and technical proficiency
- Good time management and organizational skills
- A passion for excellence in every aspect of the role
Location & Commitments
This role is 100% fully remote with flexible hours. Depending on customer needs, it may flex between part-time and full-time. Commitments will be communicated in advance.
Additional Duties
Please note that this job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities required by the employee, contractor, or freelancer for this role. Duties, responsibilities, and activities will be reviewed periodically as duties and responsibilities change with business necessities. Essential and marginal job functions are subject to modification.
Job Types: Part-time, Contract
Expected hours: 1 – 40 per week
Benefits:
Compensation package:
- 1099 contract
- Bonus opportunities
- Hourly pay
Experience level:
Schedule:
- Choose your own hours
- Day shift
- Evening shift
- Monday to Friday
- Night shift
- On call
- Weekends as needed
People with a criminal record are encouraged to apply
Application Question(s):
- How many Active Directory migrations have you architected in the last ten years?
- Our clients have extremely complex problems and require expert-level knowledge. There are typically no escalation points. We are the escalation (Tier 4). Are you comfortable with this requirement?
- Please list the identity management platforms you have worked with in an engineering capacity (building, engineering, consolidating, merging, migrating).
Experience:
- Active Directory Engineering: 10 years (Required)
Work Location: Remote