CISO Technical Lead

CISO Technical Lead – Directory Services Engineer (AD)

Job Description

1)           CISO Technical Lead – Directory Services Engineer (AD, DS, LDAP)

Services:

•             Effectively manage Citi’s Active Directory and Hybrid Entra ID environment, including monitoring and maintenance of Microsoft Windows Active Directory and Azure AD Connect servers

•             Collaborate with engineering and operational teams to champion and deliver next gen products and platforms

•             Troubleshoot and resolve complex problems, identifying root causes

•             Perform ongoing resolution of customer incident tickets

•             Work closely with our engineering partners and provide senior level guidance and support to their global counterparts, with focus on Active Directory, security management, group policies and other Windows/AD related technologies

•             Identify, analyze and own the resolution of repeat incidents leading to permanent resolution

•             Maintain and document internal team processes

•             Identify opportunities for process improvements and/or define new processes and procedures

•             Host cross platform and/or cross organization calls with stakeholders to drive project delivery and collaboration when appropriate

•             Participate in an on-call rotation, be responsible for answering calls for outages or major incidents

•             Partner closely with risk teams to build systemic processes that help maintain Citi’s system desired state and enforce compliance

Deliverables:

•             Stable, Secure & Compliant Identity Platform Operations

•             Incident Management Excellence & Problem Elimination

•             Engineering Collaboration & Continuous Improvement

Required Skills/Expertise:

•             5+ years’ hands-on experience supporting multi-domain Active Directory environments with expert proficiency in Microsoft AD and Entra ID

•             8+ years’ experience supporting Windows Server OS

•             Expert proficiency working with most or all of the following: LDAP, Kerberos, DNS, Sites and Services, Performance Monitoring, AD backup and recovery, Azure AD Connect, Conditional Access Policies, Express Routes, Azure Subscriptions and Resource groups

•             Ability to communicate across perceived organizational boundaries and break down silos to achieve global collaboration

•             Proactive team player who takes the initiative to meet goals and drive operational improvements.

•             Balance tactical and strategic goals into a stable and manageable operational framework.

•             SQL Server and/or PowerShell scripting experience is a plus

•             Ability to adapt communication styles to effectively communicate with senior management, customers and end-users