Senior Infrastructure Operations Analyst

Location: Owings Mills MD

Onsite Flexibility: Onsite

• Position Type: Contract
• Contract Duration: 6 months
• Start: ASAP
• Pay Rate: $65.00$75.00 / Hour (USD)
• Work Authorization: Applicants must be authorized to work for ANY employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time.

---

A Senior Infrastructure Operations Analyst on the Identity Access Management team secures digital identities by designing implementing and managing access policies user lifecycles (onboarding/offboarding) and authentication systems. This requires advanced identity management domain expertise and related security disciplines. The position leads high-profile initiatives applies rigorous analysis to deliver innovative solutions and establishes identity management standards across the organization. This role is an individual contributor who will be required to work closely with others to influence technical direction in this discipline and partner on the implementation of solutions.

The role is responsible for the configuration administration operation and support of identity management technologies including integration with networks hardware software applications and databases. Responsibilities also include end-to-end service delivery of identity management across all technology domains encompassing backup recovery and disaster recovery capabilities. The candidate must have experience in supporting identity management technologies in a complex environment that includes data center cloud providers hosted vendor solutions and co-location facilities in a global technology ecosystem.

---

• Identify plan and execute Certificate Lifecycle Management (CLM) driven projects as needed.
• Fulfill service requests in ServiceNow related to Identity technologies.
• Monitor the health of in-scope systems and act when necessary as well as enhance observability across supported services.
• Perform Incident and Problem management as needed.
• Improve operational rigor and efficiency through scripting and automation.
• Implement changes (typically off hours) to support modernization objectives and eliminate risks related to vulnerabilities.
• Work with Enterprise Security to assess and remediate any security findings that are discovered during Pen Tests and Vulnerability scans.
• Provide management of and support for all aspects of identity management.
• Plan and migrate on-premises workload to alternate solutions as part of the Data Center Exit strategy.

---

• Access Governance: Define and manage user access roles permissions and entitlements based on the principle of least privilege.
• Identity Lifecycle Management: Understanding all aspects of Identity Human Machine and Agent/Application.
• System Administration: Maintain IAM platforms (e.g. Entra ID Venafi MS ADCS) and directory services.
• Security & Compliance: Perform access reviews audit logs for unauthorized access and ensure compliance with regulatory standards (e.g. PCI GDPR).
• Authentication Protocols: Implement and support Certificate-based authentication SCEP Intune Single Sign-On (SSO) Multi-Factor Authentication (MFA) and federation services (SAML OAuth).
• Technical Support: Troubleshoot identity-related issues across the Human Machine Agent/Application spectrum and support incident response needs.
• Extensive understanding of Public Key Infrastructure (PKI) X.509 Certificates Venafi CLM and automated protocols such as SCEP.
• Deep knowledge of Microsoft Active Directory Certificate Services (MS ADCS) as well as external certificate partners like Digicert.
• Knowledge in identity-based infrastructure: Active Directory Entra ID DNS and DHCP.
• Intermediate knowledge of Windows and Linux operating systems including how these machines use certificates.
• Experience with MS Defender and using the product to help keep the environment secure.
• Experience with scripting languages such as PowerShell and/or Python and how to use them to automate tasks.
• Strong communication skills (both verbal and written).
• Ability to participate in off-hour work including scheduled on-call.
• Demonstrated ability to work independently and as part of a team and project management skills.
• Strong attention to detail accuracy and timeliness.
• Self-motivated with a desire to work as part of a creative team in a highly collaborative corporate environment.

---

• Detailed understanding of AWS and cloud computing principles and related expertise on identity management integrations.
• Hands-on experience configuring SSO solutions.
• Experience with Centrify Netbackup Quest Active Roles and CyberArk.
• Experience with MS Intune and JAMF.

---

• Bachelors degree or the equivalent combination of education and relevant experience.

---

• 5 years of total relevant work experience.

---

• Off-hours work required including scheduled on-call rotation (approximately 1 week every 68 weeks).
• On-call support may include being contacted outside of scheduled call hours in the event of a critical incident.

---

• Medical Vision and Dental Insurance Plans
• 401k Retirement Fund

---

GTT is a minority-owned staffing firm and a subsidiary of Chenega Corporation a Native American-owned company in Alaska. We highly value diverse and inclusive workplaces and support Fortune 500 organizations across banking financial services technology life sciences biotech utilities and retail sectors throughout the U.S. and Canada.

---

Job Number: 26-06378 Industry: Information Technology