Security Architect
Security Managed Services Senior Analyst
|
Full time
|
Experience: 2-5 years
ジョブ番号 ATCI-5511367-S2011390
|
Chennai
|
Required Skill: Microsoft 365 Security & Compliance
Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Microsoft 365 Security & Compliance
Good to have skills : NA
Minimum 3 year(s) of experience is required
Educational Qualification : 15 years full time education
Directory Services Operations
Operate and maintain a hybrid identity architecture
based on on-premise Active Directory and Entra ID
in the M365 cloud
Manage Azure AD Connect synchronization, includ
ing monitoring, troubleshooting, and lifecycle man
agement
Administer Active Directory core services, including:
o Domains and trusts
o Sites and Services
o Replication topology
o DNS integration
Ensure high availability, performance, and stability
of directory services
Identity and Access Management
Administer Entra ID and Microsoft 365 tenant con
figuration
Manage and optimize:
o Conditional Access Policies
o Identity protection and authentication meth
ods
o Tenant-wide security and identity settings
Support application integrations and identity federa
tion scenarios
o Review and validate requests to ensure com
pliance with internal standards and pro
cesses
o Implement approved requests in a controlled
and auditable manner
o Access management and permission delega
tion through Quest Active Roles
Security, Hardening & Compliance
Harden AD, Entra ID, and M365 environments
based on security best practices and frameworks
(e.g. CIS Benchmarks)
Ensure:
o Least-privilege access models
o Secure authentication and authorization de
signs
o Regular review of privileged roles and access
paths
o Minimize risks for cyber-attacks or similar
vulnerabilities
Support audits, security assessments, and remedia
tion activities
Governance, Auditing and Reporting of AD by using
Quest s Active Administrator, Change Auditor, En
terprise Reporter and IT Security Search
Mergers & Acquisitions (M&A)
Support M&A activities from an identity perspec
tive, including:
o B2B collaboration and external identity ena
blement
o Migration from legacy AD and M365 environ
ments, including using Quest On-Demand
Migration
o Tenant-to-tenant and directory consolidation
scenarios
Design and execute secure migration strategies with
minimal business disruption
Backup & Recovery
AD backup and recovery through Quest Recovery
Manager
Manage Commvault Cloud (Metallic) as the M365
backup and recovery solution
Ensure:
o Regular backup validation
o Recovery readiness for identities, M365
workloads, and configurations
o Compliance with retention and recovery re
quirements
Automation & IAM Integration
Automation of tasks through PowerShell scripting
Support the design and implementation of self-ser
vice workflows for identity-related use cases
Collaborate closely with the IAM team to:
o Align AD and M365 processes with SailPoint
o Migrate or redesign existing Quest Active
Roles workflows into SailPoint
Promote automation, standardization, and reduc
tion of manual administrative effort
Service Management & Collaboration
Work within ITIL-based processes, including:
o Incident Management
o Service Request Fulfilment
o Problem Management
Act as a technical consultant for internal teams and
stakeholders
Provide 2nd and 3rd level support for identity-re
lated issues
Required Skills and Qual
ifications
Technical Skills
Strong expertise in on-premise Active Directory ar
chitecture and operations
In-depth knowledge of Entra ID and Microsoft 365
identity services
Sophisticated scripting knowledge, especially Mi
crosoft PowerShell
Hands-on experience with Azure AD Connect
Solid understanding of:
o Authentication and authorization concepts
o Identity lifecycle management
Experience with Quest Active Directory manage
ment and migration tools
Knowledge of backup and recovery concepts for
identity and M365 workloads, ideally based on
Commvault Cloud (also called Metallic)
Security & Governance
Strong understanding of identity security best prac
tices including resilience against cyber-attacks
Experience applying security frameworks (e.g. CIS)
Ability to assess risks and enforce governance
standards
Familiarity with audit, compliance, and reporting
requirements
Professional & Methodological Skills
Experience working in ITIL-based service organiza
tions
Structured, analytical, and proactive working style
High level of service orientation and customer focus
Ability to prioritize tasks and work effectively under
pressure
Strong problem-solving and troubleshooting skills
Communication & Personal Skills
Very good communication skills across technical
and non-technical stakeholders
Team-oriented mindset with the ability to work in
dependently
High level of responsibility and ownership
Resilience, flexibility, and adaptability in complex
environments
Fluent English, written and verbal (German is a plus)
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Microsoft 365 Security & Compliance
Good to have skills : NA
Minimum 3 year(s) of experience is required
Educational Qualification : 15 years full time education
Directory Services Operations
Operate and maintain a hybrid identity architecture
based on on-premise Active Directory and Entra ID
in the M365 cloud
Manage Azure AD Connect synchronization, includ
ing monitoring, troubleshooting, and lifecycle man
agement
Administer Active Directory core services, including:
o Domains and trusts
o Sites and Services
o Replication topology
o DNS integration
Ensure high availability, performance, and stability
of directory services
Identity and Access Management
Administer Entra ID and Microsoft 365 tenant con
figuration
Manage and optimize:
o Conditional Access Policies
o Identity protection and authentication meth
ods
o Tenant-wide security and identity settings
Support application integrations and identity federa
tion scenarios
o Review and validate requests to ensure com
pliance with internal standards and pro
cesses
o Implement approved requests in a controlled
and auditable manner
o Access management and permission delega
tion through Quest Active Roles
Security, Hardening & Compliance
Harden AD, Entra ID, and M365 environments
based on security best practices and frameworks
(e.g. CIS Benchmarks)
Ensure:
o Least-privilege access models
o Secure authentication and authorization de
signs
o Regular review of privileged roles and access
paths
o Minimize risks for cyber-attacks or similar
vulnerabilities
Support audits, security assessments, and remedia
tion activities
Governance, Auditing and Reporting of AD by using
Quest s Active Administrator, Change Auditor, En
terprise Reporter and IT Security Search
Mergers & Acquisitions (M&A)
Support M&A activities from an identity perspec
tive, including:
o B2B collaboration and external identity ena
blement
o Migration from legacy AD and M365 environ
ments, including using Quest On-Demand
Migration
o Tenant-to-tenant and directory consolidation
scenarios
Design and execute secure migration strategies with
minimal business disruption
Backup & Recovery
AD backup and recovery through Quest Recovery
Manager
Manage Commvault Cloud (Metallic) as the M365
backup and recovery solution
Ensure:
o Regular backup validation
o Recovery readiness for identities, M365
workloads, and configurations
o Compliance with retention and recovery re
quirements
Automation & IAM Integration
Automation of tasks through PowerShell scripting
Support the design and implementation of self-ser
vice workflows for identity-related use cases
Collaborate closely with the IAM team to:
o Align AD and M365 processes with SailPoint
o Migrate or redesign existing Quest Active
Roles workflows into SailPoint
Promote automation, standardization, and reduc
tion of manual administrative effort
Service Management & Collaboration
Work within ITIL-based processes, including:
o Incident Management
o Service Request Fulfilment
o Problem Management
Act as a technical consultant for internal teams and
stakeholders
Provide 2nd and 3rd level support for identity-re
lated issues
Required Skills and Qual
ifications
Technical Skills
Strong expertise in on-premise Active Directory ar
chitecture and operations
In-depth knowledge of Entra ID and Microsoft 365
identity services
Sophisticated scripting knowledge, especially Mi
crosoft PowerShell
Hands-on experience with Azure AD Connect
Solid understanding of:
o Authentication and authorization concepts
o Identity lifecycle management
Experience with Quest Active Directory manage
ment and migration tools
Knowledge of backup and recovery concepts for
identity and M365 workloads, ideally based on
Commvault Cloud (also called Metallic)
Security & Governance
Strong understanding of identity security best prac
tices including resilience against cyber-attacks
Experience applying security frameworks (e.g. CIS)
Ability to assess risks and enforce governance
standards
Familiarity with audit, compliance, and reporting
requirements
Professional & Methodological Skills
Experience working in ITIL-based service organiza
tions
Structured, analytical, and proactive working style
High level of service orientation and customer focus
Ability to prioritize tasks and work effectively under
pressure
Strong problem-solving and troubleshooting skills
Communication & Personal Skills
Very good communication skills across technical
and non-technical stakeholders
Team-oriented mindset with the ability to work in
dependently
High level of responsibility and ownership
Resilience, flexibility, and adaptability in complex
environments
Fluent English, written and verbal (German is a plus)
15 years full time education
Chennai
雇用機会の均等化に関する声明
アクセンチュアは選考に際し、適用される法令に基づき、応募者を年齢、人種、思想信条、肌の色、宗教、性別、国籍、出生地、民族的起源、障がいの有無、性的指向、性同一性、遺伝情報、婚姻、パートナーの有無、市民権において差別することなく、全ての応募者に対し適用される法令に基づき採用選考を行います。
We work with one shared purpose: to deliver on the promise of technology and human ingenuity. Every day, more than 775,000 of us help our stakeholders continuously reinvent. Together, we drive positive change and deliver value to our clients, partners, shareholders, communities, and each other.
We believe that delivering value requires innovation, and innovation thrives in an inclusive and diverse environment. We actively foster a workplace free from bias, where everyone feels a sense of belonging and is respected and empowered to do their best work.
At Accenture, we see well-being holistically, supporting our people’s physical, mental, and financial health. We also provide opportunities to keep skills relevant through certifications, learning, and diverse work experiences. We’re proud to be consistently recognized as one of the World’s Best Workplaces™.
Join Accenture to work at the heart of change. Visit us at www.accenture.com.