About the Role: We are seeking a skilled and detail-oriented Cybersecurity Analyst Contractor to join our team. The primary responsibility of this role is to monitor, maintain, and secure Entra ID (formerly Azure AD) environments. The ideal candidate will have extensive experience with single sign-on (SSO) configurations, enterprise app registration, and privileged identity management within Entra ID, as well as Azure Role-Based Access Control (RBAC) IAM configurations. This role will also assist the Cybersecurity team with upcoming application migration activities. 
Key Responsibilities:

• Monitor and Maintain Entra ID Security Configurations:
  • Continuously monitor Entra ID environments for security threats and vulnerabilities.
  • Perform regular maintenance and updates to ensure optimal performance and security.
  • Create and maintain detailed documentation of monitoring and maintenance procedures.
• Single Sign-On (SSO) Configurations:
  • Configure and manage SSO settings related to SAML and OAuth2 within Entra ID.
  • Troubleshoot and resolve SSO-related issues to ensure seamless user access.
  • Configure alerting for expiring SSO certificates and work with configuration owners to resolve.
  • Develop and update documentation for SSO configurations and troubleshooting steps.
• Enterprise Applications and App Registrations:
  • Manage and update mapping of owners to Entra ID enterprise applications and app registrations.
  • Ensure proper configuration and security of registered applications.
  • Configure Entra ID app proxy configurations as required.
  • Monitor for expiring configurations such as secrets and work with configuration owners to remediate.
  • Identify and remediate stale configurations within enterprise applications and app registrations.
  • Develop documentation related to enterprise applications and app registration processes.
• Privileged Identity Management (PIM):
  • Configure and maintain Entra ID Privileged Identity Management (PIM) settings for both Entra ID roles and Azure RBAC access.
  • Perform onboarding for new roles released by Microsoft.
  • Ensure all access has a supporting access request approval.
  • Monitor and manage privileged access to ensure compliance with security policies.
  • Develop baseline PIM settings configuration to ensure consistency of deployment.
  • Evaluate settings for configuration drift and work with stakeholders to remediate.
  • Ensure proper role assignments and access controls within Azure environments.
  • Document PIM configurations and access management procedures.
  • Create and maintain documentation for RBAC IAM configurations and role assignments.
• Other Duties
  • As a member of the cybersecurity team, you may be called upon to assist with other nearby duties not captured in this job description.
  • Assist with working tickets within ServiceNow.

Qualifications:

• Proven experience in managing and securing Entra ID environments.
• Strong knowledge of SAML and OAuth2 protocols.
• Experience with Entra ID Privileged Identity Management and Azure RBAC IAM configurations.
• Excellent problem-solving skills and attention to detail.
• Strong communication and collaboration skills.

Preferred Qualifications:

• Relevant certifications such as Microsoft Certified: Azure Security Engineer Associate or similar.
• Experience with other identity and access management (IAM) solutions.
• Familiarity with security best practices and compliance standards.

 

With over 90 years' combined experience, NES Fircroft (NES) is proud to be the world's leading engineering staffing provider spanning the Oil & Gas, Power & Renewables, Chemicals, Construction & Infrastructure, Life Sciences, Mining and Manufacturing sectors worldwide. With more than 80 offices in 45 countries, we are able to provide our clients with the engineering and technical expertise they need, wherever and whenever it is needed. We offer contractors far more than a traditional recruitment service, supporting with everything from securing visas and work permits, to providing market-leading benefits packages and accommodation, ensuring they are safely and compliantly able to support our clients.