Senior Identity & Access Management Engineer

Title: Senior Identity Management Engineer
Location: Milwaukee, WI
Job type: Contract

Reports To Identity & Access Management Team Lead or Manager, Engineering

Responsibility Level:

Responsible for the service design, build and documentation all key elements of Johnson

Controls Active Directory and Identity & Access Management infrastructure. Ongoing

operations are then transitioned from the Engineering team to the Service Operations teams

who perform Level 1 and Level 2 support. Senior Identity & Access Management Engineer is

responsible for the efficient and effective transition from the Build cycle to the Operations cycle

which includes documentation, education and ongoing Level 3 support.

Primary technologies include but are not limited:

Active Directory (AD), Active Directory Lightweight Directory Services (AD LDS), Directory

Services in the cloud (Azure, AWS), Dynamic Host Configuration Protocol (DHCP), Domain

Name System (DNS), Active Directory Certificate Services (AD CS), Active Directory Group

Policy Objects (GPO), Network Policy Server (NPS)

Additional technologies that are not required but beneficial:

CA Siteminder, CA Identity Minder, the Johnson Controls Enterprise Directory, Microsoft Identity

Manager (MIM), Forefront Identity Manager (FIM), Centrify, Quest Compliance Suite, Men and

Mice

Additional responsibilities include:

Level 3 support, capacity planning, and problem management, change management, bandwidth

and connectivity planning, server planning, storage planning, reporting, budgeting and planning

for identity management related initiatives.

Primary Duties:

• Follow the Engineering process, which includes Service Design, Build and Transition of all

new initiatives, with phase gates reviews presented to all stakeholders during the process.

• Maintains an understanding of all current and emerging identity management technologies,

open system standards, management technologies as they relate to the support of Johnson

Controls collaboration infrastructure.

• Provide leadership and act as a senior level mentor and provide support to technical

personnel for any/all issues regarding service design, implementation, education and

support of Identity & Access Management infrastructure and availability.

• Stays current on regional application and infrastructure projects to maintain effective

availability and global consistency amongst regional infrastructure, integration and

configuration.

• Acts as liaison between Johnson Controls architecture team, service operations team and

vendors to provide transparency on future projects, activities, business requirements and

technical concerns of initiated projects.

• Help define implementation roadmaps, support requirements and management

infrastructure.

• Ensures that third party solutions follow all Johnson Controls standards.
• Provides senior management and general staff with accurate and complete status

information.

• Sponsors, orchestrates and implements technology pilots in order to evaluate emerging

technologies and their applicability in support of Johnson Controls business requirements

and strategic goals.

• Acts as an internal consultant to BU’s and Infrastructure IT.
• Adheres to all current Change and Problem management policies and procedures.

Job Specifications:

• Bachelor’s degree or related experience in Computer Science, Engineering or related

discipline.

• Strong experience with Active Directory, PKI, RADIUS, DNS, MS Visio, PowerPoint, MS

Word and MS Excel.

• Minimum 5 to 10 years of experience, designing, implementing and production support of

large-scale, global LAN/WAN Active Directory environments supporting over 75,000 users

and globally diversified application authentication requirements.

• Professional certification in support of Microsoft, IBM, Siteminder and other technologies is

desired.

• Knowledge or familiarity with ITIL processes and methods. ITIL Foundations certification

preferred.

• Strong project management skills and global experience.
• Strong technical and non-technical communication skills.
• Ability to establish and maintain high levels of client trust and confidence.
• A proven track record of driving the delivery of large, complex projects.
• A broad range of knowledge desired, including experience with:
• Active Directory
• DNS, DHCP, NPS
• IP Networks
• Application Integration
• Security and compliance
• LDAP, Kerberos

Job Type: Contract

Education:

• Bachelor’s

Location:

• Milwaukee, WI

Required work authorization:

• United States