The Associate Director, Systems Administration will be responsible for the following:
- Responsible for the design and build of global solutions and the templates used by IT and delivery teams.
- Participating in or leading project teams geared toward delivery of central and client facing solutions or services
- Writing and reviewing architectural documentation pertaining to strategic initiatives impacting both product and internal infrastructures
- Driving Service Management and Infrastructure Support of all Active Directory Domains and Azure AD tenants, as well as supporting Infrastructure, around PKI, Azure Connect and Radius Authentication.
- Providing an escalation point for all Identity stability issues and project driven work
- Responsible (at varying degrees) for the design, installation, configuration, administration, and operational integrity of complex architectures that contribute to the stability and efficiency of the technical infrastructure
Position Responsibilities:
Technology
- Exhibits ownership in the Identity space (Active Directory, Azure Active Directory and PKI) and is genuinely interested in moving it forward
- Drives an "automate first" approach to all tasks using scripts, orchestration or deployment packaging
- Architects, deploys, and documents Identity system environments that support many concurrent users and complex applications
- Contributes to the approval of new or amended IT standards, procedures, and other quality managed processes. Ensures that adequate technology, procedures, and resources are in place to support the quality of the systems
Process
- Maximizes efficiencies by reducing complexity and ensuring adherence to standards where appropriate
- Drives Problem Management Processes to establish root cause for any service outages
- Identifies and plans systemic corrective strategies to reduce errors and improve the quality of Operational services, by examination of the root cause
- Generates appropriate documentation to support relevant processes and systems
- Participates in global on-call rotation
- Challenges current methods and approaches for resolving technical issues, bringing insight and innovation
- Engages collaboratively and manages key product, client, supplier & stakeholder relationships
- Actively contributes to the direction and planning initiatives
- Contributes to the annual planning and budgetary process
- Participates in off-hours work as necessary
- Ensures established processes are followed and works to maintain compliance to applicable regulatory audits
- Manages own projects, deadlines, and responsibilities with minimal management overhead
- Coordinates and mentors team members or peers
- Contributes to the establishment of a Global Operating Model
Required Technical Skills
- Advanced working knowledge of Windows Server 2008, 2012, 2016, and 2019 environments
- Deep Active Directory management
- Group Policy (GPO)
- Mulit-Forest management experience
- Active Directory Upgrade experience
- Complex DNS / DHCP
- Domain migrations and consolidation
- Advanced working knowledge of Azure Active Directory architecture and concepts, including but not limited to, application registration, enterprise application on-boarding, conditional access, identity governance and Multifactor Authentication
- Advanced Active Directory ID and Security Group management experience
- Advanced Conditional Access management experience
- PowerShell and other scripting languages
- Advanced knowledge of Office 365/2016 and below
- Working knowledge of networking concepts such as subnetting and routing
- Ability to navigate VMWare vSphere virtual environments
- Understanding of Microsoft NPS (Network Policy and Access Server)
- Understanding of Microsoft PKI architecture and concepts
- Good working knowledge of Service Now or other equivalent incident management tools
- Advanced analytical and problem-solving skills
Desired Technical Skills
- Good understanding of Firewall rule implementation & troubleshooting
- Public Cloud Computing knowledge such as Azure and AWS
- Experience with CyberArk or other password vaulting solutions
- Experience using diagnostic, monitoring and change management tools
Functional Skills
- The ability to socialize ideas, make recommendations and gather team consensus to move forward
- Exhibits a strong desire to learn new technologies and is genuinely interested in growing their technical acumen
- Able to effectively communicate both orally and in writing to technical and non-technical audiences at all levels in an organization
- Service oriented, positive, committed and enthusiastic team player
- Flexibility to adjust to changing requirements, schedules and priorities
Education & Experience
- 7+ years of engineering experience in one or more IT Functions
- Bachelor's in Computer Science, related field or equivalent experience
Working Conditions
- Responsibilities may require working evenings/weekends, sometimes with little advanced notice
- May be required to work on an on-call rotation as required
- No regular travel
What We Offer
- Competitive base salary, bonus plans and equity.
- A comprehensive, benefits package that includes medical, dental, vision and life insurance plans, paid time off, a generous 401k match with no vesting period, parental leave and 3 volunteering days each year. For more information on benefits, please access the benefits page on our careers site:
- For work locations in the state of Colorado, the anticipated base salary range for this role would be between $86,480 and $123,000. Compensation will be determined by the education, experience, knowledge, and abilities of the applicant.
Inclusion and diversity are critical to the success of IHS Markit, and we actively encourage applications from people of all backgrounds. We are committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, status as a protected veteran, or any other protected category. For more information on the many ways in which we enthusiastically support inclusion and diversity efforts for both candidates and employees, please access our Inclusion & Diversity Statement here .
We are proud to provide reasonable accommodations to applicants with disabilities. If you are interested in applying for employment with IHS Markit and need special assistance or an accommodation to use our website or to apply for a position, please contact or call +1 . Determination on requests for reasonable accommodation are considered on a case-by-case basis. This contact information (email and phone) is intended for application assistance and accommodation requests only. We are unable to accept resumes or provide information about application status through the phone number or email address above. Resumes are only accepted through the online application process, and only qualified candidates will receive consideration and follow-up.
IHS Markit maintains a substance-free workplace; employees may be asked to submit to a drug test (where permitted by law). In addition, as a federal contractor in the United States, the company participates in the E-Verify Program to confirm eligibility to work.
For information please click on the following links:
IHS Markit Business Code of Conduct
Right to Work
EEO is the Law
EEO is the Law Supplement
Pay Transparency Current Colleagues
If you are currently employed by IHS Markit, please apply internally via the Workday internal careers site.