CoStar Group

Work with internal Security teams to support incident response and logging with enterprise SIEM systems such as Azure Sentinel.. 3+ years of experience engineering IAM solutions in AWS, Azure, or a large scale IdP implementation (Entra ID, Okta, Ping, etc).. Knowledge of IAM governance tools such as SailPoint, Saviynt, and Azure Active Directory.. Understanding of common Active Directory security defense tools and methodologies, such as Bloodhound, Mimikatz, Password Spray, rainbow tables, cryptography, etc.. Familiarity with PAM tools (CyberArk, SecretServer, BeyondTrust, Hashicorp Vault, etc.)

lead systems engineer

Responsibilities Be a subject matter expert for identity provisioning, security, and governance.Analyze, design, and support a highly complex, enterprise level Active Directory and Single Sign On services in a hybrid on-premise and cloud hosted environment.Implement, execute, and support critical IAM processes, including overall identity management, access management, provisioning/de-provisioning, user onboarding/offboarding, and access certifications/review.Manage and troubleshoot all aspects of Active Directory and Azure EntraID, including federation, infrastructure, and user accounts.Create and maintain system documentation for domain technologies, including installation, configuration, and appropriate troubleshooting steps.Proactively identify potential threats, exploit attempts and other security events related to Directory Services and IAM. Make recommendations and/or take action to mitigate these issues as appropriate. Actively contribute to and participate in security incident response as needed.Work with internal Security teams to support incident response and logging with enterprise SIEM systems such as Azure Sentinel.Work with internal Security teams to remediate critical security findings as they relate to identity.Work with internal stakeholders to implement appropriate role-based access controls for access within the organization.Identify and implement opportunities for technology, automation, and security enhancements for IAM functions.Basic QualificationsBachelor’s Degree required from an accredited, not for profit university or college. A track record of commitment to prior employers 8+ years total experience in a technical role such as security, network, systems, or software engineering.5+ years total experience directly supporting Active Directory and Azure EntraID in a large, multi-forest, hybrid environment.3+ years of experience engineering IAM solutions in AWS, Azure, or a large scale IdP implementation (Entra ID, Okta, Ping, etc).3+ years of experience work with SIEM and advanced logging/correlation tools.2+ years writing PowerShell or Python scripts from scratch.Ability to get to done-done when troubleshooting issues or engineering solutions.Preferred Qualifications and SkillsExpert knowledge of the administration of Active Directory and GPOs in a complex, multi-forest environment.Expert knowledge of the administration of EntraID and AD Connect in a hybrid-domain environment.Expert knowledge of ADFS and PKI in a multi-OS environment.Expert knowledge of DNS, DHCP, and DFS in a multi-OS environment.Strong knowledge of modern authentication standards, protocols, and frameworks: LDAP, SAML, OAUTH2, OIDC, FIDO2, Kerberos, SCIM, WS-Federation, JWT.Strong knowledge of SSO integration for SaaS-based and private applications using Entra AD, Okta, OneLogin or similar products.Strong knowledge of LDAP directory architecture and products such as Active Directory, OpenLDAP, and Radiant Logic.Knowledge of IAM governance tools such as SailPoint, Saviynt, and Azure Active Directory.Understanding of Microsoft Sentinel and querying logs using KQL.Understanding of common security concerns within a typical application (password hashing, SSL/TLS, encrypting at rest and in transit, etc.).Understanding of common Active Directory security defense tools and methodologies, such as Bloodhound, Mimikatz, Password Spray, rainbow tables, cryptography, etc.Understanding of server virtualization technologies, preferably VMware and/or Microsoft technologies.Demonstrated experience automating common operational tasks, web service/API integration, and deployment activities in scripting/programming languages (e.g. PowerShell, Python, Perl, etc.).Familiarity with PAM tools (CyberArk, SecretServer, BeyondTrust, Hashicorp Vault, etc.) for credential escrow, vaulting, and retrieval.Able to investigate identity related security incidents with cross a functional team of security engineers.What’s in it for YouWhen you join CoStar Group, you’ll experience a collaborative and innovative culture working alongside the best and brightest to empower our people and customers to succeed.We offer you generous compensation and performance-based incentives. CoStar Group also invests in your professional and academic growth with internal training, tuition reimbursement, and an inter-office exchange program.Our benefits package includes (but is not limited to):Comprehensive healthcare coverage: Medical / Vision / Dental / Prescription DrugLife, legal, and supplementary insuranceVirtual and in person mental health counseling services for individuals and familyCommuter and parking benefits401(K) retirement plan with matching contributionsEmployee stock purchase planPaid time offTuition reimbursementOn-site fitness center and/or reimbursed fitness center membership costs (location dependent), with yoga studio, Pelotons, personal training, group exercise classesAccess to CoStar Group’s Diversity, Equity, & Inclusion Employee Resource GroupsComplimentary gourmet coffee, tea, hot chocolate, fresh fruit, and other healthy snacksThis position offers a base salary range of $117,800- $212,700, based on relevant skills and experience, and includes a generous benefits plan.

START NEW SEARCH