Harvey Nash

Compensation

Full Description

Hiring: Information Security Analyst & Administrator Note: Consultant must be flexible and available to attend meetings in Frankfort, KY, whenever required. We are looking for an experienced Information Security Analyst & Administrator to join a dynamic enterprise security team. This role is ideal for a security professional who combines strong hands-on technical expertise with experience supporting security projects, IAM implementations, and enterprise IT operations. The ideal candidate will serve as a senior security SME, with a strong focus on Identity & Access Management, Microsoft Active Directory, Microsoft Entra ID, Okta, enterprise authentication, and access control. Key Responsibilities: • Serve as a primary IT Security SME supporting enterprise security technologies, processes, and implementations • Design and implement IAM integrations, provisioning workflows, authentication, authorization, and access controls • Develop and maintain Role-Based Access Control (RBAC) frameworks • Administer Active Directory, Microsoft Entra ID, Okta, and privileged access environments • Implement MFA, SSO, SAML, OIDC, SCIM, and enterprise identity solutions • Monitor and investigate security events using SIEM platforms such as Splunk, Microsoft Sentinel, and QRadar • Support vulnerability management, risk assessments, security reviews, and incident response • Develop and maintain security policies, standards, and procedures aligned with NIST CSF, ISO 27001, and CIS Controls • Support security audits, compliance assessments, remediation activities, and third-party security reviews • Identify security risks, issues, dependencies, and mitigation strategies across technology projects • Lead, mentor, and collaborate with technical engineering teams and cross-functional stakeholders • Use PowerShell and Python to automate security and identity management tasks Must-Have Qualifications: • Deep hands-on expertise with Microsoft Active Directory and Microsoft Entra ID • Proven experience designing and implementing IAM integrations and provisioning workflows • Strong experience developing and maintaining RBAC frameworks • Strong understanding of enterprise identity and authentication models • Experience with NIST CSF, ISO 27001, or CIS Controls • Demonstrated ability to lead and mentor technical teams • Strong communication, analytical, organizational, and problem-solving skills • Bachelor’s degree in Computer Science, Information Technology, Computer Engineering, or a related discipline, or equivalent professional experience Preferred Experience: • Okta, Ping Identity, CyberArk, and other IAM/PAM technologies • SAML, OIDC, SCIM, and Fine-Grained Authorization (FGA) • Splunk, Microsoft Sentinel, and IBM QRadar • Palo Alto, Fortinet, and Cisco security technologies • CrowdStrike, Microsoft Defender for Endpoint, and Carbon Black • PowerShell and Python automation • ServiceNow and IAM integrations • Security modernization programs within public-sector or large enterprise environments • Experience supporting compliance requirements such as SOC 2, HIPAA, PCI-DSS, CJIS, or FedRAMP Certifications such as CISSP, CompTIA Security+, Microsoft Azure Security Engineer (AZ-500), or Microsoft Active Directory credentials are highly valued. If you are an experienced Information Security professional with strong IAM, Active Directory, Entra ID, and enterprise security experience, we would like to hear from you.