AIM Application-Data Access & Security

Details:

Job Description

Job Responsibilities -

• Management of Shared Folder permissions and structures across various file servers - both region and cloud based
• Providing data/report request responses from Audit and other support teams in a timely manner
• Facilitating data migration activities across various systems/platforms (Windows Shared Folders, SharePoint Online, MS Teams etc.)
• Managing permissions on SharePoint Online, MS Teams sites and other M365 Products
• Creation of AzureAD (EntraID) security groups, Service Principles (SPNs), Shared Mailboxes, Auto/Dynamic Distribution Groups etc.
• Creation of Active Directory groups of various types and scopes, for permissions setup
• Managing application infrastructure (Varonis DatAdvantage, Data Privilege etc) - supporting maintenance and upgrade activities
• Handling user access provisioning requests for various systems/platforms
  

Job Requirements

Details:

Work experience -

2-5 years

Educational Qualification

- Bachelor's degree or equivalent from an accredited institution, preferably in a technical/technological stream.

Skills Matrix -

Topic/Domain

Must have

Good to have

Additional Context

Access & Identity ManagementAIM common processes and practicesUser onboarding, joiner-mover-leaver processesExperience of managing accounts and their usage (Shared accounts, service accounts etc.)Access control concepts like RBAC, RBBAC, DAC, MAC etc.Remediation and recertification proceduresIAM tools like CyberArk, SailPoint IIQ etc.Workflow management/ITSM tools like ServiceNowVarious stages and types of approval workflows for granting accessCompliance with SAS, SOX and other regulatory requirements, or industry standardsIndustry best practices in Access & Identity ManagementActive DirectoryGroups - types, scopes nested/looped groups and their usesHigh level understanding of Active Directory structure - OUs, Containers, types of policies and their utilities and implicationsShared FoldersPermission types and structure - inheritance, object level permissionsExperience with troubleshooting of shared folder permissions and access issuesUnderstanding of file servers - types and common use casesUnderstanding of different technology-based permissions like NTFS, NFS, share permissions etc.Understanding of DFS - common practices and restructuringMS/M365 ExchangeManaging Exchange objects like Shared Mailboxes, Distribution ListsDynamic/M365 groupsExternal Contacts, Public Folders etc.Application Support/Varonis applications preferredSupporting application infrastructure for Varonis or similar ProductsExperience working on Varonis DatAdvantage, Data Privilege and other Varonis modulesUnderstanding of various activity monitoring, filesystem scanning tools and their workingPowerShell/ScriptingCreating and/or working with scripts, especially on PowerShellKnowledge and understanding of functions, scripting/programming best practicesCloud/M365/Azure EnvironmentCreation of Azure AD security groupsBasic understanding of API connectivity, app registrations, client ID/secrets etc. in the context of a cloud environmentExperience on Azure EntraID, M365 Admin Centre etc.Understanding of various types of cloud infrastructure setup - their differences and utilities