Senior Hybrid Identity and Security Engineer at Greenfix Property Care

, Virginia, United States -

Full Time

Start Date

Immediate

Expiry Date

28 Jan, 26

Salary

0.0

Posted On

30 Oct, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Microsoft Entra ID, Azure AD Connect, Conditional Access, Pass-Through Authentication, Password Hash Synchronization, Single Sign-On, Federation, Role-Based Access Control, Security Tools, Hybrid Identity Architectures, Automation, IAM, Zero Trust, DevSecOps, Threat Modeling, Microsoft 365

Industry

Household Services

Description

At Genworth, we empower families to navigate the aging journey with confidence. We are compassionate, experienced allies for those navigating care with guidance, products, and services that meet families where they are. Further, we are the spouses, children, siblings, friends, and neighbors of those that need care-and we bring those experiences with us to work in serving our millions of policyholders each day. We apply that same compassion and empathy as we work with each other and our local communities. Genworth values all perspectives, characteristics, and experiences so that employees can bring their full, authentic selves to work to help each other and our company succeed. We celebrate our diversity and understand that being intentional about inclusion is the only way to create a sense of belonging for all associates. We also invest in the vitality of our local communities through grants from the Genworth Foundation, event sponsorships, and employee volunteerism. Our four values guide our strategy, our decisions, and our interactions: Make it human. We care about the people that make up our customers, colleagues, and communities. Make it about others. We do what's best for our customers and collaborate to drive progress. Make it happen. We work with intention toward a common purpose and forge ways forward together. Make it better. We create fulfilling purpose-driven careers by learning from the world and each other. POSITION TITLE Senior Hybrid Identity and Security Engineer POSITION LOCATION Richmond, Va or Remote YOUR ROLE As an IT team member, you'll play a crucial role in designing, implementing, and managing technology solutions that are the foundation of the world class customer service that our customers expect and deserve - now and in the future. We are seeking a highly skilled Senior Hybrid Identity and Security Engineer to join our enterprise IT team. This role combines expertise in hybrid identity management, security architecture, advanced access control within Microsoft Entra ID (formerly Azure AD), and role-based access control management in Microsoft Purview. The ideal candidate will design, implement, and manage secure identity solutions for hybrid setups, ensuring seamless integration between on-premises Active Directory and cloud services. The position requires collaboration with operations, governance, and compliance teams in a large enterprise setting. What you will be doing Hybrid Identity Management: Create, manage, and deploy provisioning configurations from on-premises Active Directory to Microsoft Entra ID using Cloud Provisioning and Azure AD Connect. Configure and troubleshoot pass-through authentication (PTA), password hash synchronization (PHS), seamless single sign-on (SSO), and federation settings. Monitor and resolve identity synchronization issues, including logs, while ensuring secure integration. Role-Based Access Control Management in Purview: Design, implement, and manage Role-Based Access Control (RBAC) policies within Microsoft Purview. Ensure appropriate access controls are in place for data governance, compliance, and privacy requirements. Collaborate with data owners and compliance teams to maintain least-privilege access and audit RBAC assignments regularly. Conditional Access Administration: Manage all aspects of Conditional Access policies in Entra ID, including creation, updates, deletions, and configuration of named locations. Enforce policies based on user risk, device state, location, and application to enhance access security. Update authentication contexts for RBAC and integrate with Microsoft 365 for compliant access. Privileged Authentication Administration: View, set, and reset authentication methods (including passwords, MFA, and FIDO2) for all users, including administrators and non-admins. Perform sensitive actions such as deleting/restoring users, forcing re-registration of credentials, revoking "remember MFA on device," and invalidating refresh tokens to prompt re-authentication. Manage service health monitoring, create support tickets in Microsoft 365 admin centers, and configure certificate authorities with PKI-based trust stores. General Security and Compliance: Provide guidance on policies, blueprints, monitoring, and governance mechanisms. Conduct threat assessments, implement Zero Trust models, and ensure compliance with regulations (e.g., GDPR, HIPAA). Collaborate on incident response, vulnerability management, and integration of security into CI/CD pipelines. Monitoring and Optimization: Use tools like Microsoft Sentinel, Microsoft Purview, and Defender suites to monitor posture, triage incidents, and optimize hybrid identity solutions. Automate workflows and conduct regular audits to minimize risks in enterprise environments. What you bring Required Skills and Qualifications Technical Expertise: Deep knowledge of Microsoft Entra ID, Azure AD Connect, Conditional Access, PTA/PHS/SSO, federation, authentication methods, and RBAC management in Purview. Proficiency in security tools (e.g., Defender for Cloud, Security Center), hybrid identity architectures, and automation (PowerShell, Microsoft Graph). Security Knowledge: Strong understanding of IAM, Zero Trust, DevSecOps, and threat modeling. Familiarity with multi-cloud environments and integration with Microsoft 365 services. Soft Skills: Excellent problem-solving, communication, and collaboration abilities. Ability to translate technical requirements into business-aligned solutions. Required Certifications Microsoft Certified: Security Engineer Associate or equivalent Microsoft Certified: Identity and Access Administrator Associate (SC-300) Additional certifications in Entra ID, identity management, or Microsoft Purview are a plus Experience and Education Bachelor's degree in Computer Science, Information Security, or a related field (Master's preferred). 7+ years of experience in IT security, with at least 4 years focused on Entra ID in hybrid environments. Proven track record in designing and implementing secure identity and access architectures for large enterprises. Employee Benefits & Well-Being Genworth employees make a difference in people's lives every day. We're committed to making a difference in our employees' lives. Competitive Compensation & Total Rewards Incentives Comprehensive Healthcare Coverage Multiple 401(k) Savings Plan Options Auto Enrollment in Employer-Directed Retirement Account Feature (100% employer-funded!) Generous Paid Time Off - Including 12 Paid Holidays, Volunteer Time Off and Paid Family Leave Disability, Life, and Long Term Care Insurance Tuition Reimbursement, Student Loan Repayment and Training & Certification Support Wellness support including gym membership reimbursement and Employee Assistance Program resources (work/life support, financial & legal management) Caregiver and Mental Health Support Services Employee Benefits & Well-Being Genworth employees make a difference in people's lives every day. We're committed to making a difference in our employees' lives. Competitive Compensation & Total Rewards Incentives Comprehensive Healthcare Coverage Multiple 401(k) Savings Plan Options Auto Enrollment in Employer-Directed Retirement Account Feature (100% employer-funded!) Generous Paid Time Off - Including 12 Paid Holidays, Volunteer Time Off and Paid Family Leave Disability, Life, and Long Term Care Insurance Tuition Reimbursement, Student Loan Repayment and Training & Certification Support Wellness support including gym membership reimbursement and Employee Assistance Program resources (work/life support, financial & legal management) Caregiver and Mental Health Support Services

Responsibilities

Design, implement, and manage secure identity solutions for hybrid setups, ensuring seamless integration between on-premises Active Directory and cloud services. Collaborate with operations, governance, and compliance teams in a large enterprise setting.