TGen - Part of City of Hope

Director

• Validate existing cloud-based Entra ID to on-prem AD environment and configuration
• Validate existing Entra ID to Okta Implementation, including Office365 and Sharepoint related configuration.
• Ensure compliance with Entra ID best practices for all aspects of TGen Entra ID / O365 environment, including directory services, Exchange configuration, SharePoint, and others.
• Evaluate existing implementation of, and recommend best practice refinements to, Unix authentication to AD, including distribution of globally unique POSIX UID and GID.
• Work with business partners to identify, define, and implement best-practice-based forest configuration with external business partners which use Entra ID, including possible cross-integrations with TGen Okta identity management platform.
• Manage daily operations of any cross-forest trusts, Entra ID and AD services.
• Monitor trust health, Kerberos ticket flows, LDAP queries, and authentication performance.
• Automate repetitive tasks using Ansible and other scripting languages where appropriate.
• Collaborate with HPC engineers to ensure consistent identity resolution and caching behavior across all HPC login and compute nodes.
• Support the standardization of the installation, configuration, and hardening of SSSD/IdM client configurations for reliable user and group resolution, RBAC rules, sudo policies, and automount on HPC nodes on Linux Rocky 9 and associated infrastructure.
• Monitor for and troubleshooting Kerberos, SSSD, cross-forest referral issues, as well as Azure connectivity problems.
• Work with external collaborators (Entra ID teams) on trust implementations, maintenance, selective authentication adjustments, and incident resolution.
• Ensure high availability and disaster recovery for IdM trust controllers and related components.
• Implement least-privilege principles, selective authentication, and auditing for cross-forest access.
• Participate in security reviews, audits, and compliance activities related to the identity infrastructure, including Entra ID-side controls.
• Work closely with external partners’ Entra ID and IAM teams for trust configuration, network connectivity, and ongoing coordination.
• Collaborate with TGen HPC system engineers managing storage/NFS configuration on PowerScale and VAST, as well as external partners accessing these HPC file systems on edge devices.
• Coordinate with TGen information security team as needed to establish Entra and AD configuration policies that meet TGen requirements.

Mid-Level Entra/Active Directory Engineer