Discovery / Identity & Automation Engineer

Position: Discovery / Identity & Automation Engineer

Location: Phoenix, AZ | Dallas, TX | Columbus, OH (Remote)

Duration: Full-time

Salary Range: $110,000-$120,000 /Annum

Must Have Technical/Functional Skills

Varonis DAG: interpreting collector scan data, group membership analysis, over-permission and stale-access reporting and access reviews.

NTFS ACL analysis and translation into SharePoint permission models.

Active Directory group administration and Entra ID group management.

Security group design to the three-group least-privilege pattern - service account, read-only and read/write.

PowerShell and PnP. PowerShell: bulk site provisioning, permission assignment, inventory and evidence logs.

Microsoft Graph and SharePoint CSOM scripting for reporting and bulk remediation.

File-system analysis at scale - path-length inventories, duplicate and orphan detection and aging and size profiling.

Retention label and policy application so existing retention carries forward correctly.

Required Experience

Strong experience with Varonis DAG, NTFS ACL analysis, Active Directory, Entra ID and SharePoint permissions.

Advanced PowerShell, PnP. PowerShell, Microsoft Graph and SharePoint CSOM scripting capability.

Experience with large-scale file-system discovery, least-privilege design and retention controls.

Key Responsibilities

Interpret Varonis and file-system discovery data to identify ownership, access and remediation needs.

Translate NTFS ACLs into sustainable SharePoint permission models.

Design service-account, read-only and read/write security groups using least privilege.

Automate provisioning, permission assignment, inventory, reconciliation and evidence logging.

Identify duplicates, orphaned content, stale data and long paths, and validate retention carry-forward.

Disclaimer: Diverse Lynx LLC is an Equal Opportunity Employer. All applicants and employees are evaluated without discrimination, based solely on their qualifications, ability, competence and performance. This email and its attachments may contain confidential or proprietary information and is intended only for the recipient(s). If you received this message in error, please disregard it and notify the sender. If you no longer wish to receive our communications, you may unsubscribe at any time.

Security Notice: Our official website is www.diverselynx.com We do not operate or authorize any other websites representing Diverse Lynx LLC.