Discovery / Identity & Automation Engineer

Role: Engineer

Required Skills: Powershell

Experience: 6 - 10 Years

Function: TECHNOLOGY

Apply By: 2026-12-05

Discovery / Identity & Automation Engineer

Must Have Technical/Functional Skills

Varonis DAG: interpreting collector scan data, group membership analysis, over-permission and stale-access reporting and access reviews.

NTFS ACL analysis and translation into SharePoint permission models.

Active Directory group administration and Entra ID group management.

Security group design to the three-group least-privilege pattern - service account, read-only and read/write.

PowerShell and PnP. PowerShell: bulk site provisioning, permission assignment, inventory and evidence logs.

Microsoft Graph and SharePoint CSOM scripting for reporting and bulk remediation.

File-system analysis at scale - path-length inventories, duplicate and orphan detection and aging and size profiling.

Retention label and policy application so existing retention carries forward correctly.

Required Experience

Strong experience with Varonis DAG, NTFS ACL analysis, Active Directory, Entra ID and SharePoint permissions.

Advanced PowerShell, PnP. PowerShell, Microsoft Graph and SharePoint CSOM scripting capability.

Experience with large-scale file-system discovery, least-privilege design and retention controls.

Key Responsibilities

Interpret Varonis and file-system discovery data to identify ownership, access and remediation needs.

Translate NTFS ACLs into sustainable SharePoint permission models.

Design service-account, read-only and read/write security groups using least privilege.

Automate provisioning, permission assignment, inventory, reconciliation and evidence logging.

Identify duplicates, orphaned content, stale data and long paths, and validate retention carry-forward.

Salary Range- $100,000-$120,000 a year

#LI-SP3

#LI-VX1