Overseas Contractor

Careers at LTM

Overseas Contractor

• Job ID: 886240
• 5 - 8 Years
• 1 Opening
• Dallas - Texas - USA

Apply Now

Share with friends

• Share on Facebook
• Share on Linkedin
• Post on X App
• Email your friends

Role description

Engineer Active Directory

Location - Fortworth, TX

This is Hybrid role and there will be in-person client interview if shortlisted

Description:

• Operationalize automated data discovery, classification, and inventory; apply sensitivity labels and consistent taxonomy across data stores, pipelines, and collaboration systems.
• Engineer DSPM capabilities with tools (e.g., Securiti, BigID) to surface data posture risks (overexposure, shadow data, stale sensitive data) and drive remediation workflows.
• Implement and support encryption, tokenization, masking, anonymization/pseudonymization for data at rest and in transit; integrate with cloud key management systems and enforce approved cryptographic standards; define crypto baselines and policy-as-code guardrails.
• Configure and govern access controls with RBAC/ABAC and purpose-based authorization; perform least-privilege and fine-grained access reviews across data platforms.
• Deploy, tune, and operate DLP and DAM solutions (e.g., Microsoft Purview DLP, Imperva/Guardium); build detections for PII/PCI/PHI and reduce false positives with policy and context improvements.
• Integrate and tune UEBA and Insider Risk signals to detect anomalous data access and exfiltration, partner on response workflows and preventive control changes.
• Integrate data protection telemetry with SIEM/SOAR; build detections, correlation rules, and automated response playbooks for data-related threats and policy violations.
• Implement data minimization and retention/ROT enforcement patterns; automate monitoring of lifecycle actions (archive, delete, redact) aligned to policy and legal holds.
• Implement DSAR (data subject access request) orchestration and fulfillment with SLA monitoring; automate data collection, redaction, and secure delivery with audit trails.
• Contribute to cookie/tag governance and catalog assurance; validate consent signals, storage durations, and vendor script behavior against policy.
• Support privacy platform capabilities and integrate with identity, ticketing, data catalogs/lineage, and evidence repositories.
• Embed data protection and privacy-by-design controls into services and CI/CD (pre-commit/CI privacy code scanning, secret scanning, schema checks for sensitive fields, data egress policies).
• Produce compliance evidence and reports for GDPR/CCPA/CPRA, PCI DSS, HIPAA, and internal audits; maintain controls health dashboards, regulatory tracking, and program KPIs.
• Investigate data-related incidents and privacy events in partnership with IR/SOC/Privacy Office. Collect artifacts, support forensics, document findings, and drive preventive engineering fixes.
• Conduct platform hardening and vulnerability remediation for data control tooling (misconfigurations, exposed buckets, weak crypto, excessive permissions).
• Participate in red teaming/tabletop exercises for data scenarios (insider misuse, public link exposures, unintended AI training data); translate findings into control improvements.
• Partner with Cybersecurity, Privacy Office, Enterprise Data, Legal, and product/platform teams to align designs and deliver privacy- and data protection-by-design outcomes.
• Document engineering patterns, runbooks, and reference architectures; create training and technical guidance that strengthen secure data handling practices across teams.
• Communicate clearly and concisely with technical and non‑technical audiences - summarize incidents, risks, and recommended actions with accurate, complete context.

Required Skills & Experience

• 3-7 years of hands-on experience in:
• Active Directory administration/engineering
• Microsoft Entra ID (Azure AD)
• Azure AD Connect / hybrid identity environments
• Experience with:
• AD security hardening
• Identity-related attack techniques (privilege escalation, lateral movement)
• Attack path analysis or remediation activities
• Strong working knowledge of:
• Tier 0 concepts and identity as a control plane
• Authentication protocols (Kerberos, NTLM, SAML, OAuth)

Preferred Experience

• Exposure to:
• CyberArk or other PAM tools
• Saviynt or similar IGA platforms
• Ping Identity or federation solutions
• HashiCorp Vault, Keyfactor, or PKI environments
• Experience supporting AD forest recovery exercises
• Familiarity with Zero Trust principles

Key Traits for Success

• Strong execution and delivery focus
• Security and resiliency mindset
• Ability to quickly identify and remediate risks
• Works effectively in a cross-functional cybersecurity environment

Comfortable working in fast-paced, project-driven (contract) engagements

Skills

Mandatory Skills : Directory Services(ForgeRock Open DJ/PING Directory/Oracle Directory & VD), IDAM -Microsoft Azure PIM, Performance Monitoring- Cloud Native (Aws Cloud Watch, Azure Cloud Monitor) - Testing

Other details

Actual compensation within the range will be dependent upon the individual''s skills, experience, performance and internal equity.

Benefits/perks listed below may vary depending on the nature of your employment with LTIMindtree ("LTIM"):

Benefits and Perks:

• Comprehensive Medical Plan Covering Medical, Dental, Vision
• Short Term and Long-Term Disability Coverage
• 401(k) Plan with Company match
• Life Insurance
• Vacation Time, Sick Leave, Paid Holidays
• Paid Paternity and Maternity Leave

The range displayed on each job posting reflects the minimum and maximum salary target for the position across all US locations. Within the range, individual pay is determined by work location and job level and additional factors including job-related skills, experience, and relevant education or training. Depending on the position offered, other forms of compensation may be provided as part of overall compensation like an annual performance-based bonus, sales incentive pay and other forms of bonus or variable compensation.

Disclaimer: The compensation and benefits information provided herein is accurate as of the date of this posting.

LTIMindtree is an equal opportunity employer that is committed to diversity in the workplace. Our employment decisions are made without regard to race, color, creed, religion, sex (including pregnancy, childbirth or related medical conditions), gender identity or expression, national origin, ancestry, age, family-care status, veteran status, marital status, civil union status, domestic partnership status, military service, handicap or disability or history of handicap or disability, genetic information, atypical hereditary cellular or blood trait, union affiliation, affectional or sexual orientation or preference, or any other characteristic protected by applicable federal, state, or local law, except where such considerations are bona fide occupational qualifications permitted by law.

Benefits

Compensation range: $ 64.00 to 66.00 per hour

View all 1088 role(s)

Apply Now

Share with friends

Toggle Dropdown

• Share on Facebook
• Share on Linkedin
• Share on WhatsApp
• Post on X App
• Email your friends

View more

About LTM

LTM is an AI-centric global technology services company and the Business Creativity partner to the world's largest and most disruptive enterprises. We bring human insights and intelligent systems together to help clients create greater value at the intersection of technology and domain expertise. Our capabilities span integrated operations, transformation, and business AI - enabling new ways of working, new productivity paradigms, and new roads to value. Together with over 87,000 employees across 40 countries and our global network of partners, LTM - a Larsen & Toubro company - owns business outcomes for our clients, helping them not just outperform the market, but to Outcreate it. Please also note that neither LTM nor any of its authorized recruitment agencies/partners charge any candidate registration fee or any other fees from talent (candidates) towards appearing for an interview or securing employment/internship. Candidates shall be solely responsible for verifying the credentials of any agency/consultant that claims to be working with LTM for recruitment. Please note that anyone who relies on the representations made by fraudulent employment agencies does so at their own risk, and LTM disclaims any liability in case of loss or damage suffered as a consequence of the same. Recruitment Fraud Alert - https://www.ltimindtree.com/recruitment-fraud-alert/

View more

Wish to submit your profile for future opportunities?

Click here