Senior Identity and Access Engineer

EXOS (formerly Sondhi Solutions)

  • Indianapolis, IN
  • 30 days ago
    Want to know if you’re a fit?
    Upload your resume and let our AI show you.

    Skills

    • Administrative Skillsunmatched
    • Application Programming Interface (API)unmatched
    • Authenticationunmatched
    • Cloud Computingunmatched
    • Computer Scienceunmatched
    • Computer Securityunmatched
    • Consultingunmatched
    • Cost Controlunmatched
    • Customer Relationsunmatched
    • Customer Support/Serviceunmatched
    • Identity Data Managementunmatched
    • Information Technology & Information Systemsunmatched
    • Information Technology Consultingunmatched
    • Internet Securityunmatched
    • Just in Time (JIT)unmatched
    • Leadershipunmatched
    • Machine Toolunmatched
    • Microsoft Access Databaseunmatched
    • Microsoft Active Directoryunmatched
    • Microsoft Product Familyunmatched
    • Microsoft Windows Azureunmatched
    • Microsoft Windows Operating Systemunmatched
    • Militaryunmatched
    • Operational Auditunmatched
    • Phishingunmatched
    • Professional Servicesunmatched
    • Remote Accessunmatched
    • Scripting (Scripting Languages)unmatched
    • Security Analysisunmatched
    • Software Developmentunmatched
    • Startupunmatched
    • Strategic Planningunmatched
    • Track Customer Issuesunmatched
    • VPN (Virtual Private Network)unmatched
    • Vendor/Supplier Relationsunmatched
    • Windows PowerShellunmatched

    Description

    Our Company

    In 2009 EXOS established itself as an IT consulting and staff augmentation firm.  We specialize in focusing on what the client needs and adapting to how our client works.  Our number one goal is to deliver the RIGHT solution, with the RIGHT resource, for the RIGHT price at the RIGHT time.   


    The Company has three areas of focus:


    Professional Services and Consulting:  As a full-service IT consulting firm, we offer a wide array of services to adapt to our clients' businesses. No matter what is needed, we have a solution that fits. Whether it be custom application development or providing highly specialized IT resources to run a project, we assist our clients to ensure their IT initiatives cross the finish line. 


    Staffing: Our solutions foster stronger relationships with customers, suppliers, and partners, which greatly improve our clients' productivity, while reducing overall IT costs.


    Managed Services:  We realize our clients don't have the time to worry about the most important tools that its people use--technology. We take care of our client's network and service its system.


    Our Values

    We are Empowering


    At EXOS we empower our clients by providing them with essential strategic IT guidance, reliable service, and the talent necessary to achieve their business goals.  We empower our team by living a culture of collaboration, trust, and learning, creating growth opportunities, and charting a clear career path for all our team members.


    We are Connected

    At EXOS we are connected to our clients and their purpose. We are not just a talent and technology partner; we are an extension of your business. We seek to understand where leadership is driving the company, and we connect across all aspects of the business necessary to make that goal a reality. We are connected to the communities we serve and invested in organizations that make them great places to live. As the EXOS team, we are connected through our common commitment to our cultural imperatives: the 'Three Ps' - Be Positive, Be Productive and Be Progressive in the since that we are always challenging each other to learn and grow. 


    We are Trusted


    For more than fifteen years EXOS has been a trusted partner in providing Talent, IT and Cybersecurity solutions for our clients. Whether it's servicing large-scale enterprise clients or start up professional firms, our team is there to help solve pain points and provide strategic direction. The trust we have with one another as a team is earned. We live a culture of accountability with a goal of excellence. We are invested in one another's success, personally and professionally. We are a trust first, learn together and celebrate collectively team.   

    What You Will Do

    • Own the EXOS identity security standard: the Conditional Access baseline, tiered admin model, privileged access configuration, and phishing-resistant MFA standard that every client inherits.
    • Enforce MFA on all client remote access, both VPN and internal application access, and block legacy authentication.
    • Build and run privileged access management: just-in-time admin elevation, separated cloud-only admin accounts, and on-prem tiered administration with LAPS.
    • Deploy phishing-resistant MFA (FIDO2, passkeys, Windows Hello for Business), starting with privileged accounts and expanding to users.
    • Stand up scheduled access reviews and stale or over-privileged account reporting, delivered as a recurring remediation list.
    • Operate identity threat detection and response tooling to catch token theft, impossible travel, and MFA fatigue, and tune it across client tenants.
    • Automate it with reusable templates and scripting (Microsoft Graph API, PowerShell) so the work scales across our client base.
    • Produce a per-client identity posture report, and build the runbooks that let the broader team execute the standard.


    Preferred Qualifications
    • Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related discipline or equivalent hands-on experience or military training.
    • Earned relevant certifications such as SC-300 Identity and Access Administrator, SC-100 Cybersecurity Architect Expert, MS-102 M365 Administrator or AZ-104 Azure Administrator, or SC-200 Security Operations Analyst (a plus, not a substitute for hands-on experience).
    • GDAP/Lighthouse/CIPP administration experience.
    • Experience writing client-facing posture reports and remediation roadmaps.
    Experience
    • 7+ years in IT or security engineering, with 3+ years focused on identity and access management in Microsoft environments (Entra ID + on-prem AD).
    • Worked hands-on in production with Microsoft Entra ID: Conditional Access, Privileged Identity Management, Identity Protection, and access reviews.
    • Automated identity work at scale with Microsoft Graph API and PowerShell, building reusable multi-tenant tooling.
    • Deployed phishing-resistant MFA (FIDO2, passkeys, Windows Hello for Business) in real environments.
    • Hardened on-prem Active Directory: tiered admin models, LAPS, and the hybrid identity attack paths that enable lateral movement.
    • Worked with identity threat detection and response tooling.
    • Delivered identity across many client environments in a multi-tenant MSP or MSSP setting.

    Numbers & Facts

    LocationIndianapolis, IN

    Similar Jobs

    See more jobs