This position is located in Ithaca, New York. The successful candidate will have the option to perform this role remotely at a locationof their choosing within the United States.

The NewYork Convenience of employer guidelines require New York State individual tax reporting andwithholdings for this position. Additional individual state income tax filings may also be required if workingoutside New York State.

No Visa sponsorship available for this position.

What is Cornell University and what is Information Technology @ Cornell?
Cornell University, unique among peers, is the federal land-grant institution of New York State, a private endowed university, and a member of the Ivy League. Information technologies (IT) is a strategic enabler for many functions at Cornell. Staff working in IT are found in most colleges and units across Cornell. We are comprised of many organizations, but we work as one. By being where Cornell faculty, staff, and students are, we are better able to offer support-whether needed at your desktop or to solve a major business, academic or research objective-to everyone at Cornell. Check out this link to find out more about IT@Cornell.

Cornell Information Technologies' IT Security Office helps Cornell's constituents protect the confidentiality, integrity, and availability of university information resources. As stewards of the institution's information security program, the ITSO helps safeguard Cornell's reputation and data by providing identity, security, and risk management services in support of the institution's mission of learning, discovery, and engagement.

The Identity Management team provides authentication, authorization, and directory services to Cornell University. Cornell's Identity Management system is comprised of homegrown, open-source, and vendor applications. The team is primarily focused on engineering.

What you will do:

As an individual contributor and member of the Identity Management Team, under the leadership of the Assistant Director for Identity and Access Management, the Active Directory Engineer provides cybersecurity-focused technical leadership and analytical support for Cornell University's Identity Management group within the Cornell IT Security Office (ITSO).

Your primary responsibilities include but are not limited to:

• Planning and implementing technical solutions to ensure the quality and security of new and existing Identity Management services.
• Delivering the next generation of Identity Management services to the University community as well as forging strategic relationships with campus customers, vendors, and Cornell's peers in the higher education community to stay abreast of emerging technical directions.
• This position will be expected to be available outside standard university business hours to resolve outages and/or system changes.
• Maintaining effective service relationships with business units by keeping them informed of the status of their access requests and tickets and providing non-technical answers to access questions. T
• Meet team and departmental service levels and objectives and uphold strong working relationships with other members of the Identity Management team, the ITSO, and business partners.

While position responsibilities vary, every member of our community is expected to foster a culture of belonging and a psychologically healthy work environment by communicating across differences; being cooperative, collaborative, open, and welcoming; showing respect, compassion, and empathy; engaging and supporting others regardless of background or perspective; speaking up when others are being excluded or treated inappropriately; and supporting work/life integration of oneself and others.

What you will be:

You possess a strong service orientation and are someone who has an ability to prioritize multiple high-level tasks and to make sound judgment calls about security situations where the organization's reputation is at stake. You also have excellent written and oral skills including communicating technical material to non-technical audiences and the ability to present technical security topics to the campus IT community.

Additionally, you will have:

• Bachelor's degree with at least 3 years related experience OR, equivalent combination of experience and/or education.
• Expertise with Active Directory administration in a complex distributed enterprise environment including user and group management.
• Experience in the management of a complex GPO infrastructure.
• Experience with Microsoft Azure / Entra ID administration.
• Experience with Active Directory topology and DNS management.
• Demonstrated strength in a scripting language such as PowerShell.
• Must be able to work effectively in a dynamic, deadline-driven, complex, team-based environment with multiple competing priorities.
• Must have sophisticated facilitation, problem-solving abilities, analytical, reasoning, and judgment skills.
• Experience managing mission-critical systems in a production environment.
• Ability to identify, scope, and execute on opportunities for automation or improvement in system architecture.
• Proven experience writing technical documentation.
• Familiarity with change management, configuration management practices in enterprise IT environments.
• Experience in and/or demonstrated commitment to supporting diversity, equity, access, inclusion, and wellbeing.
• Passionate about working in an organization that values and promotes diversity, equity, inclusion, anti-racism, and wellbeing.

Preferably it would be beneficial if you had the following:

• Familiarity with the NIST Cybersecurity Framework desirable.
• Experience with One Identity Active Roles Server (ARS).
• Experience with ADLDS.
• Experience with on-premises to cloud directory synchronization with AAD Connect and other 3rd-party tools.
• Experience with Active Directory certificate services.
• Experience with web programming (ASP/ASPX, C# etc.).
• Experience performing high-level security assessments of both in-house and outsourced applications a plus.
• Knowledge of other operating systems (MacOS, Linux) and how they integrate with Active Directory.
• Knowledge of OpenLDAP.

What we offer:

Great benefits that include educational benefits, access to a plethora of wellness programs, employee discounts, health care, paid vacation, health/personal time, 12 university paid holidays (including end of year winter break through New Year's Day) and employer retirement contributions.

An active and diverse community to work and thrive in! Cornell is situated in picturesque Ithaca, New York, the heart of the Finger Lakes. Ithaca is home to two academic institutions, state parks, waterfalls, gorges, and a wide range of art galleries, theaters, eateries, wineries, and breweries. Ithaca has something to suit all ages and interests!

Familiarize yourself with Cornell's COVID-19 workplace guidance as well as the university's COVID-19 services and information.

University Job Title:

Job Family:

Level:

Pay Rate Type:

Pay Range:

Remote Option Availability:

Company:

Contact Name:

Job Titles and Pay Ranges:

Non-Union Positions

Noted pay ranges reflect the potential pay opportunity for each job profile. The hiring rate of pay for the successful candidate will be determined considering the following criteria:

• Prior relevant work or industry experience

• Education level to the extent education is relevant to the position

• Unique applicable skills

• Academic Discipline (faculty pay ranges reflects 9-month annual salary)

To learn more about Cornell's non-union staff job titles and pay ranges, see Career Navigator.

Union Positions

The hiring rate of pay for the successful candidate will be determined in accordance with the rates in the respective collective bargaining agreement. To learn more about Cornell's union wages, see Union Pay Rates.

Current Employees:

If you currently work at Cornell University, please exit this website and log in to Workday using your Net ID and password. Select the Career icon on your Home dashboard to view jobs at Cornell.

Online Submission Guidelines:

Most positions at Cornell will require you to apply online and submit both a resume/CV and cover letter. You can upload documents either by "dragging and dropping" them into the dropbox or by using the "upload" icon on the application page. For more detailed instructions on how to apply to a job at Cornell, visit How We Hire on the HR website.

Employment Assistance:

For general questions about the position or the application process, please contact the Recruiter listed in the job posting or email mycareer@cornell.edu.

If you require an accommodation for a disability in order to complete an employment application or to participate in the recruiting process, you are encouraged to contact Cornell University's Office of Institutional Equity and Title IX at voice (607) 255-2242, or email atequity@cornell.edu.

Applicants that do not have internet access are encouraged to visit your local library, or local Department of Labor. You may also request an appointment to use a dedicated workstation in the Office of Talent Attraction and Recruitment, at the Ithaca campus, by emailing mycareer@cornell.edu.

Notice to Applicants:

Please read the required Notice to Applicants statement by clicking here. This notice contains important information about applying for a position at Cornell as well as some of your rights and responsibilities as an applicant.

EEO Statement:

Diversity and Inclusion are a part of Cornell University's heritage. We are a recognized employer and educator valuing AA/EEO, and we do not tolerate discrimination based on any protected characteristic, including race, ethnic or national origin, citizenship and immigration status, color, sex/gender, pregnancy or pregnancy-related conditions, age, creed, religion, actual or perceived disability (including persons associated with such a person), arrest and/or conviction record, military or veteran status, sexual orientation, gender expression and/or identity, an individual's genetic information, domestic violence victim status, familial status, marital status, or any other characteristic protected by applicable federal, state, or local law. We also recognize a lawful preference in employment practices for Native Americans living on or near Indian reservations in accordance with applicable law.

Cornell University embraces diversity and seeks candidates who will contribute to a climate that supports students, faculty, and staff to all identities and backgrounds. We encourage individuals from underrepresented and/or marginalized identities to apply.