Expert, Infrastructure Security Engineer (Identity & Attack Path Management)

Responsibilities

• Operate identity security and attack‑path analysis solutions such as BloodHound, PingCastle, and equivalent platforms.
• Identify identity‑related risks, misconfigurations, excessive privileges, and lateral movement vectors across AD, Entra ID, and hybrid identity environments.
• Perform continuous discovery and monitoring of identity exposures, high‑risk objects, and structural directory weaknesses.
• Support incident, problem, and change processes related to identity and directory services.
• Analyze hybrid identity synchronization issues and collaborate with Cloud and Infrastructure teams to ensure secure, resilient, and compliant directory‑services operations.
• Contribute to identity security baselines, remediation planning, and hardening initiatives that reduce the enterprise attack surface.

Qualifications

• Candidates must possess a strong background in identity or infras...