Staff Engineer - Infrastructure
Description
Xperi invents, develops and delivers technologies that create extraordinary experiences at home and on the go for millions of people around the world. Powering billions of consumer electronics, connected cars and digital content titles, we make entertainment more immersive, driving more intelligent and every interaction seamlessly personalized through our renowned consumer brands: DTS®, HD Radio™ and TiVo®.
Xperi (NYSE: XPER) is a publicly traded technology company headquartered in San Jose, CA with over 2,000 employees across North America, Europe and Asia. Come join a thriving team where you can play an integral role in shaping the future of entertainment technology.
About the role:
Join a awesome team that is dedicated to securing and providing stable and reliable identity and user access control for Xperi Corporration. The Active Directory / Directory Services environment is crucial to the continued service and functionality of the entire enterprise, encompassing internal and external applications, users and systems.
You’ll play an critical role in ensuring that Xperi’s Active Directory and Identity Access environments are available, secure and reliable to prevent any downtime or impact to the enterprise or its users and applications. This includes patching, backups and restores of the environment as well as participating as a primary contributor and stake holder in enterprise mergers and acquisitions related to AD/DS
You’ll collaborate daily with the Xperi security team and leadership performing tasks related to AD/DS and access control as well as using Security tools such as Microsoft Sentinel to help provide guidance and recommendations on increasing Identity security for users, workstations and servers.
In addition, you’ll work with Xperi business units including internal and external auditors to provide requested data and evidence for audit controls.
What you will get to do:
- Create and manage documentation of AD/DS services and processes.
- Proactively look for issues, gaps in performance, function, and security of enterprise infrastructure.
- Work with leadership, IT, business, and security teams to insure the function and security of
AD/DS and Xperi environments
- Manage and maintain Active Directory / Directory Services in day-to-day tasks.
- Manage and maintain Group Policy, ADI DNS, DHCP.
- Manage OU structure, security, and access.
- Manage and maintain domain controller infrastructure hardware and software.
- Manage and maintain Schema, Enterprise, and Domain functions, performing changes and updates as needed to increase security or support business.
- Create, manage, and remove domain trusts.
- Perform and test backup processes of AD/DS.
- Troubleshoot support issues related to AD/DS
- Create, manage, and maintain AD/DS federations with external federated environments.
- Perform and document patching on a regular schedule.
- Provide AD/DS support to Service Desk, Windows, and Unix teams.
- Reporting for SOX and PCI quarterly audits.
- Document, perform and report on quarterly Disaster Recovery exercises for Risk and Compliance.
- Provide ad hoc reporting of AD data as requested by the business.
- Participate in AD/DS migrations including mergers and acquisitions.
- Perform regular analysis and auditing of AD/DS performance, replication and provide recommendations on enhancements and improvements.
- Act as tier 1 escalation point for AD/DS support.
- Participate in regular AD/DS auditing of access and security.
- Participate in planning and architecture of environments current and future state.
- Work outside normal local business hours to provide critical support as needed, perform updates/patching during available after hours change windows and to participate in online meetings that may be in other times zones.
Who we are looking for:
A candidate with strong skills and experience with owning, managing and securing Microsoft Active Directory / Directory Services
Must have:
- 5+ years as a senior AD/DS engineer.
- Strong documentation and reporting skills.
- Strong communication skills.
- Extensive practical enterprise knowledge of:
- Active Directory / Directory Services
- Forests and Domains including functional level differences.
- FSMO roles
- DNS
- DHCP
- AD security and delegation
- Domains and Trusts.
- AD best practices
- Domain migrations and deployments
- Disaster recovery processes and procedures
- Microsoft Windows platform from 2008r2 to 2022.
- Strong PowerShell skills in reporting, querying, automation.
Nice to have:
- Experience with Microsoft Defender for Servers in an architecture and management role.
- Experience with SIEM tools such as Microsoft Sentinel
- Experience with security analytical tools such as Wiz.
- Experience with migration of on premise AD/DS to Azure.
- Mergers and acquisitions resulting in the consolidation of multiple domains.
- Integrations between AD and Oracle, ADFS, Okta/SSO, Exchange, Microsoft 365 and Unix.
What will make you successful:
- The ability to propose, design and develop solutions that scale
- Keen troubleshooting skills and practiced agile development methodology
- Excellent written and oral communication skills
- Expert problem-solving skills
- Ability to discovery, define and roadmap improvements and efficiencies to
Life @ Xperi:
At Xperi, we value People, Customers, Performance and Innovation. We are dedicated to creating a workplace where all employees have a voice and sense of belonging, feel safe and valued, and are acknowledged for how their unique differences contribute to organizational culture and business outcomes.
Our employees and their families are important to us, and our comprehensive pay, stock and benefits programs reflect that. Xperi supports personal well-being, builds financial security and enables employees to share in our collective success.
Rewards include:
- Competitive compensation (salary, equity and bonuses) and comprehensive benefits designed to foster work-life balance, care for your health, protect your finances and help you save and invest for the future.
- Generous paid time away from work, including flexible time off, holidays and sick time, health and wellness initiatives, and a charitable match program to help you give back to your community.
- Great perks, which vary by location and can be site-specific: employee discounts, transportation reimbursements, subsidized cafes and fitness facilities.
- A flexible, hybrid work environment combining the best of in-office collaboration and community-building along with the benefits of working from home.