Job Description - Senior Data Security & Access Governance Engineer

Core Technologies: Netwrix Auditor, Stealthbits, Microsoft Active Directory, Microsoft Entra ID, PowerShell, Windows Server

About the Role

We are seeking an experienced Data Security & Access Governance Engineer to manage and maintain data access auditing, identity security, and privileged access monitoring solutions. The ideal candidate will have hands-on experience with Netwrix Auditor and Stealthbits products, strong knowledge of Microsoft Active Directory and Entra ID, and expertise in identifying access risks, monitoring suspicious activities, and supporting compliance requirements.

Key Responsibilities

1. Platform Administration

• Deploy, configure, administer, and maintain Netwrix Auditor and Stealthbits security solutions.

• Monitor platform health, troubleshoot issues, and perform routine maintenance and upgrades.

• Configure auditing policies, alerts, reports, and automated monitoring workflows.

2. Data Access Governance

• Analyze user access patterns and permissions using access analysis tools.

• Identify excessive permissions, inactive accounts, risky access configurations, and potential security exposures.

• Recommend and coordinate remediation activities to enforce least-privilege access.

• Support access reviews and governance processes across enterprise environments.

3. Identity and Directory Security

• Administer and monitor Microsoft Active Directory and Microsoft Entra ID.

• Track changes to users, groups, permissions, policies, and directory configurations.

• Investigate privilege escalation, unauthorized access, and suspicious identity-related activities.

• Support identity security controls and access governance initiatives.

4. File System and Infrastructure Auditing

• Monitor access and configuration changes across Windows file servers, shared folders, NAS storage, and cloud environments.

• Analyze NTFS permissions, share permissions, and file access activity.

• Support Windows Server administration and troubleshoot IIS and SQL Server components associated with security platforms.

5. Threat Detection and Incident Investigation

• Investigate anomalous user behavior, unauthorized data access, and suspicious permission changes.

• Analyze audit logs and alerts to identify potential security incidents.

• Collaborate with security operations, infrastructure, and identity teams on incident response and root-cause analysis.

6. Compliance and Reporting

• Generate audit reports and maintain evidence supporting regulatory and internal compliance requirements.

• Support compliance initiatives related to GDPR, HIPAA, PCI DSS, and other applicable security standards.

• Maintain audit documentation, reporting procedures, and remediation records.

7. Scripting and Automation

• Develop PowerShell scripts to automate data collection, reporting, access analysis, and remediation tasks.

• Improve monitoring efficiency and reduce manual administrative activities.

• Document configuration standards, operational procedures, and troubleshooting steps.

Required Skills and Qualifications

• 8-10 years of experience in cybersecurity, data security, identity security, or Windows infrastructure administration.

• Hands-on experience administering Netwrix Auditor and Stealthbits products.

• Strong knowledge of Microsoft Active Directory and Microsoft Entra ID.

• Understanding of identity and access management, access governance, and least-privilege principles.

• Experience auditing NTFS permissions, file shares, NAS storage, and directory services.

• Proficiency in Windows Server administration.

• Working knowledge of IIS and SQL Server administration.

• PowerShell scripting skills for automation and remediation.

• Experience with security auditing, threat investigation, access monitoring, and compliance reporting.

• Strong analytical, troubleshooting, documentation, and communication skills.

Preferred Qualifications

• Netwrix Certified Professional or relevant Netwrix product certifications.

• CISA, CISSP, or Microsoft Security certifications.

• Experience in financial services, healthcare, or other regulated enterprise environments.

• Familiarity with GDPR, HIPAA, PCI DSS, and enterprise audit requirements.

• Experience supporting identity governance, privileged access management, and security risk assessments.