Netwrix / Stealthbits Security Engineer

• Job ID:

J53619

• Job Title:

Netwrix / Stealthbits Security Engineer

• Location:

Atlanta, GA

• Duration:

12 Months + Extension

• Domain Exposure:

Banking & Finance

• Work Authorization:

US Citizen,Green Card,OPT-EAD,CPT,H-1B,H4-EAD,L2-EAD,GC-EAD

• Client:

To Be Discussed Later

• Employment Type:

W-2, 1099, C2C

Job Description:

We are seeking an experienced Security Engineer with proven, hands-on experience managing and administering Netwrix Auditor and Stealthbits security products. The ideal candidate will have a strong background in identity and access management, data access governance, Active Directory security, permission auditing, and security compliance.

The candidate will be responsible for deploying, configuring, maintaining, and optimizing Netwrix and Stealthbits platforms to monitor data access, identify security risks, investigate suspicious activity, and support least-privilege access enforcement.

Strong engineering knowledge of Microsoft Active Directory, Microsoft Entra ID, Windows Server, NTFS permissions, file shares, and NAS storage auditing is essential.

Key Responsibilities:

-------------------------

1. Netwrix and Stealthbits Platform Management:

• Deploy, configure, administer, and maintain Netwrix Auditor and Stealthbits solutions.
• Monitor platform health, troubleshoot issues, and optimize product performance.
• Configure auditing, monitoring, reporting, and access analysis capabilities.
• Support platform upgrades, configuration changes, and operational maintenance.
• Investigate product-related issues and coordinate resolutions with internal teams or vendors.

2. Data Access Governance and Permission Analysis:

• Analyze data access patterns using Access Analyzer and relevant platform capabilities.
• Identify excessive permissions, unnecessary access rights, and potential data exposure risks.
• Assess NTFS permissions, shared folder permissions, and NAS storage access.
• Recommend and support remediation activities to enforce least-privilege access.
• Collaborate with IT and security teams to validate and remediate access-control findings.

3. Identity and Directory Services Security:

• Monitor and audit changes across Microsoft Active Directory and Microsoft Entra ID.
• Investigate unauthorized changes to users, groups, privileged accounts, and directory configurations.
• Identify suspicious privilege escalation and unauthorized access activity.
• Support identity governance and access-control improvement initiatives.
• Maintain visibility into identity-related security events and directory changes.

4. Activity Monitoring and Threat Detection:

• Monitor changes and access activity across Active Directory, file servers, and supported cloud environments.
• Investigate anomalous behavior, unauthorized data access, and suspicious permission changes.
• Analyze audit trails and security events to determine potential risks.
• Document findings and coordinate incident investigation and remediation activities.
• Support continuous improvement of security monitoring and detection processes.

5. Compliance, Auditing, and Reporting:

• Generate and maintain automated audit reports supporting applicable compliance requirements.
• Support audit evidence collection for GDPR, HIPAA, PCI-DSS, and other relevant regulatory frameworks.
• Maintain accurate audit records and documentation.
• Assist with internal and external audits by providing evidence of access monitoring and control effectiveness.
• Communicate identified compliance gaps and recommend corrective actions.

6. Windows Infrastructure and Automation:

• Administer and troubleshoot Windows Server environments supporting security and auditing platforms.
• Support IIS and SQL Server backend components associated with the relevant solutions.
• Develop PowerShell scripts to automate data collection, reporting, administrative tasks, and remediation activities.
• Troubleshoot infrastructure, connectivity, configuration, and performance issues.
• Collaborate with infrastructure, IAM, and cybersecurity teams to maintain reliable platform operations.

Required Skills and Qualifications

--------------------------------------

Mandatory Platform Expertise:

• Demonstrated hands-on administration and engineering experience with Netwrix Auditor.
• Demonstrated hands-on administration and engineering experience with Stealthbits products.
• Practical experience configuring auditing, monitoring, access analysis, and reporting capabilities.
• Ability to troubleshoot platform issues and implement remediation actions.
• Experience with Access Analyzer or relevant Stealthbits access governance functionality.

Identity and Access Management:

• Strong engineering knowledge of Microsoft Active Directory.
• Experience with Microsoft Entra ID.
• Understanding of identity lifecycle, access governance, privileged access, and least-privilege principles.
• Experience auditing directory changes, group membership, permissions, and privileged access.

Data Security and Infrastructure:

• Deep understanding of NTFS permissions, shared folder permissions, and NAS storage auditing.
• Proficiency in Windows Server administration.
• Working knowledge of IIS and SQL Server backend management.
• Experience investigating access violations, permission changes, and suspicious activity.

Equal Opportunity

Employer

We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs.

We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.