Job description

Discovery / Identity & Automation Engineer Must Have Technical/Functional Skills Varonis DAG: interpreting collector scan data, group membership analysis, over-permission and stale-access reporting and access reviews. NTFS ACL analysis and translation into SharePoint permission models. Active Directory group administration and Entra ID group management. Security group design to the three-group least-privilege pattern - service account, read-only and read/write. PowerShell and PnP. PowerShell: bulk site provisioning, permission assignment, inventory and evidence logs. Microsoft Graph and SharePoint CSOM scripting for reporting and bulk remediation. File-system analysis at scale - path-length inventories, duplicate and orphan detection and aging and size profiling. Retention label and policy application so existing retention carries forward correctly. Required Experience Strong experience with Varonis DAG, NTFS ACL analysis, Active Directory, Entra ID and SharePoint permissions. Advanced PowerShell, PnP. PowerShell, Microsoft Graph and SharePoint CSOM scripting capability. Experience with large-scale file-system discovery, least-privilege design and retention controls. Key Responsibilities Interpret Varonis and file-system discovery data to identify ownership, access and remediation needs. Translate NTFS ACLs into sustainable SharePoint permission models. Design service-account, read-only and read/write security groups using least privilege. Automate provisioning, permission assignment, inventory, reconciliation and evidence logging. Identify duplicates, orphaned content, stale data and long paths, and validate retention carry-forward. Salary Range- $100,000-$120,000 a year #LI-SP3 #LI-VX1

Requirements

Must-haves

Discovery / Identity & Automation Engineer
Must Have Technical/Functional Skills
Varonis DAG: interpreting collector scan data, group membership analysis, over-permission and stale-access reporting and access reviews.
NTFS ACL analysis and translation into SharePoint permission models.
Active Directory group administration and Entra ID group management.
Security group design to the three-group least-privilege pattern - service account, read-only and read/write.
PowerShell and PnP. PowerShell: bulk site provisioning, permission assignment, inventory and evidence logs.
Microsoft Graph and SharePoint CSOM scripting for reporting and bulk remediation.
File-system analysis at scale - path-length inventories, duplicate and orphan detection and aging and size profiling.
Retention label and policy application so existing retention carries forward correctly.
Strong experience with Varonis DAG, NTFS ACL analysis, Active Directory, Entra ID and SharePoint permissions.
Advanced PowerShell, PnP. PowerShell, Microsoft Graph and SharePoint CSOM scripting capability.
Experience with large-scale file-system discovery, least-privilege design and retention controls.
Interpret Varonis and file-system discovery data to identify ownership, access and remediation needs.
Translate NTFS ACLs into sustainable SharePoint permission models.
Design service-account, read-only and read/write security groups using least privilege.
Automate provisioning, permission assignment, inventory, reconciliation and evidence logging.
Identify duplicates, orphaned content, stale data and long paths, and validate retention carry-forward.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: careers-page
Effort: medium

Benefits

Benefits detected in the listing.

Vision