Info Security Engineer presso Ameriprise

We have an exciting opportunity as an Info Security Engineer at Ameriprise! Responsible for supporting the design, implementation, and day-to-day operations of the organization's Active Directory and identity infrastructure. This role focuses on maintaining secure and reliable directory services, assisting with identity lifecycle management, and contributing to automation and compliance efforts. The engineer will work closely with senior team members and cross-functional partners to ensure consistent delivery of identity services across on-premises and cloud environments.

Key Responsibilities

Directory Services Management

• Maintain and support Active Directory forests, domains, and OU structures.

• Assist with Group Policy Object (GPO) creation and updates to enforce standards.

• Monitor AD health, replication, and performance metrics.

Infrastructure Operations

• Support DNS, DHCP, and certificate services integrated with AD.

• Apply security baselines and assist with hardening efforts.

• Participate in AD upgrades, migrations, and consolidation projects.

Identity & Access Controls

• Help configure Conditional Access and MFA policies in Microsoft Entra ID (Azure AD).

• Support role-based access controls and privileged access management.

• Assist with compliance activities related to identity systems.

Automation & Scripting

• Develop and maintain PowerShell scripts for routine tasks and reporting.

• Contribute to integration efforts with identity governance tools.

Support & Troubleshooting

• Respond to and resolve AD-related incidents and service requests.

• Escalate complex issues to senior engineers as needed.

• Participate in on-call rotation for critical support coverage.

Collaboration

• Work with security, cloud, and application teams to support identity integrations.

• Document procedures and contribute to team knowledge base. #LI_DNI

Required Qualifications

• 3–5 years of experience supporting enterprise Active Directory environments.

• Solid understanding of AD DS, DNS, DHCP, Group Policy, and Kerberos.

• Experience with Microsoft Entra ID (Azure AD) and MFA configuration.

• Familiarity with identity security practices and compliance frameworks.

Preferred Qualifications

• Microsoft certifications (e.g., MCSA, Identity and Access Administrator Associate).

• Exposure to identity governance tools (e.g., CyberArk).

• Understanding of hybrid identity models and federation protocols (ADFS, SAML, OAuth).

• Experience with cloud platforms (Azure, AWS) and Zero Trust principles.

• Proficiency in PowerShell scripting.

About Our Company
We’re a diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of 2024. With our team of more than 20,000 people in 20 countries, we advise, manage and protect assets and income of more than 3.5 million individual, small business and institutional clients. We are a longstanding leader in financial planning and advice, a global asset manager and an insurer. Our unwavering focus on our clients and strong financial foundation connects each of our unique businesses - Ameriprise Financial, Columbia Threadneedle Investments and RiverSource Insurance and Annuities. Here, we foster meaningful careers, invest in the future, and make a difference for clients, institutions and communities around the world.

The estimated base salary for this role is $104,900 - $140,000 a year. We have a pay-for-performance compensation philosophy. Your initial total compensation may vary based on job-related knowledge, skills, experience, and geographical work location. In addition, most of our roles are eligible for variable pay in the form of bonus, commissions, and/or long-term incentives depending on the role. We also have a competitive and comprehensive benefits program that supports all aspects of your health and well-being, including but not limited to vacation time, sick time, 401(k), and health, dental and life insurances.Full timeExemptTechnologyTECH Technology Candidarsi ora