<p>Kforce has a client that is seeking a Quest ARS Engineer IV in Nashville, TN.</p> <p>Key Responsibilities: Design & Architecture:</p> <ul> <li>Architect and deploy Quest Active Roles Server solutions for large-scale, hybrid identity environments </li><li>Define and implement ARS architecture, including Administration Service, Web Interface, and AD LDS configuration store </li><li>Develop high-availability and disaster recovery strategies for ARS and supporting infrastructure </li></ul> <p>Identity Management & Automation:</p> <ul> <li>Configure and manage Role-Based Access Control (RBAC), Access Templates, and Managed Units for delegated administration </li><li>Build and maintain policy-based workflows for user provisioning, deprovisioning, and approval processes </li><li>Implement automation for M365 license assignment, group management, and mailbox provisioning using ARS policies and PowerShell scripts </li></ul> <p>Integration & Customization:</p> <ul> <li>Integrate ARS with Active Directory, Entra ID, and Microsoft 365 services </li><li>Customize ARS using PowerShell scripting, event handlers, and API integrations to meet business requirements </li><li>Collaborate with ITSM and HR systems for automated joiner/mover/leaver processes </li></ul> <p>Security & Compliance:</p> <ul> <li>Enforce least-privilege delegation and separation of duties through ARS RBAC </li><li>Implement auditing and reporting for compliance with regulatory standards (SOX, HIPAA, etc.) </li><li>Ensure secure connectivity, certificate management, and MFA/SSO integration for ARS Web Interface* Looking for someone with deep experience designing, implementing, and supporting ARS to manage Active Directory (AD), Microsoft 365 (M365), and Entra ID (Azure AD) in hybrid environments </li><li>Expert knowledge of ARS architecture, RBAC, Access Templates, and workflow automation </li><li>Strong background in Microsoft Active Directory design and support </li><li>Experience with hybrid identity, directory synchronization, and M365/Entra ID integration </li><li>Ability to customize ARS using PowerShell, event handlers, and API integrations </li><li>Solid understanding of security, compliance, and least-privilege delegation </li></ul> <p>Expert-level experience with Quest Active Roles Server:</p> <ul> <li>Architecture, deployment, and configuration in enterprise environments </li><li>RBAC design, Access Templates, Managed Units, and workflow automation </li><li>Customization using PowerShell, event handlers, and API integrations </li></ul> <p>Extensive experience with Microsoft Active Directory:</p> <ul> <li>Multi-domain/forest design, GPOs, OU structure, and security delegation </li></ul> <p>Strong knowledge of:</p> <ul> <li>Hybrid identity and directory synchronization (AD; Entra ID) </li><li>Microsoft 365 integration (Exchange Online, Teams, Groups, license management) </li><li>Security and compliance best practices for identity management </li></ul> <p>Hands-on experience with:</p> <ul> <li>PowerShell scripting for automation </li><li>High availability and disaster recovery for ARS and supporting components </li><li>SSO/MFA integration (e.g., Entra ID Conditional Access, Okta) </li></ul> <p>Preferred Skills:</p> <ul> <li>Experience with ITSM integrations (e.g., ServiceNow) and HR-driven provisioning </li><li>Familiarity with REST APIs and modern identity governance frameworks </li><li>Knowledge of PKI, certificate lifecycle management, and secure credential handling </li></ul>