JOB SUMMARY / GENERAL DESCRIPTION:
- The Identity and Access Management (IAM) Engineer is responsible for the development, deployment, and day-to-day support of IAM solutions.
- Responsibilities include requirements gathering, documenting standards, and administering IAM functions:
- Privilege Access Management (PAM), Single Sign-On (SSO), federation, Multi-Factor Authentication (MFA), user access policy and standards, user access request management, user provisioning, and Identity Governance and Administration.
ESSENTIAL JOB FUNCTIONS / PRINCIPAL ACCOUNTABILITIES
- Define user access policy, standards, roles and procedures for security, efficiency, and scalability.
- Provisioning and deprovisioning of regular and privileged, user access
- Effectively communicate user access policy and standards to stakeholders
- Participate in project work to ensure user access controls are addressed in technology designs, workflows, and operating procedures.
- Participate and/or lead Active Directory (AD), PAM, IAM, and MFA tool installation, integration, support, and operations.
- Participates in the development, validation, and execution of comprehensive IAM use cases and test plans
- Identifies, analyzes, and resolves data and complex user access workflow issues. Demonstrates ability to diagnose and resolve AD, PAM, MFA and IAM issues and to recommend areas for process improvement or innovation to management.
- Participate in Information Security audits and risk assessments.
Job Description – IAM Engineer – Subject Matter Expert For discussion purposes only
- Provides technical guidance to analyze, administer, and maintain user accounts and entitlements (e.g., infrastructure, applications (mainframe, web based, database), AD, etc. to ensure appropriate access rights are maintained.
- Collaboratively supports complex application implementations and upgrades.
- Supports the design, implementation, and adherence of access controls to protect data and applications
- Proactively establishes effective relationships with other support/service areas (e.g., engineering areas, business area development personnel, etc.) to promote efficient processing of access requests.
- Delivers prompt problem root cause analysis and corrective action plans, through to resolution.
- Ensures adherence to established change management processes and timelines.
- Participate in operational projects to support IAM products/services.
- Ability to independently work with minimal supervision, self-starter.
- Professional and effective written and verbal communication skills.
- Team player attitude with the willingness to help.
- Maintain changing workflows of organizational structure and requirements.
- Work with Architects to improve the IAM development space.
- Collaborate with Administrators and Analysts to understand current user account provisioning practice.
MINIMUM SKILLS AND QUALIFICATION REQUIREMENTS
- 3+ years or equivalent experience focused on IAM tools and technologies in the information security space.
- Bachelor’s Degree or demonstrated industry hands-on experience.
- Exposure in web based IAM related protocols such as SAML, SCIM, OpenID and OAuth, Federation concepts and technology such as ADFS and SailPoint is desired.
- Experience in one or more of the following is desired: ISO 17799, ITIL or NIST.
- Experience with Directories, SSO, Federation, delegated administration, and API gateways is desired.
- Experience using languages such as PowerShell, Python, Java, or others desired.
- Ability to work on multiple internal project work streams