Identity Management Engineer

Overview

Provide support and management of the IAM / IAG service, develop new solutions within the IAM software. This would include new integrations with the IAM service for end systems. Continual development of the access provisioning processes. Reporting and auditing of identities within the IAM solution and acting on any issues that do not conform.

Responsibilities/Job Description

• Implementation of different Access Controls solution for customer applications, infrastructure and business groups to prevent excessive permissions and rights to the customer's IT environment.
• Designs, configures, tests, implements, supports and administers centralized identity and privileged access management (IAM and PAM) solutions including local, cloud, hybrid integration services. 
• Assist team in managing SSO, MFA and Federation services (SAML, OAuth, OpenID Connect). This will include consulting business lines, working with vendors, and determining proper technology to use based on use cases and vendor capabilities.
• Performs as subject matter advisor to functional area and may become actively involved, as required, to meet schedules and resolve problems highly complex in nature.

Qualifications

Required

• Bachelor’s degree in IT or equivalent work experience
• 1+ years of experience in information security or IT.
• Technical knowledge of network systems, protocols, and standards such as Ethernet, LAN, WAN, TCP/IP, and so on.
• Working knowledge of information security and computer network/system access technologies.
• Knowledge of classic authentication platforms: Kerberos, LDAP, Radius, Tacacs+ etc.) and Federation platforms/protocols (Oauth, OpenID, SAML, WS-Fed, etc.)
• Effective verbal and written communication skills that include the ability to present ideas in user-friendly, business-friendly and technical language

Preferred

• Bachelor’s degree in IT or equivalent work experience
• Experience in Information Security with a focus on Identity and Access Management, Identity Governance, and the operation of corresponding tools, processes, and controls
• Advanced knowledge of LDAP administration or other database experience
• Moderate knowledge/experience with Linux OS
• Experience integrating Cloud based solutions into the IAM framework
• Experience designing cloud scale solutions, familiarity with reference architectures and best practices
• Experience designing implementing of security controls (MFA, Conditional Access) and reference frameworks (NIST, CIS etc.)
• Experiencing in troubleshooting problems involving MFA and SSO products
• Relevant certifications in IAM are a plus

Preferred License/Certification/Registration

CompTIA, SANS GIAC, Offensive Security, (ISC)2 or equivalent security certification.