Senior Cyber Security Engineer - IAM/PIM/PAM

Job Summary:

Architect and design of identity solutions for the enterprise including partnering with the business and tech to determine business decisions, processes, and technical requirements. As the IAM Infrastructure Engineer, candidate will work on a team of information security professionals and be accountable for operationalizing and administrating enterprise focused Identity and access management (IAM), Privileged identity management (IPM) & privileged access management (PAM) solutions where the focus lies on centralization and standardization of IAM, PIM & PAM services.

Responsibilities:

• Strong/expert working knowledge into IAM, IPM & PAM platform with at least 4-8 years’ experience with administrative duties.
• Implement automated provisioning, de-provisioning and reconciliation of resources and role-based access control (RBAC) strategies
• Hands on experience supporting multi-layer secure authentication infrastructure comprised of the following skills: Security Assertion Markup Language (SAML), Single Sign On (SSO), Federation, Multifactor Authentication (MFA) technologies
• Hands on experience integrating applications with SSO, MFA, API Management
• Hands on experience migrating legacy applications to modern authentication standards such as SAML, OIDC, OAuth.
• Knowledge base of Identity and Access Management (IAM) services, including Authoritative Source, Identity Management, Provisioning, Authentication, Authorization, Monitoring & Certifications, Auditing & Reporting.
• Working experience with Azure for securing identify mgmt. conditional access and integrating business applications for SSO, MFA, etc.
• Experience with traditional IAM solutions is plus, i.e. Sail Point IIQ, ForgeRock CyberArk, Thycotic & BeyondTrust is a plus
• Strong/expert level understanding of authentication mechanisms and protocols including LDAP and SAML, and key related security concepts such as MFA, and the ability to trouble shoot issues in this realm.
• Intimately familiar with IAM related protocols such as SAML, SCIM, OpenID and OAuth.
• Ability to understand the organizations’ Information Security “big picture” including the Compliance Regulations, business drivers, identity and access management processes, tools, and practices and their inter dependencies; and at the same time should have attention to implementation level details.
• Participate in the ongoing operations and enhancements of IAM solutions
• Enable Single Sign On integrations in multiple integration frameworks including SAML, OAUTH, and Open ID
• Experience managing privileged session management including SSH, RDP, and RDS apps
• Troubleshoot IAM system/component failures and provide solutions
• Solid understanding of Privileged Access Management concepts
• Develop a global IAM strategy, architecture and implementation plans
• Design, implement and manage an IAM enterprise infrastructure supporting critical business systems while ensuring scalability, resiliency and end user experience
• Expertise troubleshooting issues in the Password Safe environment
• Own the identity management policies and processes globally, maintaining applicable compliance in a Financial Technology company across our business segments
• Strong experience with user provisioning and self-service; account creation and management; entitlement review and certification; entitlement management; enterprise directory architecture and design; role-based access control; single sign-on; identity federation; privileged user access management; multi factor authentication.
• Serve as a key technical resource for all IAM efforts, projects, and applications with an understanding of Privileged Access Management concepts and the auditing of IAM compliance.
• Develop documentation that fully captures technical IAM baselines and operational capabilities
• Assist customers in developing a secured Identity management infrastructure and also to define security policies to protect their applications from unauthorized access.
• Strong Experience in cloud technologies like AWS, Azure & GCP
• In-depth understanding of enterprise identity management platforms, identity proofing principles, and identity management best practice.
• Strong understanding of Identity Governance & Administration concepts.

Requirements:

• Requires a bachelor’s degree and a minimum of 5 to 8 years of relevant experience
• Broad and deep experience with computing, network and system software environments, including Linux systems, Windows systems, and certificate management
• Develop and produce documentation, SOPs, reports, and presentation slide decks
• Conduct Root Cause analysis, recommend and implement relative fixes
• Using an incident management system, track incidents and requests. Provide support for implementing, troubleshooting, and maintaining identity management systems. Rapidly separate isolated user problems from enterprise-wide problem
• Configure, support and maintain Global infrastructure services related to Azure AD and multiple Active Directory environments.
• Intimately familiar with IAM related protocols such as SAML, SCIM, SPML, XACML, OpenID and Oauth
• Excellent analytical and business articulation skills with proven track record of collaborative design in an Agile team environment.
• Working knowledge of Identity and Access Management (IAM) concepts and technologies such as Active Directory, Azure AD, MFA, PIM.
• Working knowledge of Authentication Protocols – Kerberos, NTLM, SAML, OAuth, OpenID Connect (OIDC), FIDO2.
• Working knowledge of Privileged Identity / Access Management (PIM/PAM) Concepts and Security as ESAE and Bastion Forest.
• Working knowledge of PIM/PAM products, like CyberArk, BeyondTrust, etc.
• Preferred knowledge of IAM security standards (ISO/IEC 27002, ISO/IEC 27032, NIST SP 800-53 and 800-63).