IAM Engineer

Job Description

Job Description

The IAM Engineer is a proven technologist and a hands-on problem solver, as well as an effective internal consultant, who will regularly advise others on access and security/risk related issues. The incumbent must possess domain competencies in a number of related disciplines, including security, risk, access control, overseeing backend technology with Okta, ARS/AD/Azure (on premises and Cloud based) authentication, multi factor authentication and entitlements reviews.

• Work with the IAM Manager to build out and oversee the IAM function’s technical controls and its related activities including planning, solutioning, testing, reporting and delivering IAM services.
• Oversee the implementation of all current solutions to ensure they are configured appropriately and are delivering maximum value for the Firm. Review current documentation such as Procedures, run books, and Knowledge Base Articles used by the Service Desk. Review and/or establish Best Practices where applicable
• Engage and interact with other IT Departmental Engineers to ensure future efforts (ours and theirs) result in continued uninterrupted delivery of all IAM services.
• Demonstrate extensive understanding of IAM concepts such as directory services, SSO, federation, MFA, provisioning, access certification, roles and SOD.
• The analysis, design, implementation, and maintenance of all layers of IAM applications, including Authorization / Authentication and Account Creation / Management / Provisioning / Retirement in data repositories. Including; strategy, organizational design, process re-engineering and technology implementation.
• Functional areas and work experience should include; fine-grained access control, policy-driven security, Identity Governance, Access Management, and Privileged access management, user provisioning/de-provisioning, and federation.
• Provide support with respect to requirements gathering, project management and delivery of one or more Identity platforms, such as SailPoint (Identity IQ), Okta, and Saviynt.
• Serve as the central point of contact for information security and IAM policy and process related issues.
• Address Vulnerabilities, Pentest findings and audit issues in a timely manner.
• Participate in a 24x7x365 on-call rotation
• Stay abreast of industry trends, solution landscape and market conditions and update peers and management accordingly.
• Other duties, as assigned.

Education and/or Experience:
Required:

• Bachelor's degree or equivalent combination of education and/or experience.
• Minimum of 3 years of experience in a Technical IAM related role, ranging from technical tool evaluation/selection, implementation and operations. Cloud based utilization and cloud adoption a must.
• Experience with Microsoft Active Directory (Azure AD) and GPO management, Windows Desktop and Server environments.
• Experience with IT Security and Governance Risk and Compliance functions and their needs.
• Working knowledge of IT management frameworks such as Control Objectives for Information and Related Technology (COBIT) and/or Information Technology Infrastructure Library (ITIL).
• Experience developing, deploying, integrating and supporting IAM services within a larger IT organization showcasing strengths in teamwork and establishing successful partnerships.

Preferred:

• Multiple years of Legal Industry or Financial Services experience
• Experience initiating new technologies and delivery high level services
• Experience interacting with senior/executive members and presenting material in a simple straight forward manner
• Industry specific training or certification

Other Skills and Abilities:
The following will also be required of the successful candidate:

• Strong organizational skills
• Strong attention to detail
• Good judgment
• Strong interpersonal communication skills
• Strong analytical and problem-solving skills
• Able to work harmoniously and effectively with others
• Able to preserve confidentiality and exercise discretion
• Able to work under pressure
• Able to manage multiple projects with competing deadlines and priorities

#zip