Engineer III, Cloud Platform - IAM

About the position

The Engineer III, IAM Cloud will be hands-on in engineering and automating the Identity and Access management system, building and automating primarily in Python. You will set-up governance controls, SSO, MFA and Entra IAM. You will advise and implement process improvement as well as introduce and enforce standardization, modernization, and automation. You will build and maintain our IAM tool set, and services that users can leverage.

Responsibilities

• Develop, implement, and maintain identity and access management (IAM) solutions and systems.
• Evangelize, research, and build proof of concepts to introduce new features and capabilities in the IAM and PAM space.
• Collaborate with cross-functional teams like security and IT to develop the processes and tools to deploy, scale, monitor and manage the IAM systems on prem and cloud.
• Troubleshoot, identify, and resolve technical identity and access management related issues.
• Improve identity and access management solutions and systems for protection against evolving threats and introduce efficiency.
• Be a peer mentor to other members of the organization on the best practices that should be followed for IAM.
• Research current IAM threats and suggest solutions.
• Enable operations teams and the development teams through the development and application of reliability and resiliency patterns and best practices.
• Collaborate with software teams to identify sources of instability and drive operational excellence.
• Participate in system design consulting, platform management, and capacity planning.
• Partner with stakeholders from technology teams and business stakeholders to ensure that current and planned solutions are equipped to meet the growth and transformation needs of our organization.

Requirements

• Bachelor's degree or higher or equivalent in Computer Science, Engineering, Information Systems, or related discipline.
• 5+ years' experience designing and implementing IAM solutions including IGA solutions (Saviyent, Sailpoint, etc) within a cloud environment.
• 3+ years' experience implementing Privileged Access products.
• 3+ years' experience implementing Single sign on products (Okta, OneLogin, etc).
• Comprehensive knowledge of IAM, SSO, PAM functions, implementation principles, and role within a zero-trust security architecture.
• Understanding of Identity Governance and Administration (IGA) and its intersection with PAM.
• Experience writing python and PowerShell scripts / building automated around the existing process.
• Comprehensive knowledge and experience with authentication standards and technologies such as multi factor authentication, JSON Web Token (JWT), etc.
• Extensive knowledge and experience with identity and access management technology, such as single sign-on (SSO), two-factor authentication, privileged access management, etc.
• Experience with Windows, Lunix / Unix, scripting (Bash or Powershell), LDAP, SQL, and web services.
• ServiceNow experience a plus.

Nice-to-haves

• AWS Certified Security Specialty preferred.

Benefits

• Medical, dental, vision, and basic life insurance.
• 401k plan.
• Minimum of 18 days of paid time off each year.
• 12 paid holidays throughout the calendar year.