Identity and Access Management (IAM) Architect

US11 IDEXX Distribution, Inc.

Full-time - Senior

5,001-10,000 employees

About the position

The Identity and Access Management (IAM) Architect at IDEXX is responsible for designing, implementing, and overseeing the organization's IAM strategy. This role focuses on ensuring secure, efficient, and compliant access to various systems and applications, leveraging technologies such as Microsoft Active Directory and Azure. The IAM Architect will develop and enforce policies related to Application Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Role-Based Access Control (RBAC), while ensuring adherence to audit requirements and collaborating with cross-functional teams to align IAM initiatives with business objectives.

Responsibilities

• Lead and manage a team of 3 systems administrators in day-to-day network access tasks.
• Assess and enhance IDEXX's existing domain structure and user policies.
• Design and implement Role-Based Access Control (RBAC) policies with a focus on Zero Trust.
• Develop and implement an enterprise-wide IAM strategy that aligns with business goals and security requirements.
• Design and architect IAM solutions, including SSO, MFA, and identity federation.
• Create and enforce IAM policies, procedures, and standards, focusing on RBAC frameworks.
• Lead the deployment and integration of IAM technologies, leveraging Microsoft Active Directory (on-premises and Azure).
• Evaluate and select appropriate IAM tools and solutions to enhance security and user experience.
• Collaborate with IT, security, and business teams to understand access requirements and implement appropriate controls.
• Provide expert guidance and mentorship to IAM team members and other IT staff.
• Develop automation scripts and workflows to streamline provisioning and de-provisioning processes.
• Act as the highest escalation point for complex access issues not resolved by the IT Help Desk.
• Ensure that IAM practices meet audit requirements and assist in audit activities.

Requirements

• Extensive experience in IAM architecture and strategy development.
• Deep understanding of IAM principles and technologies, including MFA, OAuth, SSO, SAML, and OpenID Connect.
• Proficient with Microsoft Active Directory (on-premises and Azure) and Azure AD Connect.
• Advanced proficiency in scripting tools, such as Microsoft PowerShell, for automation and management tasks.
• Familiarity with compliance standards such as ISO 27001, NIST, GDPR, and SOX.

Nice-to-haves

• Desired experience with ServiceNow ITSM platform and its integration with IAM processes.
• Strong analytical and problem-solving abilities.
• Proven track record of working collaboratively across departments.

Benefits

• Competitive compensation
• Incentives
• Benefits package
• Positive and respectful work culture
• Opportunities for learning and discovery