Kinaxis-posted about 1 year ago
Full-time • Senior
Remote • New York, NY
1,001-5,000 employees
Professional, Scientific, and Technical Services

The Security Engineer, Identity and Access Management (IAM) is responsible for managing and securing identities and access privileges within Kinaxis. This role focuses on ensuring appropriate access to information systems, minimizing unauthorized access risks, and implementing security measures in a hybrid Cloud environment. The engineer will collaborate with various teams to ensure IAM controls and secrets management are effectively implemented to protect the organization's information security.

  • Develop and implement IAM policies and procedures
  • Design and implement systems that enhance the security of Kinaxis IAM Systems
  • Document and implement identity governance solutions, access certification and reporting
  • Troubleshoot and manage issues related to identities, systems access accounts, secrets, authentication, authorization, entitlements, and permissions
  • Conduct design reviews related to IAM and Secrets management, providing recommendations on control implementations based on findings
  • Build and maintain tools that improve the Identity and Access Management posture
  • Participate in the development and oversight of corrective actions relating to security issues as it relates to Identities and Secrets
  • Implement technologies to centrally integrate identity systems across the organization and automate solutions
  • Design, implement, and manage Identity Directories and identity services
  • Collaborate with cross-functional teams to understand access requirements, secrets management requirements and drive the design, development, and implementation of improvements to our IAM systems
  • Evaluate current secrets management posture and provide integration recommendations, ensuring alignment with organizational objectives
  • Design and implement secure sharing mechanisms for controlled access to secrets
  • Provide technical expertise and support for incident response related to IAM and secrets management
  • Collaborate with the Security Operations team to implement adequate account and secret monitoring and logging capabilities
  • Provide Level 3 support for IAM related internal issues and requests
  • Implement and maintain technologies to ensure audit and privacy compliance
  • Improve identity and access management solutions and systems for protection against evolving threats and efficiency
  • BSc or BA in Information Security, Computer Science, Information Systems, or demonstrated equivalent experience
  • Minimum of 5 years' experience in Information Security (with at least 3 years as an IAM engineer or in a related position)
  • Certifications such as Certified Identity Management Professional (CIMP), Certified Identity and Access Manager (CIAM) can enhance job prospects
  • CISSP, CCSP, Comptia Cloud+/Security +, CISM, or GIAC certifications is an advantage
  • Okta Certified Professional and Okta Certified System Administrator preferred
  • Familiarity with cybersecurity best practices and industry standards
  • Strong communication skills, both verbal and written
  • Ability to manage competing priorities and simultaneous projects in a fast-paced environment with little supervision
  • Extensive knowledge and experience with identity and access management concepts such as single sign-on (SSO), multi-factor authentication, passwordless authentication etc.
  • Comprehensive knowledge and experience with authentication standards and technologies such as OAuth, OpenID Connect, SAML, LDAP etc.
  • Proficiency in using and configuring secrets management tools (e.g., HashiCorp Vault, PMP, etc.)
  • Experience with Privilege Identity Management (PIM) and Privilege Access Management (PAM) systems (e.g. Azure PIM, CyberArk etc.)
  • Extensive hands-on knowledge of identity and access management best practices, procedures, and software solutions such as CyberArk, Okta, etc.
  • Experience with security and compliance requirements/frameworks, including but not limited to ISO 27001, NIST frameworks, GDPR, HIPAA, SOX, PCI, SOC2, OWASP etc.
  • Experience with Directory services such as Azure IAM, Google IAM, Active Directory etc.
  • Working knowledge of PowerShell, Python, or other scripting languages is an advantage
  • Strong diagnostic and troubleshooting skills.
  • Flexible vacation and Kinaxis Days (company-wide day off on the last Friday of every month)
  • Flexible work options
  • Physical and mental well-being programs
  • Regularly scheduled virtual fitness classes
  • Mentorship programs and training and career development
  • Recognition programs and referral rewards
  • Hackathons
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service