The Identity and Access Management Engineer III position will provide thought leadership, strategic guidance, design consultation, project planning and implementation readiness assistance for our IAM program, which is now heavily influenced by a role based access control (RBAC) platform. This role will focus on understanding the current IAM landscape along with the ACA’s short, medium- and long-term requirements and help develop a roadmap for the department into the future.
Activities will require interaction with PAM Software, Onboarding, Active Directory, Azure, IAM software, Department Managers, AWS, and Offboarding. The position utilizes one-on-one consultancy to end users and ACA IT and HR staff. The position’s responsibilities require excellent written & verbal communication, team-oriented work ethics and problem-solving skills.
Essential Functions
Privileged Access Management [PAM] Assist with implementing a new Privileged Access Management (PAM) software and be a subject matter expert regarding the PAM software and capabilities to the organization.Identity & Access Management [IAM]Oversee IAM development and implementation efforts on major projects. Identify and document minimum necessary permissions and entitlements for all ACA users by using roles based on job title.Liaison with HR, Hiring Managers, and Infrastructure regarding Onboarding processes and proceduresManage end user Accounts & Credential LifecyclesSupport enterprise rollout of IAM initiatives and services (SSO, LDAP, SAML, etc)Amazon Web Services [AWS] IAMLiaison with Architect & Developers for any AWS IAM role creations/edits/auditsTechnical WritingDevelop/update policies, processes, protocols, and standards for the design, implementation, maintenance, and support of various enterprise PAM security and identity tools.Develop/update technical process & procedural documentation as neededDevelop/update any training documentation as neededCollaborate on any Standard Operating Procedures, Runbooks, and Statements of Work as neededResolve complex technical issues related to security and user access.Participate in user and access security, audit, and compliance investigations.Ensure all ACA systems, networks, and processes adhere to a layered security platform, follow NIST best practices, as well as Access security methodologiesPartner with internal departments as Information Security Subject Matter Expert [SME] to ensure layered security and address any security concerns for new ACA products/services.Serve as a liaison to technical and business users to ensure requirements are understood and interpreted correctly.Identify and manage existing and emerging risks that stem from identity and access management functions.Augment and enhance user, role, and permissions audits.Participate in enterprise roadmap discussions and feature requests as they relate to identity and access management functions.Collaborate with peers to tune and enhance information security as it relates to identity, access, and privileged access management.
Qualifications
Experience working with IAM and PAM technologies in an implementation or designer role. Solid understanding of RBAC, and its applicability in large, regulated environments.Advanced Knowledge of Identity & Access Management End User Accounts & Authorization, Authentication and Credential LifecycleAdvanced Knowledge of single-sign-on, federation, and multi-factor authentication tools and services.Knowledge of Active Directory and Azure Active DirectoryKnowledge of network and host-based security, applications and data securityKnowledge of Atlassian JIRA ticketing systemAbility to understand and translate technical terminology and/or aspects of projects/tasks.Excellent technical investigation and problem-solving skills.Ability to work alone and in a team setting.Good verbal and written communication skills with a strong customer service orientation.CompTIA Security+ certification is a plusAWS Cloud Practitioner certification is a plus
Supervisory Responsibility
This position has no supervisory responsibilities.
Work Environment and Physical Demands
This job operates in a professional office environment. This role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fax machines.
Position Type/Expected Hours of Work
This is a full-time position with a work schedule of Monday-Friday with some schedule variations as needed.
Travel
This position will require up to 10% travel.
EEO Statement
ACA provides equal employment opportunities (EEO) to all applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. ACA complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities.
California Privacy Notice
"As an employer of California residents, we are dedicated to protecting your privacy rights. Any personal information you provide during the application process will be used solely for permitted internal purposes and will be handled in accordance with applicable privacy laws. By applying to this position, you consent to the collection, use, and disclosure of your personal information as described in our Employee Privacy Notice."
Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.
#LI-MH1
Options Apply for this job onlineApplyShareRefer this job to a friendRefer <p style="margin: 0px;">Sorry the share function is not working properly at this moment. Please refresh the page and try again later.</p> Share on your newsfeed Send this job opportunity to a friend, colleague, or family member: Application FAQsSoftware Powered by iCIMS
www.icims.com