Offer summary

Qualifications:

Bachelor's degree in Computer Science, Cyber Security, or a related field., 5-10 years of experience in Identity & Access Management (IAM)., Strong understanding of IAM protocols and technologies such as OAuth, SAML, and LDAP., Excellent communication skills to liaise between business and IT..

Key responsabilities:

Design and implement IAM solutions and strategies for the organization.

Lead technical project execution and performance analysis for IAM systems.

Create role-based access policies and conduct business analysis to meet organizational needs.

Manage IAM services and provide thought leadership in IT strategy and operations.

Job description

About the Opportunity:
Our client is currently looking for an experienced workforce Identity & Access Management (IAM) consultant to assist in directing resources on behalf of the Identity & Access Management Senior Manager in the Information Security and Risk Management department in support of a large scale IAM Modernization Program. This is a 16-month remote project with some travel required.
Responsibilities:

Design, implement, and support various Identity and Access Management (IAM) solutions in the Identity Management System (IDMS) space.
Conduct in depth technical IAM research, assessments, and performance analysis to support and design technical automated IAM strategies
Lead scalability and performance planning for future IAM needs
Review and adjust existing IAM processes (provisioning, de-provisioning, re-certifications, etc..) to ensure that they are aligned with industry best practices
Lead technical project execution to identify and close gaps between proposed and implemented designs
Serve as SME on identity & access management within enterprise partnering with all lines of business to identify systems and identify repositories to be managed by identity and access management solutions
Create role-based access policies & risk profiles for associated applications in IDMS
Business analysis functions to make sure solution meets both the needs of the business and risk organization requirements
Develop cost benefit and risk analysis models to assist with new development efforts
Management of the Identity and Access Management services including IDMS
Provide thought leadership in IT Strategy, operations and innovations as related to the Identity and access management service
Manage the implementation of technologies to enable business value and adoption
Drive successful delivery and implementation of key enterprise initiatives related to Identity Management technologies
Interact with key business IT and stakeholders to proactively identify business problems and opportunities that can be addressed with innovative technology solutions
Conduct research into new technologies, including tools, components, and frameworks
Train and share knowledge with IAM team

Required Skills:

5 - 10 Years' Experience in IAM.
Ability to direct resources for technical engineering and implementation including prioritization.
- Identity Management
- o Access Management
- o IDMS Engineering
- o Access Management Engineering
- o SOD Implementation
- Access Management approval workflows
5-7 years’ experience with the following:
- Global Workforce IAM
- National Institute of Standards and Technology (NIST) 800-53

o NIST 800-63

NIST Cybersecurity Framework (CSF)

o Experience developing and implementing IAM strategies and roadmaps o Experience with major IAM platforms including:

Microsoft Active Directory
One Identity Manager
Ping Federate

Ability to work as liaison between business and information security/information technology
Ability to clearly explain IAM concepts to audiences of various levels.
Broad and deep understanding of IAM-related capabilities, patterns, protocols, technologies, and solutions.
Intimately familiar with IAM-related protocols such as OAuth, OIDC, SAML, LDAP, SPML, XACML, SCIM, Kerberos, PKI (certs, CA’s, digital signatures, etc.).
Strong experience with directories, SSO, federation, MFA, RBA, delegated administration, API gateways, SOA services.
Strong familiarity with adjacent technologies such as PingFederate/PingOne, IGA (e.g.: Aveksa, SailPoint or ForgeRock), virtual directory (e.g.: Radiant), API management (e.g.: Apigee, Mulesoft).
Ability to write requirements
Experience working in large global enterprise environments
Strong written and verbal communication skills
Supporting communication of IAM efforts to all levels of an organization including C-Level
Ability to work in a global enterprise environment including for global time zones.

Preferred Skills:

Experience with Quest One Identity Manager
Excellent interpersonal communication skills with strong spoken and written English
Implementation experience
Collaborative team worker

Required Education:

Bachelor's degree in Computer Science, Computer Engineering, Cyber Security or similar or equivalent experience.

Preferred Education:

Cybersecurity certifications such as CISSP, CISM, IDMS vendor certifications, etc.

The Company is an equal opportunity employer and makes employment decisions on the basis of merit and business needs. The Company will consider all qualified applicants for employment without regard to race, color, religious creed, citizenship, national origin, ancestry, age, sex, sexual orientation, genetic information, physical or mental disability, veteran or marital status, or any other class protected by law. To comply with applicable laws ensuring equal employment opportunities to qualified individuals with a disability, the Company will make reasonable accommodations for the known physical or mental limitations of an otherwise qualified individual with a disability who is an applicant or an employee unless undue hardship to the Company would result.

Required profile