What are the responsibilities and job description for the Identity & Access Management (IAM) Engineer position at CSS Tec?
Job Details
DIRECT HIRE FULL TIME - Identity & Access Management (IAM) Engineer opportunity!
As a member of the Information Services Department, the Identity & Access Management (IAM) Engineer will be responsible for managing Security Projects and Initiatives, implementing and maintaining Authentication and Authorization Frameworks, design and implementation of Lifecycle and Access Strategies leveraging the IGA tool to implement the Firm s Information Security policy as well as industry best practices.
ESSENTIAL FUNCTIONS:
- Design and Implement Authentication and Authorization frameworks to protect systems and information.
- Develop and Maintain Single Sign-On configurations used by the organization.
- Create and develop IAM solutions for internal requirements and client requests.
- Collaborate and coordinate with other teams to establish security protocols across the Firm.
- Develop and maintain IGA solutions to provide efficient and effective lifecycle and access management.
- Create, develop, and maintain enforcement mechanisms to ensure that Firm policies are being adhered to across the Firm.
- Administration of Active Directory and EntraID services.
- Management of Enterprise and Team level projects while achieving deadlines set by the Firm.
- Respond and resolve to tickets incoming from End Users and other IT Members.
- Responsible for the development and administration of the IGA and PAM systems.
- Documentation around architecture and policies/procedures.
- Provide after hours and rotational shift coverage as required.
ADDITIONAL FUNCTIONS:
- Support adjacent security functions within the team.
QUALIFICATIONS (EXPERIENCE, KNOWLEDGE, SKILLS AND ABILITIES): Education:
- Bachelor s degree in information security or related field required. An equivalent combination of work and education may be considered in lieu of degree.
Experience:
- Minimum of five years in an IAM role required.
Knowledge, Skills, & Abilities:
- Knowledge of Authentication Frameworks (SAML, OAuth, JWT, API Tokens).
- Experience using languages such as Powershell, Python, or other current programming and scripting languages.
- Working knowledge of Active Directory/EntraID and their sub-services (Authentication, Authorization, Conditional Access, Multifactor, etc.)
- Strong analytical and problem-solving skills to enable effective security event and problem resolution.
- Proficiency in working with APIs using Rest/Soap/Oauth.
- IGA experience required, preferably Sailpoint.
- Knowledge of compliance standards (HIPAA, CCPA, GDPR, etc.)
- Knowledge of RBAC/ABAC principles and their implementations.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
