Lead Identity Management Engineer (IAM)

The Group You’ll Be A Part Of

The Information Security department is dedicated to securing Lam through best-in-class security practices. Together, we support users globally with data, information, and systems to achieve their business objectives.

The Impact You’ll Make

Responsible for leading the IAM technical delivery of Identity solutions. Enable the workforce with a method of providing application and business services with a least-privilege access model. Working cross-functionally with HR and GIS teams to deliver end-to-end identify management services. Drive solutions based on business needs in support of major project initiatives related to Lam's Digital Transformation program. Provide IAM development leadership with peers and managed service providers.  Support the development of multi-year roadmaps and capabilities and communicate broadly where appropriate.  Be a key member of the IAM Service Management team.

What You’ll Do

The IAM Engineer role will consist of the following components:

 

1. Ability to customize Saviynt including custom connectors, workflows, role mining, etc.

2. Where required, take legacy text-file or SQL-based connectors and refactor them into API driven connectors.

3. Active Directory and Entra ID services knowledge and experience

4. Basic network and infrastructure troubleshooting (ports, firewalls, etc,)

 

Primary Duties and Responsibilities: 

• Develop connectors to downstream applications using out-of-box connectors or custom RESTful API connectors.
• ·Create custom logic and workflows in Saviynt to meet business requirements 
• ·Work cross-functionally with other GIS technical resources to orchestrate end-to-end solutions
• ·Customer analytics and reports in Saviynt for operations and governance of system solutions. 
• ·Must be able to test APIs with Postman or similar tools. 
• ·Lead meetings with stakeholders and company IAM Program Team members. 
• ·Translate functional requirements into technical solutions.

Who We’re Looking For

·IAM Experience:

• Engineers should have experience developing IAM connectors.
• Saviynt experience is preferred but similar experience is acceptable provided the candidate can learn the Saviynt APIs required
• Extensive experience in refactoring text-file based connectors and SQL-based connectors to modern API-based connectors
• Custom job and multilevel workflow development
• Extensive experience performing ETL routines as required as part of IAM data pipelines
• Familiar with concepts such as role mining, separations of duty, role attestation, RBAC, and ABAC

 ·API Experience:

• Must be experienced in general RESTful API implementation
• Must be comfortable looking at publicly available APIs and implementing an API gateway to secure API calls
• Must be able to document all work for knowledge transfer
• Must be able to take high level functional requirements and translate them to code as required
• Must be able to comfortably communicate with internal stakeholders verbally.

Preferred Qualifications

 Skills and Qualifications: 

• ·Experience deploying and managing Identity Management platforms for large global enterprises·
• Programming experience in one or more programing languages (Java, Node, etc.)
• Experience with relational databases to write SQL views and SQL queries.