Identity & Access Management (IAM) Security Engineer Senior

Overview

The Identity & Access Management (IAM) Senior Security Engineer is a pivotal member of the Information Technology team, entrusted with the key responsibility of driving continuous improvement and robust support of IAM toolsets and Identity Governance and Administration (IGA) processes. This role is central to the development, implementation, and maintenance of a comprehensive IAM program, encompassing end-to-end solutions. As a technical subject matter expert, the incumbent will offer indispensable insights and guidance across the organization.

 

Key responsibilities include strategizing and maintaining a roadmap for IAM that aligns with both business and technological objectives, collaborating closely with various teams such as Cyber Security, Human Resources, RPA, and Lines of Business (LoBs) to create efficient, user-friendly IAM solutions. The role demands active management and implementation of procedures to regulate the workflow of user access provision, modification, and termination across relevant platforms and applications. Additionally, the role involves the development and implementation of key performance indicators (KPIs) and key risk indicators (KRIs), including the creation of scorecards/dashboards.

 

A crucial aspect of this position is working with the design, implementation, maintenance, and troubleshooting of the organization’s automated access control and identity management systems. The role requires performing user access reviews, identifying process deficiencies, suggesting and implementing improvements, and processing special security access requests in a timely manner.

 

This role has a significant business component beyond technical engineering position, requiring collaborative work across the organization and its divisions to develop business reporting capabilities. It is ideally positioned for career progression towards managing an IAM program, offering a blend of technical expertise and business acumen.

 

Qualifications

• 5-7 years of prior experience in the following IAM Technologies: IAM, IGA, SSO, MFA, Active Directory, Digital Certificates, and Certificate Authority.
• Experience leading IAM delivery processes to ensure automation, security, and governance as best practices. Have led, deployed, or been heavily involved in large scale rollout of IAM platform solution previously.
• Have an expert knowledge of IAM concepts such as Least Privilege, Privilege Access, Roles and Data mining, Segregation of duty (SoD) and Role Based Access Control.
• Must be comfortable working within IAM platforms including building of customer workflows, connectors, and other customization that would be required to managed across a multitude of systems.
• Strong knowledge IAM and security Best Practices and Guidelines. Implementation based on risk, criticality, and complexity.
• Knowledge and experience with Identity Management solutions, Kerberos, SSO, OAuth, SAML, OIDC, SWA within the Okta SAAS. Experience with Sailpoint or similar platform preferred.
• Ability to work with Technical and Nontechnical business owners.Very strong ability to work collaboratively across interdisciplinary teams and manage relationships across multiple areas of the business.

Education

• Bachelor’s degree in Computer Science or related field.
• Master of Science in Cybersecurity or relevant certifications on IGA/IAM. 

Special Instructions to Candidates

• Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities.
• Please view Equal Employment Opportunity Posters provided by OFCCP here.
• The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35(c)
• Reasonable accommodation may be made to assist individuals with disabilities to complete the online application process. Please contact our Human Resources Department at 305-577-7680 or by e-mail at employment@citynational.com.