Senior Identity Security Engineer

Discover Vanderbilt University Medical Center:  Located in Nashville, Tennessee, and operating at a global crossroads of teaching, discovery, and patient care, VUMC is a community of individuals who come to work each day with the simple aim of changing the world. It is a place where your expertise will be valued, your knowledge expanded, and your abilities challenged. Vanderbilt Health is committed to an environment where everyone has the chance to thrive and where your uniqueness is sought and celebrated. It is a place where employees know they are part of something that is bigger than themselves, take exceptional pride in their work and never settle for what was good enough yesterday. Vanderbilt’s mission is to advance health and wellness through preeminent programs in patient care, education, and research.

Organization:

VEC Central Dir /Legacy Access

Job Summary:

Maintain identity solutions based on-premise directory services like MS Active Directory, cloud services like MS EntraID; Federated Authentication services like Ping or EntraID, authentication services ex. Kerberos, Radius, privileged authentication systems ex. CyberArk , MFA services ex. SafeNet, MS MFA, and certificate management services ex. PKI servers. Work closely with other IT team members to ensure that the IAM system is integrated seamlessly into the overall IT infrastructure. Conduct duties under occasional guidance.

.

KEY RESPONSIBILITIES

• Responsible for the ongoing development of cloud-based identity security solutions, including design, configuration, application onboarding, and the writing and implementation of transforms, workflows, and rules.

• Document current and proposed environments

• Perform risk management to minimize system risks and unintended outages

• Measure performance using appropriate systems, tools, and techniques

• Perform risk management to minimize system risks and unintended outages

• Maintain processes, procedures, and documentation around all core processes that interact with AD

TECHNICAL CAPABILITIES

AUTHENTICATION/AUTHORIZATION (ADVANCED): Demonstrates the uppermost levels of expertise in Authentication and Authorization Services in challenging and complex situations.  Often takes a lead role in highly pressurized situations when there is a need to achieve results.  Leads in the design of the Company's authorization service.  Contributes to the development of Authentication and Authorization Services best practices for the organization.

FAULT DIAGNOSIS/ISOLATION/DETECTION (ADVANCED): Demonstrates the uppermost levels of expertise in Fault Diagnosis/Isolation/Detection in challenging and complex situations.  Able to diagnose problems that result from interactions of faults with other faults or complex systems.  Knowledgeable of commonly used fault detection mechanisms such as Sanity Monitoring, Watchdog Monitoring, Protocol Faults, In-service Diagnostics, and Transient Leaky Bucket Counters.  Often takes a lead role in highly pressurized situations when there is a need to achieve results.  Consistently delivers results in a creative and imaginative manner while setting a standard for others.  Contributes in the development of Fault Diagnosis/Isolation/Detection best practices for the organization.

SECURITY ARCHITECTURE (INTERMEDIATE): Experience in designing Security Architecture.  Understands most user interfaces, communication, and other characteristics of the security architecture.  Has participated in security risk management activities.  Has extensive knowledge of the components of security systems and is able to install of security products and systems.

SECURITY TOOLS/ PRODUCTS (INTERMEDIATE): Demonstrates mastery of the Company's Security Tools and Products in practical applications of a difficult nature.  Possesses sufficient knowledge, training, and experience to be capable of successfully delivering results without requiring support and instruction from others.  Able to train and educate by setting the example, giving instruction, providing leadership, and generally raising the level of performance of others while on the job.

SERVER SECURITY (INTERMEDIATE): Has extensive knowledge of the components of security and is able to install security products and systems. Able to describe security practices to users and management. Demonstrates mastery of security in practical applications of a difficult nature. Possesses sufficient knowledge, training, and experience to be capable of successfully delivering security products and services without requiring support and instruction from others.

Our professional administrative functions includ