Lead, IT Security Analyst- Identity Access

Company Description

Chromalloy engineers solutions that extend the life of the engines running the aerospace, energy and military industries around the world.  We are the only independent company in the world with the ability to develop, cast, coat and machine critical gas turbine engine parts completely in-house.

Our employees are proud, passionate problem-solvers who strive to live our values every day. A career with Chromalloy is an opportunity to learn from top industry experts, work with important technologies, and discover a lifelong passion for innovation.

Job Description

• The IT Identity and Access Management Lead will create, maintain, and adhere to policies and procedures to ensure accurate provisioning and de-provisioning of all user accounts and permissions for Chromalloy employees, Contingent Workers, Interns, and External Auditors
• Lead Periodic Access Reviews (PAR) as identified by need and work with Chromalloy and external auditors to provide verifiable evidence of compliance
• Work with Business Units across the organization to establish accurate Role Base Access Control (RBAC) for users within the department
• Ensure system accounts are compliant for roles and authorizations; Central POC for systems access requests through enterprise IAM Solution
• Assist with the maintenance of enterprise PAM (Privileged Account Manager)
• Helps identifies existing and emerging risks that stem from business activities and job roles
• Work with Site IT Analysts, Business Units, and other Information Technology groups to identify access for Least Privilege, Privileged Access, Roles, Segregation of Duty (SOD), and Role Based Access Control (RBAC)
• Assist with setup and integrate Single Sign on (SSO) for current and future applications;
• Assist with process documentation and system access matrices
• Assist with implementation and administration of Mobile Device Management
• All other duties as assigned (note: essential functions and responsibilities may change or new ones may be assigned at any time with or without notice)

Qualifications

Qualifications Background and experience:   

• 3-5 years of experience in Information Security, Cybersecurity, Identity and Access Management and/or Information Technology with Information Security focus to include accountability for moderate to complex tasks and/or projects
• Proficient understanding of leading IAM concepts such as Least Privilege, Privileged Access, Roles and Data Mining, Segregation of Duty (SOD), and Role Based Access Control (RBAC)
• Ability to troubleshoot access related issues across more than one platform and multiple applications
• Experience using Active Directory, Duo, and CyberArk required; experience with Imprivata preferred.
• Microsoft Active Directory to include creating queries
• Assist with multiple Periodic Access Reviews (PARs) for auditing purposes
• Document process and procedures
• Ability to multi-task, quickly shift priorities and manage business needs in a rapidly changing, complex technical environment
• Ability to troubleshoot moderate to complex tasks and incidents

Advanced knowledge of the following:   

• Active Directory
• Duo MFA 
• CyberArk PAM   
• Single Sign On/ Security Assertion Mark-up Language (SSO/SAML)   
• Role Based Access Controls (RBAC)

Required experience and education:   

• Bachelor’s degree in Computer Science or equivalent combination of education and experience required.   
• 3+ years of experience in a security or technical support required.   
• GCIA, GCIH required. GCFE, CISSP, Security +, Network +, CEH, RHCA, RHCE, MSA, MCP, or MCSE preferred.   
• Experience with AD, Duo, and CyberArk required. Experience with Imprivata, Keeper or similar Enterprise Password Management and Solarwinds ARM or similar Access Rights Management preferred.

Additional Information

All your information will be kept confidential according to EEO guidelines.