Digital Member Identity Administrator

Overview

This position is responsible for the management and governance of the digital member identities and the authentication channel. The role of the Digital Identity Administrator is to act as the SME for the member-facing digital authentication channel (IDp) and the risk engines within it. The Digital Identity Administrator will drive implementations of new technology to the authentication channel as well as maintain and enforce the governance and lifecycle of the identities. The Digital Identity Administrator will work with other departments to document in depth details and complete projects or initiatives that involve the authentication channel and ensure that National Institute of Standards and Technology (NIST) and applicable data privacy regulations are followed when necessary.

Responsibilities

1. AUTHENTICATION CHANNEL DESIGN AND MANAGEMENT

1. Acts as subject matter expert for the authentication channel by working closely with IT Operations and the third-party developer to understand all processes and flows taken during an authentication attempt. 2. Designs functional and user-friendly changes to the authentication flow as needed.3. Understands authentication and authorization protocols such as Federation, OAuth 2.0, OpenID connect, multi-factor authentication, and WebAuthn. 4. Works to incorporate use of hardware authenticators and TOTP applications into authentication process as well as a verification process for transactions behind initial authentication. 5. Awareness and understanding of changing data privacy rules and regulations.6. Ensures the use of cutting-edge technology during authentication and risk decisioning by completing industry research and frequent education.7. Documents all processes and flows taken during authentications at the network and web service levels. This requires a high to medium level of understanding of how data is passed between platforms and host systems. 8. Reviews pertinent logs for issues arising in the authentication channel.9. Reviews risk-engine(s) performance. 10. Assists Digital Operations and Digital Support in providing relevant information about changes to be relayed to membership or staff.11. Guides Digital Operations in creating statistical reports on authentication related activity by writing searches using SPL or Boolean logic in systems such as Splunk or Tableau. 12. Identifies ways the digital identity can be used organization wide to better deliver members quality services.13. Willing to work all hours, typically on-call for incidents that interrupt member service.

2. DIGITAL MEMBER IDENTITY GOVERNANCE AND ADMINISTRATION

1. Establish and maintain governance of user provisioning and deprovisioning for member digital identities. 2. Reviews access for digital member identities (user, sub users, etc..) to ensure that correct access is being maintained. 3. Works to ensure automated processes are in place to handle deprovisioning where possible.4. Reviews logs and user datasets to ensure that identities are being associated with accounts as expected. 5. Coordinate with Digital Identity Analytics and Intelligence Analyst to ensure that risk measures being enforced meet the needs for the level of access provided to the digital member identity.

3. ENVIRONMENT AND PRODUCT STABILITY

1. Assists in responding to downtime or degraded service of the authentication channel. 2. Tracks downtime/uptime service of authentication channel. 3. Determines root cause of outages and provides analysis as necessary. 4. Helps manage the integrity of the authentication channel by collaborating closely with IT Operations and analyzing logs from applicable servers. 5. Ensures any changes being applied to the environments are tested properly by Digital Testing and that proper channels were followed to release code to production. 6. Track the change control of releases that impact the authentication channel or risk engines within the channel. 7. Establish deployment and rollback plans for changes made. 8. Verifies that all services within the authentication channel are being upgraded or updated in a timely manner. 9. Works closely with Security Operations to ensure any vulnerabilities are managed quickly.

 

4. ORGANIZATION AND PROJECT COORDINATION

1. Organizes all day-to-day research, changes, suggestions for the authentication platform in a concise and efficient manner. 2. Coordinates with Digital Project team as a resource to deliver on projects that utilize the secure authentication channel or the digital member identity. 3. Position will be required to assist with any documentation as it relates to upcoming changes to the authentication channel at the request of the assigned project manager. 4. Position will require critical thinking, providing options and recommendations as it relates to projects utilizing the authentication