Cloud Identity Security Analyst

Cloud Identity Security Analyst

 Job Description 
 

Position Summary: 

The Cybersecurity organization is seeking a Cloud Identity Security Analyst to assist in the application integration, security hardening, and tenant management duties of the cloud identity team.

                                                                                                                                        

The successful candidate will have responsibility for maintaining and advising the direction of Southern Company’s cloud-based identity providers (IDPs).  Primarily, this role will focus on Microsoft Entra ID, its integration with cloud-based apps, coordination with on-premises identity, as well as connectivity with various other cloud-based IDPs.  Qualified candidates need to be able to interact with services vendors, align strategy and execution to increase IAM maturity, anticipate future requirements for complex environments, keep up with current security trends, be focused on results, and be a self-starter.   

 

This role will directly support the company’s efforts to mitigate real and potential cyber threats to the company’s facilities, personnel, technology, operations, and brand – including critical electric and gas utility infrastructure and its privately owned telecommunications network. 

 

Southern Company is headquartered in Atlanta, and we bring energy to homes and businesses across the country. We’ve made our name as a leading producer of clean, safe, reliable and affordable energy, and we approach each day as a vital step in building the future of energy. We’re always looking ahead, and our innovations in the industry – from new nuclear to deployment of electric transportation and renewables – to help brighten the lives and businesses of millions of customers nationwide.  Our team is critical to building the future of energy with secure, resilient, and sustainable cyber solutions. 

 

Defend.  Protect. Enable.

 

Job Responsibilities:  

• Maintenance, integration, lifecycle, and future planning for Entra ID identity products. 
• Creation and lifecycle of cloud-native identities such as Service Principals and App Registrations.
• Integration of applications using cloud-native identity protocols such as SAML or OpenID.
• Implementation of new security feature sets to address modern risks such as FIDO/Passkeys.
• Consulting and hands-on with other cloud IDPs such as Google Cloud Identity, AWS IAM, Oracle IDCS.
• Triage and escalation of cloud identity issues – both with the technology and with individual business partners. 
• Build automations where possible to facilitate repeat work or reporting within the cloud environments.
• Mentoring others in the area of IAM, cloud identity, and modern authentication principles and best practices.
• Serve as a trusted advisor to our stakeholders, by designing security solutions, for improved security and business enablement. 
• Maintain various controls to meet regulatory requirements, including but not limited to Sarbanes-Oxley (SOX), FERC and NERC.
• Monitor, forecast, and prepare for new regulatory requirements or cloud technology changes.
• Aid in the development of standards and polices for the IAM program. 
• Enhance processes to facilitate improved operational efficiencies, risk mitigation, and customer interactions.
• Lead and deliver cloud identity projects in scope, on time, and within budget.   
• Provide expertise to assist in the development of Southern Company’s security architecture – identify areas of opportunity, research alternatives, and recommend solutions.

 

Requirements and qualifications:     

Required:

• Experience with managing a cloud-native Identity Provider, specifically Microsoft Entra ID.
• Experience with cloud application integrations using SAML or OpenID.
• Experience with OAuth IDs (Service Principals), their configuration, lifecycle, and long-term risk management.
• An understanding of cloud role-based access controls and their unique differences from on-prem.
• Ability to leverage user dynamic risk, progressive authentication, self-service.
• Knowledge of modern authentication methods e.g. FIDO, Biometrics, Passwordless.
• Knowledge of cloud entitlement management and best practices.
• Must pass NERC CIP & Insider Threat Protection background checks.

 

Desired:

• Technical knowledge with the following concepts: On-premises SSO, Active Directory, Privileged Account Management.
• A solid understanding of IAM related protocols and standards such as:
  SAML, OAuth/OIDC, SCIM, FIDO,