Identity Security Engineer

Discover Vanderbilt University Medical Center:  Located in Nashville, Tennessee, and operating at a global crossroads of teaching, discovery, and patient care, VUMC is a community of diverse individuals who come to work each day with the simple aim of changing the world. It is a place where your expertise will be valued, your knowledge expanded, and your abilities challenged. Vanderbilt Health recognizes that diversity is essential for excellence and innovation. We are committed to an inclusive environment where everyone has the chance to thrive and where your diversity of culture, thinking, learning, and leading is sought and celebrated. It is a place where employees know they are part of something that is bigger than themselves, take exceptional pride in their work and never settle for what was good enough yesterday. Vanderbilt’s mission is to advance health and wellness through preeminent programs in patient care, education, and research.

Organization:

VEC Central Dir /Legacy Access

Job Summary:

Maintain identity solutions based on-premise directory services like MS Active Directory, cloud services like MS EntraID; Federated Authentication services like Ping or EntraID, authentication services ex. Kerberos, Radius, privileged authentication systems ex. CyberArk , MFA services ex. SafeNet, MS MFA, and certificate management services ex. PKI servers. Work closely with other IT team members to ensure that the IAM system is integrated seamlessly into the overall IT infrastructure. Conduct duties under occasional guidance.

.

KEY RESPONSIBILITIES

• Responsible for the ongoing development of cloud-based identity security solutions, including design, configuration, application onboarding, and the writing and implementation of transforms, workflows, and rules.

• Document current and proposed environments

• Perform risk management to minimize system risks and unintended outages

• Measure performance using appropriate systems, tools, and techniques

• Perform risk management to minimize system risks and unintended outages

• Maintain processes, procedures, and documentation around all core processes that interact with AD

TECHNICAL CAPABILITIES

AUTHENTICATION/AUTHORIZATION (Intermediate): Demonstrates mastery of Authentication and Authorization Services in practical applications of a difficult nature.  Knowledgeable of several authentication methods such as Anonymous, Basic, Digest, Integrated Windows and Certificate.  Participates in the design of the Company's authorization service.  Builds authentication databases and the indexes needed to rapidly locate a particular record, as well as the appropriate query language for swiftly locating records that match particular criteria.  Knowledgeable of various kinds of services such as Java Authentication and Authorization Service [JAAS] and Tivoli Access Manager.

FAULT DIAGNOSIS/ ISOLATION/DETECTION (NOVICE): Possesses sufficient fundamental proficiency to successfully demonstrate knowledge of Fault Diagnosis/Isolation/Detection in practical applications of moderate difficulty.  Demonstrates a structured analytic approach to create logical step-by-step procedures that will accurately identify the cause of basic problems.  Able to assess the level or concern and the priority a problem has, and to determine if it requires an immediate solution.  Discover all information related to basic faults, gathering information from a number of sources, such as user interviews, log analysis and other network activity information.

SECURITY ARCHITECTURE (NOVICE): Familiar with foundation concepts of the Security Architecture, as well as the tools and utilities related to the architecture and knows when/where to use specific tools.  Has a solid understanding of security that supports a major application, computer system or other component of the organization's corporate architecture.  Has detailed knowledge of the functionality of security systems and understands how they work and interface with data, applications and systems.

SECURITY TOOLS/PRODUCTS (NOVICE): Possesses sufficient fundamental proficiency to successfully demonstrate Security Tools and Products in practical applications of moderate difficulty.

SERVER SECURITY (NOVICE): Has detailed knowledge of the functionality of security systems and understands how they work and interface with data, applications and systems. Able to explain and document the functionality of security requirements and how they relate to the business and an information security program.

Our professional administrative functions include critical supporting roles in information technology and informatics, finance, administration, legal and commun