Identity & Access Management Security Engineer Senior

Overview

The Identity Security Engineer is a pivotal member of the Identity and Access Management team, responsible for ensuring efficient and secure user access across the organization. This role focuses on improving the user onboarding experience, streamlining employee transfers, and guaranteeing compliance with termination policies to maintain the highest level of security and operational efficiency. This role will be the main owner of the Bank’s Identity Governance and Administration platform (IGA), and act as a subject matter expert on identity and access management (IAM) technologies and processes, implementing solutions and providing support to the organization.

 

A key aspect of this role is creating and maintaining robust IAM workflows and automations and establishing clear service level agreements (SLAs) for onboarding new users, and other key IdAM processes. This role will facilitate developing key performance indicators (KPIs) to measure the effectiveness of IAM processes and drive continuous improvement. This includes collaborating closely with various teams, such as Cyber Security, Human Resources, RPA, and Lines of Business (LoBs), to implement and optimize user-friendly IAM solutions.

 

Principal Duties & Responsibilities:

• Onboarding and User Lifecycle Management: 
  • Develop and implement streamlined processes for new user setup, ensuring a positive and efficient onboarding experience that meets defined SLAs.
  • Oversee user access modifications and transfers, ensuring appropriate permissions are maintained throughout employee lifecycle changes.
  • Implement and strictly enforce procedures for user access termination, minimizing security risks associated with departing employees.
• IAM System Management:
  • Manage the lifecycle of IAM solutions, including releases and integrations with other systems.
  • Work with the design, implementation, maintenance, and troubleshooting of the organization's automated access control and identity management systems.
  • Utilize programming skills to customize and enhance IGA platforms, ensuring they meet the organization’s business and compliance requirements.
  • Develop and maintain scripts and automation for IAM processes.
  • Troubleshoot and resolve technical issues related to IAM platforms and services.
• Collaboration and Improvement:
  • Work closely with Cyber Security, Human Resources, RPA, and LOB teams to create efficient and frictionless IAM and SSO solutions.
  • Identify and address process deficiencies, implementing improvements to enhance the overall efficiency and effectiveness of IAM operations.
  • Supports development and implementation of IAM KPIs and KRIs, including the development of scorecards/dashboards.
• Security and Compliance:
  • Ensure IAM solutions comply with relevant security standards, policies, and regulations.
  • Assist with internal and external audit and regulatory bodies during security assessments and audits of IAM systems.
  • As a backup for other IAM professionals, conducts re-certifications of special user access reviews to ensure ongoing compliance with security policies and regulations.
• Continuous Learning: Stay abreast of technological and threat environment changes that impact the IAM function, assist with creating and executing a comprehensive IAM vision to meet those challenges.

Qualifications

• 5-7 years of prior experience in the following IAM Technologies: IAM, IGA, SSO, MFA, Active Directory, Digital Certificates, and Certificate Authority.
• Experience leading IAM delivery processes to ensure automation, security, and governance best practices. Have led, deployed, or been heavily involved in enterprise rollout of IAM platform solution previously.
• Have expert knowledge of IAM concepts such as Least Privilege, Privilege Access, Roles and Data mining, Segregation of Duty (SoD) and Role Based Access Control.
• Must be comfortable working within IAM/IGA platforms, including building customer workflows, connectors, and other customization that would be required to manage across a multitude of systems.
• Proficiency in programming languages such as Java, Python, or PowerShell, particularly in the context of IGA platforms.
• Strong knowledge of IAM and security Best Practices and Guidelines. Implementation based on risk, criticality, and complexity.
• Knowledge and experience with Identity Management solutions, Kerberos, SSO, OAuth, SAML, OIDC, SWA within the Okta SAAS. Experience with SailPoint, Okta, Microsoft Azure AD, or a similar platform preferred.
• Ability to work with technical and non-technical business owners.
• Very strong ability to work collaboratively across interdisciplinary teams and manage relat