IAM Security Engineer

Overview

Whether you’re looking for a high-energy, inclusive atmosphere and a company that understands the importance of work/life balance, Commonwealth is your match! From generous bonus and 401(k) programs to tuition reimbursement and flexible work schedules, Commonwealth is focused on helping its employees thrive in an environment suited to their needs. On top of all that, the Information Security department offers a hybrid work schedule, so you’ll be able to work from home for part of the week!

 

We’re looking for a IAM Security Engineer to join our ranks. Are you an experienced identity and access management engineer with strong security knowledge and technical expertise? As an IAM security engineer, you will be a key member of the Information Security Engineering team. You will use your strong understanding of identities, access controls, and identity governance to design and develop solutions and processes to enable and deliver a resilient and secure environment. You will work collaboratively with Information Security, HelpDesk, and other departments to ensure that solutions and services are designed and adopted effectively. A primary responsibility of this role will be verifying the proper design and implementation of identity access and governance solutions on-premise and in cloud environments.

 

Key Responsibilities  

• Evaluating, designing, and implementing IAM solutions to protect users’ identities
• Building a strong IAM and IGA foundation that integrates with in-house and third-party applications
• Designing IAM processes and procedures and translating the high-level requirements into technical designs
• Implementing solutions to automate user onboarding and offboarding
• Building and developing systems and processes to ensure least privilege
• Implementing solutions for privileged access management
• Developing documentation to support ongoing IAM, privileged access management, and IGA systems operations and maintenance
• Integrating the IAM/IGA/PIM systems with security monitoring solutions
• Performing systems health checks and configuration reviews
• Developing custom connectors and scripts to integrate the IAM solutions with in-house custom applications

Core Strengths and Skills 

• Strong knowledge and understanding of identity access management and identity governance
• Prior experience with SailPoint IdentityNow, including application design, configuration, integration, and deployment
• Experience in performing privileged access reviews, compliance reporting, and access control processes
• Hands-on experience with application onboarding, automation, roles assignments, and monitoring
• Understanding the best practices, control frameworks, and applicable existing and new legal/regulatory requirements (SEC S-P Rule; FINRA cybersecurity recommendations, data privacy guidelines, and breach notification laws; ISO 27001, NIST CSF, and SP 800-53; CIS, CSA CCM, PCI DSS, and others) 
• Strong understanding of role-based access controls and access certification
• Experience with different operating systems and built-in IAM capabilities (Windows, Linux, macOS)
• Ability to work on multiple projects simultaneously

 Additional Skills and Knowledge 

• Bachelor’s degree in information systems or a related discipline (or equivalent training)
• 5+ years of experience in a similar position
• Technical expertise in SailPoint, Azure AD, and active directory
• Understanding of business process design, complex IT security integration, and identity management
• Security-related certifications, such as CIAM, SailPoint, OSCP, GCIH, and CEH
• Experience with ServiceNow and cloud systems
• Experience with privileged access management solutions, such as CyberArk, Thycotic, and PAM360
• Strong understanding of Cloud Identities and Azure IAM/PIM solutions
• Knowledge of IAM industry standards, including SAML, OAUTH, Kerberos, and Radius

Have we piqued your curiosity? Can you see yourself thriving in this opportunity? Let’s introduce ourselves. 

 

Picture Yourself Here  

At Commonwealth, we believe in a better world. We hold ourselves and each other to higher standards. We take care of one another. That’s why we invest in you—we encourage employee growth both in your career and education; we are building out a robust diversity, equity, and inclusion program; we offer incredible health care benefits; and we find plenty of occasions to celebrate. What’s not to love? 

 

We are always striving to be better, and we are looking for employees who share that same mindset. Better people, better coworkers, better leaders, better creators.