Senior IDAM Engineer - Ramans replacement

• Design and recommend Identity and Access Management systems to ensure the appropriate security guidelines, policies and procedures are in place to adequately business and compliance requirements.
• Work closely with other service owners responsible for establishing governance, policies, and requirements related to IAM functions.
• Partners with Technology and Business Unit control owners to serve as a security expert and trusted adviser in designing and providing systems that facilitate user provisioning/de-provisioning, authentication/authorization, and reporting based on business needs, industry best practices, and regulatory requirements
• Specify, and design Identity Access Management (IDAM) solutions including password management, SSO, federation, and authentication.
• Execute against the IAMs program roadmap
• Serve as a subject matter expert and solution architect for IDAM solutions
• Design, implementation, and deployment of functional, resilient, and secure IDAM solutions

Qualifications:

• Minimum 6 years of experience in identity and access management (IAM) programs
• Demonstrable knowledge of current technologies in authentication, federation, and identity management space, such as OAuth 2.0, OpenID Connect, SAML, SCIM, U2F/UAF/FIDO2, HOTP, TOTP
• Direct experience in administering Microsoft Active Directory objects, architecture, and back-end infrastructure in both On-prem and AAD
• Experience with Open LDAP, NIS is a significant plus
• Proven Experience securing user authentication via Okta
• Extensive and demonstrable experience with both AWS & Azure
• Familiarity with Microsoft Red Forest / Bastion.
• Experience with managing and designing for Linux and windows environment a big plus
• Hands-on experience with public and private Cloud platforms, container-based architectures, Infrastructure as Code Terraform and AWS CloudFormation AWS native security tools
• Extensive & demonstrable experience designing & implementing both IAM and PAM solutions - SailPoint, BeyondTrust, Cyberark, etc
• Experience in information security threat modeling, design and architecture reviews, and risk analysis.
• Experience validating security posture of accounts in AWS & GCP using cloud native or 3 rd party tools like Prisma Cloud
• Practical experience with Windows Certificate Authority PKI solutions, including Secure Socket Layer (SSL) is a big plus
• Experience with enterprise production code in applicable scripting languages (PowerShell, JavaScript, Python, etc.).
• Technical knowledge in security engineering, authentication and federation protocols, cryptography, and application security
• Knowledge of system security vulnerabilities and remediation techniques
• Familiarity with diagnostic tools and analyzing data (Analyzing Error Logs).
• Familiarity with using biometrics for authentication and managing related privacy considerations
• Familiarity with relevant identity-oriented standards, such as NIST800-63 and GDPR
• Excellent written and verbal communication skills.
• Excellent teamwork and collaboration skills
• Experience communicating with technical and non-technical stakeholders across multiple business units
• Advanced Information Security certification desired(CISSP and/or SANS)
• Bachelor s Degree in Computer Science, Information Systems, Engineering, or equivalent experience