Principal I, Identity & Access Management Security

Summary of Position:

The Identity & Access Management (IAM) Administrator is responsible for the support, direction and oversight into the IAM functions across the organization, including areas such as Federation, Privileged Access Management, Authentication & Authorization, Security and Provisioning Identity Data. The position reports to Identity and Access Service Delivery and will be responsible for documenting, designing and administering the IAM infrastructure. This position will provide support to security and develop appropriate audit controls and procedures to ensure the integrity of applications. This position will work closely with the project managers, Security and Compliance personnel, application developers and other administrators in creating functional, scalable and secure applications from design and development through implementation for business clients. This position is responsible for identifying, evaluating and participating in decision making around new and emerging technologies.

Key Requirements:

• Implement and maintain infrastructure for development/testing environment
• Help to drive architectural improvements and standardization for the infrastructure environments, including choice of networking infrastructure, hardware, monitoring software and associated application infrastructure (e.g. web servers, application servers, and database servers)
• Support enhance automated processes to release new solutions into the live environment
• Accountable to ensure adherence with Security and Compliance policies and procedures within Engineering service scope
• Identify, evaluate and participate in the design and engineering around new and emerging technologies
• Serve as the subject matter expert for Saviynt Identity Governance, Okta for SSO/MFA and Thycotic Privilege Access Management tools and includes installation and configuration, performance tuning, backup and recovery methods in multiple computing environments
• Help to drive architectural improvements and standardization for the infrastructure environments, including choice of networking infrastructure, hardware, monitoring software and associated application infrastructure (e.g. web servers, application servers, and database servers)
• Support the overall direction to the IAM functions across the organization, including areas such as Federation, Privileged Access Management, Authentication & Authorization, Security and Provisioning Identity Data. Responsible for documenting, designing and administering the IAM infrastructure
• Provide support to security and develop appropriate audit controls and procedures to ensure the integrity of applications
• Work closely with the project managers, Security and Compliance personnel, application developers and other administrators in creating functional, scalable and secure applications from design and development through implementation for business clients

Key Requirements/Minimum Qualifications:

• Education: Bachelor's degree or equivalent years of applicable experience
• Preferred certification - Okta Administration Certification, CIAM, CISSP, CISM
• Experience: 5 plus years of applicable experience
• Identity Governance and Administration - 5 years of direct experience at an engineering or architectural level. Prefer experience in Saviynt at an Architect or Developer level with 2 years supporting, designing and creating complex workflows
• Privilege Access Management - 3 years of engineering or architectural design level
• Federated Identity principles - 3 years of engineering or architectural design level around Federation (OAuth 2.0, SAML 2.0, Single Sign On (SSO), Multifactor Authentication (MFA), Service Provider, SP, IdP, understanding AWS and Azure Cloud integrations)

Preferred Skill:

• Identity Governance and Administration - direct experience at an engineering or architectural level. Prefer experience in Saviynt at an Administrator or engineering level supporting, designing and creating complex workflows
• Privilege Access Management - Administrator or engineering design level
• Federated Identity principles - Administrator or engineering or design level around Federation (OAuth 2.0, SAML 2.0, Single Sign On (SSO), Multifactor Authentication (MFA), Service Provider, SP, IdP, understanding AWS and Azure Cloud integrations)

Work hours: 1 PM to 10 PM IST

Relocation assistance: Yes