IAM | Security Engineer

Job Type

Full Time

General Description

Support and improve our Identity and Access Management and Privileged Access Management enterprise processes and applications. The ideal candidate will have a broad background in identity management, governance, and access control with expertise in platforms such as Active Directory, Okta and more. Deep understanding of technologies involved such as SAML, OIDC, SCIM and RBAC. Experience with Saviynt and CyberArk. The incumbent will need to be highly knowledgeable of the concepts of access management, governance and compliance, and identity management systems administration. Additionally, the candidate will have the technical ability to provide program management and oversight of vendor implementations, as well as converse with software engineers about their plans and security concerns.

Essential Duties and Responsibilities

• Configure changes to IAM and PAM tools, preferably Saviynt and CyberArk.
• Monitor and troubleshoot the performance, availability, and security of the IAM and PAM systems.
• Develop and update the IAM and PAM documentation, procedures, and training materials as needed.
• Serve as the subject matter expert (SME) for the IAM and PAM solutions within the organization.
• Provide expert advice and guidance to application teams regarding the connection options to Saviynt.
• Develop case scenarios for successful implementation of application connectivity to Saviynt.
• Maintains oversight of IAM vendors regarding the security maintenance of their systems and applications.
• Managing implementation of releases from vendor (knowledge of SDLC process).
• Develop, implement, and maintain comprehensive procedures and controls that align with industry best practices and regulatory requirements. 
• Aligns access management deliverables with legal, regulatory, and contractual requirements that conform with security framework and standards such as NIST SP 800-53 rev 4 and NIST-CSF, among others. 
• Explain security controls, requirements, and guidance to security management.
• Assist in all Cybersecurity audits, risk assessments and regulatory compliance.
• Address questions from internal and external audits and examinations.
• Participate in pre-defined capacitation training defined by the unit. 
• Report on findings and recommendations for corrective action.

Education

Experience

Three+ (3) years of experience in Privileged or Identity and Access Management areas in a complex technology environment.

Certifications / Licenses

Certifications and Licenses are preferred but no required.

• J2EE Certification
• CISSP
• CISM
• CCSP
• CISA

Knowledge, Skills and Abilities

• Strong business acumen: Ability to conduct analysis on work procedures, business results and recommends changes to improve the effectiveness of the business's management.
• Strong technical acumen: knowledge of Information Security and Information Technology concepts. Ability to write technical instructions using programs and technology.
• Communication skills: effectively interact with internal and external stakeholders. Advanced written and verbal communications skills, strong ability to communicate ideas (storytelling). Superior communication and interpersonal skills. Excellent report-writing and presentation skills. Polished in preparing presentations, summaries, and reports for all audiences.
• Analytical skills: Stays focused on key issues, prevents irrelevant issues or distractions from interfering with timely completion of assignments. Demonstrates attention to detail, workload management, and process management.
• Problem Solving: Identifies and resolves problems in a timely manner; develops alternative solutions.
• Project Management: Ability to prioritize and work with multiple projects and tasks with minimum supervision; self-direct and task switch between strategic and tactical initiatives regularly. Capacity to achieve results according to plan ensuring the expected quality. Excellent organization capacity to define priorities, meet deadlines, and flexible to change.
• Operational/Regulations Processes: Knowledge on budget administration, resources allocation, organization’s policies, and regulations. Ability to establish, conduct and track operational processes properly.
• Computer and Technological Skills: Proficient in MS Office 365. Highly proficient with Saviynt, CyberArk or similar tool. Experience with data management tools such as Power Pivot, Power BI, among others is desired. Ability to achieve results by providing innovative ways of working with operational and technological considerations. Knowledge of computer flow charts and programming logic and codes.

Region Locations

Puerto Rico, Florida or North Carolina.

Work Schedule

Hybrid or Remote.

Values

Additional Requirements

The information provided here is only a general guide as to the nature of the position and does not constitute an exact description of the goals, tasks, duties, and responsibilities of the position. The specific details of each position are described in the employee’s performance evaluation.