Security Engineer
Contractor will be working on the IAM team. The IAM team focuses on identity management, controls systems that have IDs, passwords, and any systems contractors/employees/vendors can access. Anything internal and that needs to be controlled, containing sensitive data. This team also enables Single Sign On for the enterprise as well.
Contractor will be a member of a team implementing Identity and access management (IAM) and roles based access control (RBAC) strategies. This team uses Novelle eDirectory environments, similar to other "Directory Services Systems" such as: Active Directory (Windows), OVD (Oracle Virtual Directory), and other products from EMC, IBM, Sailpoint. Will look at someone that has other directoy services systems (not Novelle), but is willing to learn!
Collaborate with the Information Risk group and Audit Group to identify & prioritize risk components, technology audits and compliance issues respectively for the IS organization. Advocate, design, and implement processes and technology relating to risk and access control across the technology organization. Ensure control policies are executed upon in accordance with corporate-wide policies and external regulatory obligations.
Top 2 Criteria when reviewing candidates:
-LDAP (Local Directory Access Protocol) and SAML(Security Access Mark-up Language) --2-3 years experience BOTH are required
-Need to have worked with Automation (automation of role based provisioning of user access (2-3 year experience).
Day to Day Responsibilities:
•Onboard new applications to systems (Manage your own projects)
-Product Support and On Call (Four person rotation, on-call for unlikely event that a system is unavailable and needs to be resolved. Likely event-change going on and need to support change) 24/7 during their week).
•Simplifying user access provisioning processes through automation and continuous improvement.
•Maintaining application supportability and compliance.
•Participate in on-call responsibilities within a team rotation.
•Contribute to streamlining user provisioning, authentication, and access governance.
•Manage individual and team workload to deliver to agreed upon project milestones
•Proactively promote consistent project-based performance measurement and skill development of junior staff
•Promote effective teamwork and resolve interpersonal issues
•Provide input to staffing plans at the project-level to identify key / required skills
•Requires minimal supervision to perform job duties
•Train other Security Engineers on processes, procedures, and technologies
•Actively mentors other Security Engineers
Candidate Specifications:
•Ideal candidates will be ones that come from positions/organizations that leverage RBAC processes and leverage an IAM system to automate user access. Not targeting candidates who have only performed manual provisioning of user access.
•College degree in related technical areas and/or 7 to 12 years equivalent work experience
•Well rounded understanding of technology, operations and key business processes
•3-5 Years’ experience with user account provisioning, role provisioning and role management
•3-5 Years’ experience implementing and improving user account provisioning, role provisioning and user access certification processes
•3+ Years’ experience with IAMRBAC related projects with identity and access management products
•3+ Years’ experience with SOX, & PCI user access controls and SOX & PCI user access control testing
•Strong knowledge and experience with Microsoft Excel and Word
•Strong organization skills
•Strong change management skills
•Highly flexible and able to adapt to change
•Strong problem solving and analytical capabilities
•Excellent written and verbal communication skills
•Strong influencing and negotiation skills
Relevant Technical Skills
•Novell Access Manager
•Novell eDirectory
•Novell Access Governance Suite
•Active Directory
•SAML Integration
•Sailpoint Governance Suite
Contractor will be working on the IAM team. The IAM team focuses on identity management, controls systems that have IDs, passwords, and any systems contractors/employees/vendors can access. Anything internal and that needs to be controlled, containing sensitive data. This team also enables Single Sign On for the enterprise as well.
Contractor will be a member of a team implementing Identity and access management (IAM) and roles based access control (RBAC) strategies. This team uses Novelle eDirectory environments, similar to other "Directory Services Systems" such as: Active Directory (Windows), OVD (Oracle Virtual Directory), and other products from EMC, IBM, Sailpoint. Will look at someone that has other directoy services systems (not Novelle), but is willing to learn!
Collaborate with the Information Risk group and Audit Group to identify & prioritize risk components, technology audits and compliance issues respectively for the IS organization. Advocate, design, and implement processes and technology relating to risk and access control across the technology organization. Ensure control policies are executed upon in accordance with corporate-wide policies and external regulatory obligations.
Top 2 Criteria when reviewing candidates:
-LDAP (Local Directory Access Protocol) and SAML(Security Access Mark-up Language) --2-3 years experience BOTH are required
-Need to have worked with Automation (automation of role based provisioning of user access (2-3 year experience).
Day to Day Responsibilities:
•Onboard new applications to systems (Manage your own projects)
-Product Support and On Call (Four person rotation, on-call for unlikely event that a system is unavailable and needs to be resolved. Likely event-change going on and need to support change) 24/7 during their week).
•Simplifying user access provisioning processes through automation and continuous improvement.
•Maintaining application supportability and compliance.
•Participate in on-call responsibilities within a team rotation.
•Contribute to streamlining user provisioning, authentication, and access governance.
•Manage individual and team workload to deliver to agreed upon project milestones
•Proactively promote consistent project-based performance measurement and skill development of junior staff
•Promote effective teamwork and resolve interpersonal issues
•Provide input to staffing plans at the project-level to identify key / required skills
•Requires minimal supervision to perform job duties
•Train other Security Engineers on processes, procedures, and technologies
•Actively mentors other Security Engineers
Candidate Specifications:
•Ideal candidates will be ones that come from positions/organizations that leverage RBAC processes and leverage an IAM system to automate user access. Not targeting candidates who have only performed manual provisioning of user access.
•College degree in related technical areas and/or 7 to 12 years equivalent work experience
•Well rounded understanding of technology, operations and key business processes
•3-5 Years’ experience with user account provisioning, role provisioning and role management
•3-5 Years’ experience implementing and improving user account provisioning, role provisioning and user access certification processes
•3+ Years’ experience with IAMRBAC related projects with identity and access management products
•3+ Years’ experience with SOX, & PCI user access controls and SOX & PCI user access control testing
•Strong knowledge and experience with Microsoft Excel and Word
•Strong organization skills
•Strong change management skills
•Highly flexible and able to adapt to change
•Strong problem solving and analytical capabilities
•Excellent written and verbal communication skills
•Strong influencing and negotiation skills
Relevant Technical Skills
•Novell Access Manager
•Novell eDirectory
•Novell Access Governance Suite
•Active Directory
•SAML Integration
•Sailpoint Governance Suite