Position Summary:

The Identity and Access Management Engineer will report directly to the Chief Information Security Officer and be responsible implementing and maintaining the Identity and Access Management system at RSG. This is an active, hands-on position, responsible for the development, support, and administration of the identity and access management function and all its components. This will include coordinating with business users and the technical specialists in user departments and partnering with infrastructure and application development teams to create solutions that meet our enterprise security and business requirements.  

Essential Functions:

• Build out and support the enterprise-wide Identity, Access, Directory and Authentication Services for employees, contractors and vendors with the capability to support cloud and on premise application services. 
• Participate in development and maintenance of IAM workflows that manage provisioning of resource entitlements to end users. 
• Work with teams to integrate and onboard new applications and services. 
• Proactively develop and recommend IAM strategies and take ownership of these strategies through all phases. 
• Create and maintain architecture and documentation for IAM systems. 
• Work with the GRC leads to document workflows and processes as needed for audits 
• Collaborate with the GRC leads to conduct user access recertification as defined by company policies.  
• Create scripts or implement tools that drive automation and enable product teams and end users to move towards self service 
• Assist in troubleshooting and problem resolution. 
• Work with the CISO and GRC leads on the development of security metrics, assisting with compliance audits, and continuous security improvements. 

Education/Experience/Skills:

• Bachelor's degree in Computer Science/Engineering/Information Security.   
• Minimum 3 years’ experience with supporting access management solutions, including user privileges management, user credential management, and user security behavior monitoring. 
• Minimum 3 years’ experience with commercial cloud-based IAM tools, such as Okta, SailPoint, and Saviynt.  
• Experience with Privileged Access Solutions (Thycotic, CyberArk, Azure PAM/PIM).  
• Experience with implementing identity and access management tools. 
• Experience with requirements, design, integration, testing, and change management, including leading technical requirements and integration sessions.  
• Knowledge of the following areas: Azure and Active Directory or LDAP design and configuration, PKI X509, SSO, Duo and Microsoft MFA, Web Services and RESTful APIs, JSON, XML. 
• Coding/scripting experience in one or more general purpose languages. 

Disclaimer