IAM Solution Security Architect

Job description

Job Summary


 

The Identity & Access Management (IAM) Security Architect reports to the Global Lead for IAM Architecture in a hands-on role focused on the security architecture in the IAM space supporting different IAM domains predominantly Identity Governance and Administration (IGA).  The architect works directly with Lead Development, Engineering and Operational resources through collaboration and mentoring to shape the cloud IAM capabilities for the Firm.

The IAM Solution Security Architect’s role is a technical position which will support the development of security strategies and architecture vision as it relates to the Firm’s Identity initiatives, specifically setting the direction for lifecycle management, group management, entitlement management and access review. The IAM Security Architect will work with other IGA Architects and Service Owners to provide a consensus-based enterprise solution that is scalable, adaptable and synchronized with the ever-changing business needs.

 

·  Subject-matter expertise across identity lifecycle management technologies, specifically around provisioning, deprovisioning and other lifecycle management activities
·  Research, evaluate and document architectural solutions within different realms of Identity Governance and Administration.
·  Drive the adoption of creative solutions to address complex, global IAM problems.
·  Participate in Identity and Access Management enterprise governance processes and drive IAM standards adoption.
·  Develop effective architecture solutions that not only satisfy immediate project requirements but also deliver a coherent, reusable, reliable and phased architecture to help the business grow and change while aligning to strategic vision.
·  Create, maintain and align the Firm’s Information Security policies and standards with industry best practices and business needs in the adoption of cloud services and technologies.
·  Represent Information Security on organizational project teams and ensure adherence to existing security policies and standards.
·  Manage the successful technical delivery of Information Security projects and services for our customers by working directly with key business stakeholders, executives and project teams. Security architects are often the technical lead on initiatives and as such must drive the vision and alignment of the solution delivery.  This is not a project manager role.
·  Review and management of technical security roadmaps related to different IGA solutions.
·  Deliver technical security configuration architecture expertise in implementing cross-organizational information sharing.
·  Develop solutions and recommendations for issues caused by process challenges, emerging threats and technology changes.

 

Analytical/Decision Making Responsibilities:

·  The individual in this role must be able to understand and interpret identity and access management strategies and direction. 
·  Further, the person must be able to bring together key tenets of Information Security to the IAM authentication strategies and develop technical security solutions that properly align. 
·  The Architect will contribute to the overall effort of the IAM direction of the Firm.

The individual in this role must be well educated in general aspects of Information Security, namely:

·  Expert experience architecting IAM solutions supporting different areas of Identity Governance and Administration such as Identity Lifecycle Management, Group and Role lifecycle management, Access reviews and certification.
·  Strong experience with provisioning solutions that operate in a “hybrid” model with provisioning targets on-prem and cloud based.
·  Familiar with Microsoft Azure, particularly Azure AD and architecture designs connecting Azure to enterprise infrastructure.
·  Understanding of cloud computing architecture, technical design and implementations, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS) and Software as a Service (SaaS) delivery models.
·  Excellent customer service and communication (oral / written) skills required.
·  Strong critical thinking and analytical skills and ability to think “out of the box” required.
·  Must be able to work independently or with a team, under minimum supervision.
·  Consults to key customers and senior management on project design and development scope.
·  Some knowledge of scripting languages (vb script, power shell, perl, java script, etc.).
·  Assists customer organizations with planning and implementing complex architecture solutions.

 


Desired skills include:

·  Expert level experience in implementing solutions in Sail point Identity IQ.
·  Strong experience in solution development with applications integrated with Azure AD.
·  Experience implementing self-service account management services within the Sail point framework
·  Experience provisioning to both traditional on-premise systems as well as cloud native solutions
·  2-3 years of software development experience is desirable, preferrably in Java as the foundation of Sail point IIQ.
·  Must have working knowledge and understanding of networking technologies such as LAN, WAN, TCP/IP, load balancers, firewalls etc.

 

Other Requirements:

·  Frequent travel is not required for this position.  However, it is anticipated that some travel may be required to participate in vendor briefings, project meetings, and/or education opportunities.  Generally, travel would be no more than 5 to 6 times a year.

 

Education:

·  Bachelor’s or Master’s degree in Information Assurance, Computer Science, Information Systems or related field of study.

 

Experience:

·  8+ years of practical experience in the field of IT is required.  5+ years of direct Information Security experience.

 


Certification Requirements:

·  A security industry certification is required including but not limited to CISSP, SSCP, CISM, SANS GSEC, ECSA, ECSP, and Security+.