Identity and Access Management Engineer - Remote
Donnelley Financial Solutions (DFIN) is a leader in risk and compliance solutions, providing insightful technology, industry expertise and data insights to clients across the globe. We’re here to help you make smarter decisions with insightful technology, industry expertise and data insights at every stage of your business and investment lifecycles. As markets fluctuate, regulations evolve and technology advances, we’re there. And through it all, we deliver confidence with the right solutions in moments that matter.
Summary:
Identity and Access Management (IAM) Engineer will be responsible for assistance in design, implementation, and support of IAM platform including necessary application integrations. Will deliver on short- and long-term strategies for authentication, authorization, and identity lifecycle management. Will work with department leadership directly to recommend, develop, implement, and support cost-effective solutions for all aspects of identity lifecycle and secure access management.
Responsibilities:
- Design, implement, document and manage an enterprise-wide IAM platform
- Assist with developing framework, strategy and roadmap that outlines and defines the tactical, operational and strategic plans for IAM
- Engage with and influence key stakeholders to ensure that compliance, security and cross-functional requirements are met
- Integrate IAM systems with target SaaS platforms, in-house and third-party applications to support identity lifecycle and secure access management. Develop custom connectors if necessary
- Track key metrics that demonstrate current IAM platform state and any associated risk indicators
- Conduct POCs of new Identity Access Management products and services
- Investigate operational problems within the identity management environment and play lead role in resolving the issue
- Proactively improve organizational IAM processes and procedures
- Perform maintenance upgrades for the existing systems within the identity management environment
- Develop necessary technical documentation and reports
- Provide operational/steady-state support
- Engage and troubleshoot with customer teams
- Participate in development of the DFIN Security Standards and best practices
Qualifications:
- Bachelor degree with 3+ years of relevant work experience OR demonstrated ability to meet the job requirements through a comparable number of years of applicable work experience and education
- Self-driven, highly motivated with a strong customer focus
- Strong analytical, multi-tasking, and problem-solving skills
- Familiarity with Agile/Scrum methodologies and associated tools
- Knowledge of, or hands-on implementation, experience of authentication, authorization and identity lifecycle management technologies and frameworks such as with SAML, OAuth, MFA, OpenID, JWT, LDAP or Kerberos
- Strong proficiency with common scripting languages (e.g. PowerShell, BASH and Python)
- Experience working with Azure Active Directory and Microsoft Active Directory
- Solid understanding of LDAP structures such as schemas, object classes, and attributes
- In-depth hands-on experience with one of the leading IAM platforms such as SailPoint, Saviynt, or BetterCloud or Omada
- Hands-on experience integrating IAM platform with SAP SuccessFactors, ServiceNow, PagerDuty and Azure Active Directory
- Experience with one of the leading Privileged Access Management (PAM)/Privileged Identity Management (PIM) platforms such as CyberArk, BeyondTrust or Thycotic
- Prior exposure to modern CI/CD pipelines including tools and technologies such as Azure DevOps (former VSTS), GitHub, Jenkins or others
- Solid understanding of fundamental security building blocks such as: authentication, authorization, data validation, encryption, exception handling and logging. Working knowledge of NIST framework
- Solid understanding of leading cloud platforms such as MS Azure and Amazon AWS, their inherent identity and access security risks and relevant controls
It is the policy of Donnelley Financial Solutions to select, place and manage all its employees without discrimination based on race, color, national origin, gender, age, religion, actual or perceived disability, veteran's status, actual or perceived sexual orientation, genetic information or any other protected status.
If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access jobs.dfinsolutions.com as a result of your disability. You can request a reasonable accommodation by sending an email to [email protected]. #BI-Remote