Cybersecurity Architect - IAM

Job Description

Responsibilities

• Maintain architectural diagrams and workflows of the identity access management platform
• Provide design, evaluation, analysis, of identity and access management programs to support the company’s strategy
• Develop standards and guidelines for access management across the company and department
• Understand user lifecycle management; including provisioning/de-provisioning, access requests, user entitlements and audit & validations
• Collaborate with HRIS, IT service owners, service desk and end-users to gather feedback and design solutions with identity related workflows
• Present on design & vision that meets user and business needs
• Design overall structure for new and existing cloud and on-premise applications into the identity access management platform
• Create identity governance workflows with the concepts of attestation and auditing.
• Ensure systems are scalable, maintainable and meet business needs
• Create documentation to support architectural decisions and workflows
• Review identity workflows and processes for lifecycle management, auditing, reporting, governance and self-service
• Design a RESTful identity API to provide Identity as a Service to downstream services and directory owners
• Play an active role in CAA’s security incident response efforts, working to identify and mitigate information security threats
• Required Capabilities
• A minimum of 7 years in Information Technology, ideally with a focus on information security
• A minimum of 3 years’ experience in identity and access management Architecture or Engineering
• A Bachelor’s or Master’s Degree in a relevant field of work
• Experience architecting IAM projects from design through implementation
• Strong communication and presentation skills with ability to explain complex concepts to both technical and non-technical audiences
• Have designed and supported the implementation of Zero Trust Identity architecture
• Understanding of OAuth, SAML and OpenID frameworks
• An understanding of the fundamental operations of servers, operating systems, networks, firewalls, cloud applications, and infrastructure
• Knowledge in automation and integration with SaaS applications
• Knowledge of lifecycle management and provisioning and de-provisioning
• Knowledge of different MFA and compensating controls for identity
• Knowledge of privilege identity management, privileged access management, and concepts of just in time provisioning, just enough access, and principal of least privilege
• Knowledge of scripting in at least one of the following languages: PowerShell, Python, JavaScript
• Desired Capabilities
• Cross-team collaboration and vendor management
• Set up and integrations for Single Sign-On with various SaaS vendors
• Knowledge and experience of SCIM integration
• Account set-up and access management
• Application development and DevSecOps pipeline
• Building and using REST APIs
• Experience creating and supporting identity framework or IDaaS
• An understanding of the NIST framework and using a continuous improvement loop
• Desired Technical Skills
• Azure AD, Active Directory, AD Connect, Azure Automation, Power Automate, SAML, OpenID, SSO, SCIM, OAuth, PowerShell, RESTful APIs, Okta, Workday, SailPoint, Ping Federate, PingID, Splunk, RBAC
• Certifications with CIAM, CIMP, Okta, SailPoint, Microsoft Identity, Ping Identity, CISSP, CISM, CompTIA Security+
• Location
• This role is based in our Nashville office.

Location

• This role is based in our Nashville office.
• Compensation
• The annual base salary for this position is in the range of $179,000 - $208,000 in Nashville. This position is also eligible for benefits and a discretionary bonus. Ultimately, the salary may vary based upon, but not limited to, relevant experience, time in the role, business sector, and geographic location, among other criteria. Please talk with a CAA Recruiter to learn more.
• Environment
• CAA has a service oriented collaborative environment where we help our colleagues then focus on our own work.