.Job DescriptionThe position The Senior IAM Engineer will be a key member of the Security Technology team within the Technology Services and Cybersecurity organization, and report to the Associate Director of IAM Engineering. The position will manage activities related to the design, implementation and effectiveness of Identity and Access Management (IAM) technologies such as (but not limited to) Privileged Access Management, Identity Governance and Administration, Federation, and Multi-Factor Authentication. The position will be a key contributor in the development of IAM strategy, and will be a valuable contributor to integrating Zero Trust methodology into the IAM function.Role Responsibilities Primary Activities: Act as a subject matter expert particularly for Privileged Access Management capabilities, including familiarity with Just-in-Time privileged account access. Ensure IAM solutions designed, engineered, and deployed are in alignment with security architecture and strategy, and support the organization's policies and standards. The solutions should incorporate industry best practices and recommendations, as well as meet performance, scalability, and availability requirements. Integrate and align the IAM strategy with an overall program focused on establishing a zero trust approach to security. Coordinate activities with a team consisting of external resources and other partners to implement and maintain IAM security tools and ensure they are functioning properly. Create technical designs, recommended configurations and drawings necessary to design, implement and deploy current and future state security capabilities. Periodic or Secondary Responsibilities: Engage with the business to understand their needs and to ensure that our IAM solutions work in an agile, business-friendly yet secure way. As required, conduct presentations, awareness sessions, mentoring and general instruction on IAM and zero trust to various audiences (staff, colleagues and stakeholders, executive management) as required. Partner with other security engineering technology projects as required and as aligned to a zero trust approach in areas such as network security, endpoint security, cloud security and security analytics. Involvement in critical incidents (cyber or infrastructure) requiring support from IAM Engineering. Maintain continuous awareness of cyber attack TTPs, particularly in the account compromise area, and use that awareness to guide our IAM technology configuration, hygiene, deployment and strategy. Background Responsibilities: Involvement in further employee awareness of best practices within the IAM space (password practices, MFA recommendations, etc). Keep up to date with current and emerging IT solutions and technology trends and be able to develop and present recommendations for the adoption of this information into an IAM solution strategy, as applicable
