Identity and Access Management (IAM) Engineer

This role designs, implements, and maintains identity solutions that secure both on-premises and cloud resources while streamlining the team member experience. Leveraging expertise with identity providers, SSO, MFA, and automation, this role protects confidentiality and integrity, supports audits, privacy regulations, as well as demonstrating the GILA WAY., * Promotes and provides excellent guest service to both internal and external guests.

• Designs, implements, and maintains identity and access management (IAM) platforms including directory services, single sign on (SSO), multifactor authentication (MFA), and privileged access management (PAM), and role-based access control (RBAC).
• Implements technologies to centrally integrate identity systems across the organization to streamline and improve team member experience.
• Automates joiner-mover-leaver lifecycle while enforcing least privilege, segregation of duties, and compliance with SLAs.
• Implements access controls to applications and maintains roles in the directory.
• Collaborates with key engineering stakeholders to solve IAM challenges and support new service deployments.
• Troubleshoots and manages issues related to identities, systems access accounts, authentication, authorization, entitlements, and permissions.
• Implements logging, alerting, and evidence collection controls to ensure regulatory and audit compliance.
• Works with key users to resolve system problems and issues. Escalates intractable issues to vendors as necessary.
• Monitors emerging IAM threats and recommends countermeasures or tool enhancements.
• Maintains confidentiality and integrity.
• Maintains a dependable work attendance record with extremely infrequent absences and/or lateness.
• Performs other special projects and duties as assigned.

Do you have experience in Zero Trust security?, Do you have a Bachelor’s degree?, To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

EDUCATION and/or EXPERIENCE

1. Must be computer literate and have knowledge of Microsoft Office and/or other computer and HR Software.

2. Ability to evaluate courses of action and reach sound, non-judgmental management decisions and resolutions.

3. Demonstrated understanding of organizational development.

4. Must possess strong organizational and time management skills.

5. Bachelor’s degree in IT, Cybersecurity, Computer Science, or a related field is preferred, or a combination of 3+ years of relevant professional experience, education, or IAM certifications will be considered.

6. Working experience administrating Directory and Identity Services, such as Active Directory, LDAP, and Microsoft Entra ID. Demonstratable understanding of key concepts such as SAML, OAuth 2.0, and SCIM.

7. Extensive knowledge and experience with identity and access management technology, such as single sign-on (SSO), multifactor authentication, privileged access management, and automation.

8. Demonstratable knowledge of PowerShell, Python, or comparable language used for automation of IAM tasks.

9. Ability to handle confidential data with discretion.

10. Must be able to obtain the following within the first year of employment:

a. CompTIA Security+

b. Microsoft SC-300

1. Working knowledge of any NIGC MICS, GLI, NIST, CIS, or PCI-DSS standards.

2. Ability to perform the GILA WAY which is as follows:

Greet our guest

Interact positively with our guest

Listen actively to our guest

Appreciate our guest

1. Must possess excellent guest service skills, strong telephone etiquette, a self-starter with the ability to follow-up and complete tasks in a timely manner with minimum supervision.

2. Ability to establish and maintain effective working relationships as well as to gain the cooperation of guests and fellow team members.

3. Strong interpersonal and communication skills, both written and oral.

4. This position must have, or an ability to acquire within one year, an in-depth knowledge and thorough understanding of Enterprise Policies and Procedures, governmental regulations, and technical rules relevant to their responsibilities.

COMPUTER/TECHNICAL SKILLS

Intermediate skills in the use of personal computers, Microsoft Office Suite Software, email and Enterprise specific programs.

An understanding of the following concepts and skills are required for this role:

• Active Directory, Entra ID, SSO, MFA, LDAP
• SAML, SCIM, RADIUS, OAuth
• Privileged Access Management (PAM)
• Zero-Trust, Least Privilege, Segregation of Duties
• PowerShell, Python, or comparable

LANGUAGE SKILLS

Ability to read, analyze, and interpret general business periodicals, professional journals, financial reviews, technical procedures, or government regulations. Ability to write reports, business correspondence, and procedure manuals. Ability to effectively present information and respond to questions from groups of managers, clients, customers, and the public.

MATHEMATICAL SKILLS

Ability to work with mathematical concepts such as probability and statistical inference. Ability to apply concepts such as fractions, percentages, ratios, and proportions to practical situations.