Cybersecurity ULCM - IAM Expert

Holcim; Madrid; On-site; EUR 60,000 - 90,000; Full time

Job summary

Holcim Group in Madrid seeks an IAM Expert to manage identity and access services for employees across the group. The role focuses on SSO, Privileged Access Management and MFA, with collaboration across a multicultural team.

You will implement, maintain and improve IAM solutions, work with cloud-based infrastructure, and coordinate with stakeholders to ensure compliant user lifecycle processes in a fast-paced environment.

Qualifications

• Information technology University degree or equivalent experience.
• At least 4 years of experience programming in Java.
• At least 4 years of experience in IAM workforce, implementing and maintaining workforce IAM solutions, ideally Sailpoint IAM (IIQ/IdentityNow).
• Hands-on experience with Federation Protocols (OAuth, SAML, OpenID) and SSO integrations.
• Experience designing Privileged Access Management solutions.

Responsibilities

• Ensure Incident SLA compliance for IAM services and manage task backlog.
• Conclude, maintain and improve IAM solutions including connector config and third party integration.
• Develop plan for applications onboarding and integration.
• Optimize automatic access rights provisions.
• Perform entitlement analysis and role mining.
• Maintain SSO, MFA and PAM solutions.
• Support dynamic infrastructure as code using public cloud technologies.
• Keep knowledge base and docs up to date.
• Manage relationships with business stakeholders.

Skills

Java

IAM workforce

OAuth & SSO

Privileged Access Management

DevOps basics

Team collaboration

English communication

Education

Information technology University degree or equivalent experience

Tools

Sailpoint IAM (IIQ/IdentityNow)

Git

Jenkins

CloudFormation

Elasticsearch

Job description

Search by Location (Type in the city or state)

Select how often (in days) to receive an alert:

The IAM Expert on User life cycle area within the Cybersecurity department is responsible, together with the team, to offer reliable tools and associated processes which enable the users lifecycle management activities for employees (IAM workforce) during the whole user lifecycle processes within the Holcim Group, supporting also the single sign on, privileged access management and Multi Factor Authentication products and services.

RESPONSABILITIES

• Ensure Incident SLA compliance for the IAM services and keep the tasks backlog under control.
• Conclude, maintain and improve the Identity and Access Management solution including connector configuration, custom rule development, workflow configuration and third party system integration
• Develop effective plan for applications on-boarding and integration
• Optimize automatic access rights provisions
• Perform analytical role mining and entitlement analysis
• Conclude maintain and improve Single sign on, Multifactor Authentication and privilege Access management solutions
• Support and manage dynamic infrastructure as a code based on public cloud technologies
• Ensure the online knowledge base, documentation and intranets are accurate, focussed and up to date.
• Manage relationships with business stakeholders consuming the IAM services and products.
• Leverage expertise to support and challenge the team to use efficient and result oriented approaches and ways of working.
• Coordinate the product and services rollouts to additional countries with a worldwide scope.
• Apply the minimum control standards related to user lifecycle process defined by Group internal control to the applications in Scope, assisting also internal control during the Audit (internal & external) exercises.

POSITION REQUIREMENTS

• Information technology University degree or equivalent experience
• At least 4 years of experience programming in JAVA
• At least 4 years of experience on IAM workforce performing architecture, implementing and maintaining workforce IAM solutions, ideally with Sailpoint IAM solutions (Identity IIQ or identitynow)
• Hands on sound experience working with Federation Protocols (Oauth, SAML, OpenID), and Single Sign On integrations
• Previous experience designing and implementing Privileged Access Management solutions (Cyberbark, safeguard…).
• High understanding of the User life cycle process, standards and segregation of Duties definition.
• Working knowledge of DevOps Methodologies and tools, leveraging tools such Git, Jenkins, cloud formation, Elastics…
• Works effectively with third parties (including offshore and nearshore service providers)
• High Skills prioritizing, assigning and executing tasks in a high pressure environment.
• Excellent written, oral and interpersonal communication skills in English. Spanish, French, Arabic, German and/other languages used in the countries in which we operate would be an advantage.
• Extensive experience working in a team-oriented and collaborative environment.
• Experience in working in a multicultural and international environment.
• Strategically thinking based on the business needs.
• Artificial intelligence usage proficiency, mainly in development processes

OTHER INFORMATION

• Value inclusion within the day to day responsibilities by respecting others’ perspectives/ convictions, engaging others’ opinions, creating a safe environment where people, ideas and opinions are valued within the team / “internal” customers and external partners.
• Respect and take into consideration diversity by valuing different world views, challenges and cultures that represent all walks of life and all backgrounds.
• Is sensitive to how people, cultures and organizations function. Deals comfortably with organizational politics. Steer through the organizational maze to get things done.
• Demonstrates positive thinking mindset, consistently identifying highlights.
• Shows a can-do attitude in good and bad times and acts as a role model in terms of ethics and self-awareness.