Comcast Cybersecurity: Principal IAM Engineer

Xfinity; Mount Laurel Township (NJ); On-site; USD 90,000 - 150,000; Full time

Job summary

An established industry player is seeking an IAM Principal Engineer to enhance its identity and access management program. This role involves leveraging SailPoint IdentityIQ expertise to develop innovative solutions that meet diverse customer needs. You will engage in daily engineering and support efforts while collaborating with Agile teams to design and implement IAM solutions. The ideal candidate will have a strong background in identity management technologies and a passion for problem-solving. Join a dynamic team committed to driving innovation and improving processes in a fast-paced environment.

Benefits

Health benefits

Retirement plans

Flexible work hours

Professional development opportunities

Qualifications

• 8+ years of experience with SailPoint IdentityIQ and a Bachelor's degree preferred.
• Knowledge of IAM components, including Authentication and Authorization Data.

Responsibilities

• Develop and maintain IAM solutions for internal and external customers.
• Collaborate with Agile teams to implement technical IAM solutions.

Skills

SailPoint IdentityIQ

Java

SQL

LDAP

Active Directory

MFA

REST APIs

Linux OS

GitHub

Cloud Concepts

Education

Bachelor's degree in Computer Science

CISSP Certification

CISM/CISA Certification

Tools

GitHub

Eclipse

VS Code

Job description

Comcast Business

Comcast Business offers a suite of Connectivity, Communications, Networking, Cybersecurity, Wireless, and Managed Solutions to help global organizations of all sizes prepare for what’s next. Powered by the nation’s largest Gig-speed broadband network and backed by 24/7 customer support, Comcast Business is the nation’s largest technology provider to small businesses and one of the leading service providers to the Enterprise market. Comcast Business has been consistently recognized by industry analysts and associations as a leader and innovator, and one of the fastest growing providers of Ethernet services.

Job Summary

The IAM Principal Engineer (Engineer 5) is responsible for developing, maintaining, and improving the information security identity and access management program by providing identity and access control solutions for all myComcastAccess service internal and external customers. This role involves active engagement in daily engineering, maintenance, and support efforts for all identity and access management technology. The role serves as a subject matter expert in identity and access management, privileged access management, and general information security best practices across all technology domains.

Job Description

This position is ineligible for visa sponsorship. To be considered, you must be legally authorized to work in the United States and not require sponsorship now or in the future.

What You’ll Do:

• Bring your SailPoint IdentityIQ expertise to enhance the capabilities of the IAM platform within a team and for a diverse customer base.
• Collaborate within and across Agile teams to design, develop, test, implement, and support technical IAM solutions on a large scale.
• Contribute to the IAM platform by developing creative and efficient configuration and coding solutions that differentiate us from competitors.
• Develop cost-effective technical engineering solutions to address business challenges and improve processes, including tactical and strategic solutions for Identity and Access.
• Work closely with stakeholders to understand requirements and ensure solutions meet these needs.
• Design new system solutions, including implementing proof-of-concepts and presenting with a marketing mindset.
• Contribute to the design, development, and testing of system changes throughout the lifecycle.
• Develop capacity forecasts to proactively prevent issues and outages.
• Create processes and procedures to maintain high levels of availability, security, and quality in managed environments.

Desired Qualifications:

• 8+ years of experience implementing SailPoint IdentityIQ.
• Knowledge of LDAP, Active Directory, MFA, risk-based authentication, and privileged access management.
• Holistic understanding of IAM components including Authentication, Authorization Data, Endpoint Security, Network Security, and Policy Engines.
• Technical expertise with Microsoft MFA, SailPoint, CyberArk, ForgeRock, Okta, Ping, Active Directory, Azure AD, AWS, Google Cloud Platform, and IDM integration.
• Solid understanding of Cloud concepts with hands-on experience in Azure/AD or other cloud identity environments.
• 3-5+ years developing workflows, forms, connector configurations, provisioning policies, rules, and plugins within SailPoint IdentityIQ.
• Ability to learn and apply new technologies collaboratively.
• Experience with source management and developer tools such as GitHub, Eclipse, VS Code.
• Strong problem-solving skills with the ability to articulate solutions.
• Innovative mindset and passion for problem-solving and driving innovation.
• Programming experience with BeanShell, JavaScript, Java, including JSP programming.
• Experience developing web applications and working with web services (REST APIs, JSON).
• Proficiency with Linux OS and shell scripting.
• Experience with RDBMS databases and SQL coding.
• Excellent communication skills and customer orientation.
• Ability to work under pressure and deliver quality solutions efficiently.

Education:

• 8+ years of experience with a Bachelor's degree in Computer Science, Computer Engineering, or a related field preferred.
• Certifications such as CISSP, CISM/CISA, SailPoint IdentityIQ Architect are a plus.

Skills

Java, SailPoint IdentityIQ, SQL

We offer benefits designed to support your physical, financial, and emotional well-being. For more details, please visit our benefits summary on our careers site.

Additional Information

While a Bachelor's degree is preferred, we also consider candidates with extensive related experience or coursework. We are an equal opportunity employer and consider all qualified applicants regardless of race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, or genetic information.