IAM/PAM Security Engineer

MedStar Health; Jacksonville (FL); Remote; USD 90,000 - 125,000; Full time

Job summary

A leading healthcare organization is seeking a skilled IAM/PAM Security Engineer to design and implement security measures across systems. This role requires extensive experience in managing identity and access controls while ensuring compliance with industry standards. Join a dedicated team where your expertise in IAM solutions and cybersecurity will play a crucial role in protecting critical systems and data.

Qualifications

• 4+ years of experience in security engineering.
• Proven experience with IAM and PAM solutions.
• Strong understanding of security principles.

Responsibilities

• Design, implement, and maintain IAM and PAM systems.
• Collaborate with teams to integrate security controls.
• Conduct security assessments and recommend strategies.

Skills

Identity and Access Management

Privileged Access Management

Security Assessment

Automation Scripting

Cloud Security

Analytical Thinking

Leadership

Education

Related Bachelor's degree

Tools

SailPoint

CyberArk

Job description

Role: IAM/PAM Security Engineer

Duration: 6 months(potential for extension)

Location: 100% Remote



We're looking for a highly skilled Security Engineer to join our team, with a focus on Identity and Access Management and Privileged Access Management.



Job Summary:

As a Security Engineer, you will play a critical role in designing, implementing, and maintaining our access management and privileged access management systems. You will work closely with our development teams to ensure that our applications and systems are secure, scalable, and compliant with industry standards.



Responsibilities:

• Design, implement, and maintain access management and privileged access management systems, including identity and access management (IAM) solutions, multi-factor authentication (MFA), and role-based access control (RBAC)

• Collaborate with development teams to integrate security controls into applications and systems


• Assist with scripts using Python to automate security tasks and workflows


• Implement and manage privileged access management solutions, including privileged account management (PAM) and privileged session management (PSM)


• Conduct security assessments and risk analyses to identify vulnerabilities and recommend remediation strategies


• Develop and maintain security policies, procedures, and standards for access management and privileged access management


• Collaborate with the incident response team to respond to security incidents and implement remediation measures


• Stay up-to-date with industry trends, threats, and technologies, and apply this knowledge to improve our security posture

Requirements:

• 4+ years of experience in security engineering, with a focus on access management and privileged access management


• Proven experience leading implementation and development efforts for access management and privileged access management solutions


• Strong leadership and project management skills, with the ability to lead cross-functional teams and manage complex projects


• Experience with IAM solutions, such as Azure AD


• Knowledge of MFA solutions


• Experience with PAM solutions, such as CyberArk


• Strong understanding of security principles, including authentication, authorization, and accounting (AAA)


• Experience with cloud security


• Strong analytical and problem-solving skills, with the ability to think critically and outside the box


• Excellent communication and collaboration skills, with the ability to work effectively with technical and non-technical stakeholders

SailPoint Experience required:

• SailPoint certification: Having a SailPoint certification, such as the SailPoint Certified IdentityIQ Administrator or SailPoint Certified IdentityNow Administrator, can be a significant advantage.


• Identity and Access Management (IAM) knowledge: Familiarity with IAM concepts, including identity lifecycle management, access management, and compliance.


• SailPoint product knowledge: Understanding of SailPoint's products, including IdentityIQ, IdentityNow, and SecurityIQ.


• Configuration and implementation: Experience with configuring and implementing SailPoint solutions, including setting up connectors, workflows, and policies.


• Identity governance: Knowledge of identity governance, including identity lifecycle management, access management, and compliance.


• Data analysis and reporting: Ability to analyze data and create reports using SailPoint's reporting tools, such as IdentityIQ's reporting engine.


• Troubleshooting and problem-solving: Strong troubleshooting and problem-solving skills to resolve issues with SailPoint implementations.


• Scripting and automation: Knowledge of scripting languages, such as PowerShell or Python, and experience with automation tools, such as SailPoint's Automation Framework.

Leadership and Implementation Experience:

• Proven experience leading implementation and development efforts for access management and privileged access management solutions


• Ability to lead cross-functional teams, including development, operations, and security teams


• Experience with Agile development methodologies and version control systems, such as Git

Experience desired:

• Experience with SailPoint IdentityIQ or IdentityNow is highly desirable


• Knowledge of SailPoint's access management and governance capabilities, including identity lifecycle management, access certification, and segregation of duties (SoD)


• Experience with SailPoint's integration with other security solutions, such as IAM, PAM, and SIEM


• Experience with CyberArk

Required Work Experience:

• 4+ years related work experience


• 2+ years in Cybersecurity


• 2+ years Information Technology Infrastructure

Required Education:

Related Bachelor's degree or additional related equivalent work experience



Required Licenses and Certifications (required within 180 days of FT hire) :

• Cybersecurity Engineer Defense and Threat Operations: SSCP


• Cybersecurity Engineer Enterprise Cybersecurity Services: SSCP
  
  

Preferred:

• Experience with containerization technologies, such as Docker


• Development skills in Node.js, Java, React, and SQL


• Proficiency in Python scripting for security automation


• Knowledge of DevOps practices and tools, such as Jenkins or GitLab CI/CD


• Experience with security orchestration, automation, and response (SOAR) solutions

Position is offered by a no fee agency.