Identity & Access Management Analyst (IAM), Progression

Tampa Electric; Lutz (FL); Ibrido; USD 90.000 - 130.000; Tempo pieno

Vantaggi offerti da questo lavoro

401k Savings plan with company match

Pension plan

Paid time off

Paid Holiday time

Medical, Prescription Drug, & Dental

Tuition Assistance Program

Employee Assistance Program

Wellness Programs

On-site Fitness Centers

Bonus Plan

Descrizione del lavoro

Tampa Electric Company is seeking an Identity & Access Management Analyst to manage user provisioning, access controls, and governance across enterprise systems. The role supports SOX, NERC CIP, and PCI compliance while ensuring secure handling of critical assets.

The position offers progression within the IAM job family and requires collaboration with the Cyber Security Operations Center and Service Desk. Hybrid in-office and remote work is available.

Competenze

• High school diploma or equivalent is required.
• Bachelor’s degree preferred in Information Systems, Computer Science, Business or related fields.
• Minimum two (2) years of IT, information security, or information system audit experience required; degree may substitute for one year.
• Preferred: SSCP/CISSP, Security+, ITIL certification.
• Knowledge of Windows OS and account management; familiarity with SAP, SQL Database, and Windows for access requests.

Mansioni

• Responds to incidents from business partners to resolve security access problems and troubleshoots basic security access administration issues.
• Administers provisioning/deprovisioning of all account types and reviews security access controls across enterprise systems to ensure segregation per regulatory and business requirements.
• Maintains and enforces regulatory compliance (PCI, FERC, HIPAA, SOX, NERC) and corporate IT security standards.

Conoscenze

IAM

User provisioning

Active Directory

RBAC

Compliance awareness

SOX/NERC/PCI

Formazione

High school diploma

Bachelor’s degree in Information Systems/CS

Strumenti

Active Directory

SAP

SQL Database

Windows

Descrizione del lavoro

Title: Identity & Access Management Analyst (IAM), Progression

Company: Tampa Electric Company

Location: Bearss Operations Center

State and City: Florida - LUTZ

Shift: M-F 4 / Days in Office / 1 Day Remote

Title: Identity & Access Analyst (IAM), Progression

Performance Coach: Sr. Manager, Cyber Protection

Company: Tampa Electric

Department: Cyber Security Operations Center

Please note that this position can be hired within any level of the job family progression, based on Education and years of experience (progression).

POSITION CONCEPT

The IT Security Administration Analyst is responsible for ensuring the integrity of the company’s information assets. Responsibilities focus on the establishment, maintenance, and removal of user, system, functional, and shared accounts for all IT systems. Analysis of security access requests and their safeguard against accidental or unauthorized modification, destruction, or disclosure is of the utmost importance. Integral to the position is ensuring that all critical cyber assets are secure, while maintaining and enforcing regulations regarding Sarbanes‑Oxley (SOX), FERC, NERC, and PCI. Enforcement of corporate information security standards; segregation of access to cyber assets and network resources as regulations dictate; documentation and updates to security access processes; and maintaining Security Access Administration metrics are key responsibilities for this position.

FOCUS AREAS

• Identity & Access Management (IAM)
• User provisioning and deprovisioning
• Active Directory and enterprise application security administration
• Access governance and RBAC
• SOX, NERC CIP, and PCI compliance support

ASSOCIATE SECURITY ADMINISTRATION ANALYST (Level 1)

Reviews security access controls to all enterprise systems with a good understanding of security access management. Maintains and enforces regulatory compliance. Works under direct supervision.

Primary Duties And Responsibilities

• Responds to incidents from business partners to resolve security access problems and troubleshoots basic security access administration issues. (15%)
• Administers the provisioning and deprovisioning of all account types and the review of security access controls to all enterprise systems including ERP, NERC, CRB, etc. by working to ensure that all approved access to cyber assets and network resources are segregated according to regulatory and business requirements. (55%)
• Maintains and enforces regulatory compliance (PCI, FERC, HIPAA, SOX, NERC) and corporate IT security standards associated with information technology. (30%)

Key Internal: Interacts with team members at the Service Desk, Enterprise Security, and Cyber Security Operations Center. Works with varying levels of management and associates throughout TECO Emera and its affiliates.

Qualifications

Education

Required: High school diploma or equivalent.

Preferred: Bachelor’s degree in Information Systems, Computer Science, Business or related fields.

Licenses/Certifications

Preferred: SSCP/CISSP, Security+, ITIL certification.

Related Experience

Required: Minimum two (2) years of information technology, information security, or information system audit experience;

Bachelor’s degree may be considered in lieu of one (1) year of experience listed above.

Knowledge/Skills/Abilities (KSA)

Required: Basic knowledge of Windows operating system and account management; Ability to support security access requests with preference for SAP, SQL Database, and Windows. Good understanding of the practical aspects of security access management; Exceptional focus on attention to detail.

SECURITY ADMINISTRATION ANALYST (Level 2)

In addition to the Level 1 Associate Analyst duties and responsibilities, investigates security access exceptions and updates security processes. Works under direct supervision.

Primary Duties And Responsibilities

• Performs duties and responsibilities of previous level (70%)
• Performs additional security tasks based on established processes. Work requires review for soundness of technical judgment and for following the defined policies and procedures. (15%)
• Enforces corporate security policies and procedures, investigates possible security access exceptions, and updates security processes documentation as necessary. (15%)

Qualifications

Education

Required: High school diploma or equivalent.

Preferred: Bachelor’s degree in Information Systems, Computer Science, Business or related fields.

Licenses/Certifications

Preferred: SSCP/CISSP, Security+, ITIL certification.

Related Experience

Required: Minimum of four (4) years of direct work experience performing the Duties & Responsibilities of this position;

Bachelor’s degree may be considered in lieu of up to 2 years of experience listed above.

Knowledge/Skills/Abilities (KSA)

Required: Thorough knowledge of Windows operating system and user account management and support for administrative requests for SAP, SQL Database, and Windows. Exceptional focus on attention to detail.

SENIOR SECURITY ADMINISTRATION ANALYST (Level 3)

In addition to the Level 2 Analyst duties and responsibilities, analyzes and troubleshoots more complex activities. Gathers and documents business and functional security roles and access requirements. May mentor Level 1 and Level 2 Analysts.

Primary Duties And Responsibilities

• Performs duties and responsibilities of previous levels (50%)
• Analyzes and troubleshoots complex activities related to security access related issues, proactively updates procedure/process documentation, and suggests and implements process improvements. (15%)
• Identifies and raises awareness of security access exceptions and identifies areas and processes for improvement and automation. (15%)
• Coordinates and addresses project related security tasks. (20%)

SUPERVISION

Indirect Supervision: Contractors

Qualifications

Education

Required: High school diploma or equivalent.

Preferred: Bachelor’s degree in Information Systems, Computer Science, Business or related fields.

Licenses/Certifications

Preferred: SSCP/CISSP, Security+, ITIL certification.

Related Experience

Required: Minimum of eight (8) years of direct work experience performing the Duties & Responsibilities of this position is required.

Bachelor’s degree may be considered in lieu of up to 4 years of experience listed above.

Knowledge/Skills/Abilities (KSA)

Required: Strong knowledge of Windows operating system and user account management with proven skills in gathering and documenting business and functional security roles and access requirements; Working knowledge of the processes that ensure compliance with NERC CIP, SOX, and PCI. Strong verbal, written, analytical, and interpersonal skills; Exceptional focus on attention to detail.

LEAD SECURITY ADMINISTRATION ANALYST – PC role not a part of the Sec Admin Analyst progression

The Security Administration Analyst Lead is an exempt level position. In addition to the Senior Security Administration Analyst duties & responsibilities, serves as project team lead and the SME in technical discipline. May mentor and train all levels of the Security Admin Analysts. Works under minimal supervision and may serve as backup to the manager in a limited capacity.

Primary Duties And Responsibilities

• Performs duties and responsibilities of previous levels (40%)
• Functions as project team lead under the direction of the manager or project managers; may lead multiple concurrent projects. (10%)
• Functions as a subject matter expert in this technical discipline. (10%)
• Direct management of Security Admin Analyst. Mentors and directs team members, manages team member performance review. Develops and drives standard practices within the team. (20%)
• In this leadership role, oversees projects and/or functional segments within the team and manages day-to-day responsibilities. May serve as a backup to the manager in a limited capacity. (20%)

SUPERVISION

Direct Supervision: Direct management of the five (5) Security Admin Analysts.

Indirect Supervision: Serves in a leadership role overseeing team members, contractors and contract resources.

Qualifications

Education

Required: High school diploma or equivalent.

Preferred: Bachelor’s degree in Information Systems, Computer Science, Business or related fields.

Licenses/Certifications

Preferred: Security+, SANS GIAC, CISM, CISA, CISSP, ITIL certification.

Related Experience

Required: Minimum of 12 years progressive experience performing the Duties & Responsibilities of this position;

Bachelor’s degree may be considered in lieu of up to 4 years of experience listed above.

Knowledge/Skills/Abilities (KSA)

Required: Expertise in Windows operating system and user account management; Proven leadership skills; Strong analytical and risk assessment skills as well as strong listening and written communication skills for reporting and auditing purposes; Working knowledge of the processes that ensure compliance with NERC, CIP, SOX ,NIST and PCI; Frequently presents information to management, team, and department. Knowledge of identity governance tools. Knowledge of Privilege Management and Muti factor Authentication (MFA) tools. Knowledge and support of Azure AD groups, Knowledge of Role based access controls (RBAC).

WORKING CONDITIONS

Some extended working hours are required. Fast paced environment.

TECO offers a competitive Benefits package!!

Competitive Salary *401k Savings plan w/ company matching * Pension plan * Paid time off* Paid Holiday time * Medical, Prescription Drug, & Dental Coverage *Tuition Assistance Program * Employee Assistance Program * Wellness Programs * On-site Fitness Centers * Bonus Plan and more!