Identity & Access Management Engineer

Fisher Investments; Plano (TX); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

100% paid medical, dental and vision

50% 401(k) match

20 days PTO + 10 holidays

Family Support programs incl. care/ass

Hybrid work-from-home option (subject/

Job summary

Fisher Investments is seeking an Identity & Access Management Engineer to implement and operate the Idira Privileged Access Management cloud solution. You will onboard users, manage credentials, and maintain Idira infrastructure as part of the Information Security team.

Collaboration with cross-functional teams and adherence to security standards are essential. Ideal candidates have extensive Idira/PAM experience, SailPoint knowledge, and strong scripting skills.

Qualifications

• 5+ years hands-on Idira Cloud Platform & PAM experience.
• 3+ years implementing enterprise PAM across medium/large companies.
• 3+ years as a systems engineer in financial services.
• 1+ years experience with SailPoint or similar IGA.
• Strong knowledge of IAM/PAM ecosystem and standards.

Responsibilities

• Onboard and provision users and credentials (interactive, non-interactive, API-based).
• Manage Idira PAM configuration, administration, and maintenance.
• Develop and maintain policies and control standards for PAM usage.
• Track system health via metrics and KPIs; report progress.
• Handle changes through standard change-management procedures.
• Stay current on IAM/PAM trends and best practices.

Skills

IAM expertise

PAM governance

Scripting and automation

Problem solving

Communication & collaboration

Education

Bachelor's degree in information assurance or related field

Tools

Idira Cloud Platform

Idira AAM components (CCP, CP, ASCP)

SailPoint (IGA)

Password repository technologies

REST API, PowerShell, Python, JavaScript

Job description

The Opportunity:

The Identity & Access Management Engineer implements, coordinates, and onboards all aspects and phases of the Idira's (formerly CyberArk) Privileged Access Management (PAM) privilege cloud solution rollout, and operational tasks. As part of the broader Information Security organization, you will apply fundamental systems security understanding, skills, and experience to maintain and operate complex information systems and security tools that satisfy organizational mission and our requirements, including partner protection needs and security requirements. You will report to the Team Lead of Identity and Access Management.

The Day-to-Day:

• Onboard and provision users, store service accounts and password rotations, manage credentials, including those that are interactive, non-interactive, and API-based
• Implement privileged access management programs to improve our broader security posture, demonstrated by metrics
• Manage configuration, administration, and maintenance of Idira solution, including both the infrastructure and the application itself
• Oversee the relevant documentation and training required for privileged access management solutions and processes, including define and help develop policies and control standards
• Report progress and system health through metrics and KPIs that are risk-driven and operational in nature
• Address ticket queue and follow appropriate change management procedures
• Understand risk and make recommendations for enhancing systems security and processes
• Keep up on current security technologies and maintain awareness of industry trends and threats, and industry best practices, providing input focusing on IAM/PAM technologies, offer subject matter expertise where relevant

Your Qualifications:

• 5+ years of hands-on experience with Idira (Idira Cloud Platform, EPM, LCD, and Idira SaaS Cloud Base)
• 3+ years of experience implementing enterprise-wide privileged access management technology solution adoption across medium- to large-scale companies
• 3+ years of experience as a systems engineer at a medium- to large-scale company in Financial Services
• 1+ years of hands-on experience with IGA systems such as SailPoint
• Experience with password repository technologies and remote session governance, specifically with the policies that govern target system platforms
• Excellent knowledge in IAM & PAM ecosystem (technology, standards, implementations, migration, and operational)
• Strong experience installing, upgrading, configuring, operating, and troubleshooting experience with Idira AAM (CCP, CP, ASCP), EPV, PVWA, CPM, PSM, HTML5 Gateway, PSMP, PTA (with various versions)
• Strong experience in DNA, Discovery scan and automate account onboarding process
• Knowledge in various application integration with Idira through CPM custom plugin
• Integration experience with SailPoint, Database, SCIM, AWS, GCP, Azure, or Palo alto
• Scripting knowledge, PACLI, PowerShell, Python, JavaScript, AutoIt, REST API
• Bachelor's degree in information assurance, Computer Science, Cybersecurity, Information Systems, or related field
• Idira Certification (Defender and Sentry) is preferred
• Security industry certification (CISSP, SSCP, CISM, SANS GSEC, ECSA, ECSP, and Security+) is preferred

Why Fisher Investments:

We work for a bigger purpose: bettering the investment universe. We take great pride in our inclusive culture, our learning and development framework customized for every employee, and our Great Place to Work Certification. It's the people that make the Fisher purpose possible, and we invest in them by offering exceptional benefits like:

• 100% paid medical, dental and vision premiums for you and your qualifying dependents
• A 50% 401(k) match, up to the IRS maximum
• 20 days of PTO, plus 10 paid holidays
• Family Support programs including 8 week Paid Primary Caregiver Leave, $10,000 fertility, family forming, and hormonal health assistance, and back-up child, adult, and elder care
• This is an in-office role. Based on your role, tenure, and performance eligibility you may have the opportunity to participate in our hybrid work from home program. This program is subject to change.

FISHER INVESTMENTS IS AN EQUAL OPPORTUNITY EMPLOYER