Identity & Access Management Engineer II CIAM Focused

Davita Inc.; Miami Lakes (FL); On-site; USD 100,000 - 130,000; Full time

Job summary

A leading company in financial services is seeking an experienced Identity & Access Management Engineer. The role involves engineering IAM technologies, ensuring compliance with security regulations, and optimizing access management solutions. The ideal candidate will have a strong technical background in IAM tools and cloud technologies and the ability to collaborate with cross-functional teams.

Qualifications

• 5 years experience in Identity and Access Management.
• 3 years experience with Ping-Forge Rock/Okta integrations.
• 2 years Cloud IAM experience in AWS/Azure.

Responsibilities

• Work with business units for requirement gathering and implementation.
• Design and manage Identity Directory and services.
• Troubleshoot identity and access issues.

Skills

Identity & Access Management

Information Security

Cloud IAM

Problem-solving

Automation

Education

Bachelor's Degree in Information Technology

Tools

Ping-Forge Rock

Okta

Auth0

SailPoint

Job description

SUMMARY: The Identity & Access Management Engineer is a hands-on role focused on engineering within the Identity & Access Management (IAM) space. The engineer will work directly with the IAM Architect, other IAM internal and vendor engineers, as well as Operational team resources through collaboration to implement and continuously optimize Identity and Access Management services in line with evolving technologies and security regulations. The Identity & Access Management (IAM) Engineer is a technical position which will support the implementation of security strategies as it relates to the Bank's cloud initiatives. The Identity & Access Management Engineer is responsible for understanding business processes and capturing requirements but also engineering, implementing, and maintaining IAM technologies to ensure audit and privacy compliance, driving automation wherever possible. Hands on implementation experience is a requirement of this role as well at deep technical knowledge of IAM tools. The IAM Engineer must have the ability to install and configure requisite IAM toolsets and in so doing will require knowledge across multiple platforms, processes and/or architectures. The IAM Engineer role requires IT consulting skills and the ability to act as a trusted advisor and a trusted technical member of the team. The individual should possess IAM skills across key access management, identity governance, privileged identity management, and cloud identity tools with the ability to quickly learn the key points of other IAM product suites both cloud-based and self-hosted.

ESSENTIAL DUTIES AND RESPONSIBILITIES include the following. Other duties and special projects may be assigned.

• Working closely with business units to ensure business requirements and use cases are capture and well understood while adhering to access management program guidelines and bank security policies.


• Participating in the requirement gathering of an IAM technical vision that can be articulated across functional groups, aligned with IAM principles.


• Designing, implementing, and managing Identity Directory and identity services.


• Engineering and Implementing technologies to centrally integrate identity systems across the organization.


• Streamlining and improving users' experiences.


• Managing access controls and permissions where necessary and implementing automated solutions.


• Troubleshooting and managing issues related to identities, systems access accounts, authentication, authorization, entitlements, and permissions.


• Implementing and maintaining technologies to ensure audit and privacy compliance.


• Strong problem-solving attitude and technical skillset.


• Adheres to and complies with applicable, federal and state laws, regulations and guidance, including those related to anti-money laundering (i.e. Bank Secrecy Act, US PATRIOT Act, etc.).


• Adheres to Bank policies and procedures and completes required training.


• Identifies and reports suspicious activity.

EDUCATION

Bachelor's Degree in Information Technology or related fields or comparable experience in, Computer Information Systems, and/or Engineering with the appropriate emphasis in Identity & Access Management required

EXPERIENCE

• 5 years of experience in Identity and Access Management, and Information Security


• 3 years of experience in Ping-Forge Rock/Entra/Okta/Auth0 Integrations, SAML, OAuth, OIDC, Kerberos, MFA, PKI, PAM


• 3 years of Customer IAM integration experience and support


• 2 years of Cloud IAM experience in AWS/Azure with strong understanding of IaaS, PaaS, IDaaS engineering and components


• SailPoint IDN implementation experience

CERTIFICATES, LICENSES, REGISTRATIONS

• Certifications relevant to AWS and cloud technologies (Solutions Architect, SysOps Administrator, DevOps Engineer) preferred


• Security cert: CISSP, Security+, CIAM, etc. preferred


• IAM Platform specific cert: Entra/Azure, Okta, etc. preferred

KNOWLEDGE, SKILLS AND ABILITIES

• Sound judgment and ability to effectively balance information risk controls with business productivity and growth.


• Development skills: SDLC and Pipeline automation (Javascript, Beanshell, NodeJS, XML, Powershell, HTML, JSON, API development/integrations, etc.)


• Ability to articulate, gather, drive conversations, and document requirements.


• Strong interpersonal skills.