Identity and Access Management Administrator

BlueCross BlueShield of Tennessee, Inc.; Chattanooga (TN); À distance; USD 70 000 - 100 000; Plein temps

Résumé du poste

BlueCross BlueShield of Tennessee, Inc. is seeking an Identity & Access Management Administrator to support day-to-day IAM operations, including initial ticket triage, user access administration, and AD administration.

The role involves supporting Facets access management and ensuring secure access to enterprise systems. The ideal candidate will bring knowledge of IAM concepts, strong analytical skills, and the ability to learn independently.

Qualifications

• Bachelor's degree in Computer Science or Information Systems or equivalent
• At least 2 years of information security or IT experience
• Experience with Windows scripting and automation
• Understanding of IAM concepts, AD, and secure access management
• Ability to work independently and in a team, including on-call rotation

Responsabilités

• Administers access by creating, modifying, and deleting profiles, groups, and roles to ensure secure access
• Participates in rotating on-call schedule to resolve high-priority issues outside normal hours
• Creates and maintains IAM process documentation
• Supports Facets access management and Active Directory administration
• Meets SLAs and performs periodic access reviews and compliance tasks

Connaissances

Identity & Access Management

Active Directory

PowerShell

ABAC

RBAC

Analytical thinking

Troubleshooting

Documentation

Formation

Bachelor's degree in Computer Science or Information Systems

2+ years information security/IT experience

Outils

PowerShell

VBScript

Perl

Batch scripting

AD tooling

Description du poste

We are hiring an **Identity & Access Management Administrator** to join the Identity & Access Management (IAM) team! In this role, you will support day-to-day IAM operations, including **initial ticket triage, user access administration, operational tasks, and Active Directory administration**, while providing support for Facets access management. You will help ensure users have secure and appropriate access to enterprise systems and applications while supporting established security, compliance, and identity governance practices. As you develop in the role, you will have the opportunity to build deeper expertise in Facets security administration and grow into a subject matter expert. To be successful in this role, in addition to the core job requirements, you'll bring **strong organizational and analytical skills, initiative, and the ability to learn independently and take on increasingly complex responsibilities**. Strong candidates may bring end-user experience with Facets and an understanding of healthcare operations such as claims processing and related workflows. Advanced Facets experience, Facets security administration experience, and hands-on Active Directory experience beyond basic familiarity are preferred. Candidates with strong business or operational backgrounds and significant end-user system expertise who are motivated to develop their IAM technical skills are also encouraged to apply. **Note:*** This is a remote, work-from-home position, but the final round of interviews will take place on-site in our Chattanooga, TN office.* Periodic weekly on-call rotation is required.* Sponsorship is not available for this role. **Job Responsibilities*** Administers access by creating, modifying, and deleting profiles, groups, and roles to ensure secure access of organizational systems, participating and/or assisting other team members in a rotating on-call schedule to promptly resolve high-priority issues that surface outside of normal business hours.* Creates/Maintains IAM process documentation. Reviews processes for improvement/efficiencies.* Meeting service level agreements (SLAs) according to established turn-around times, ensuring compliance with corporate security standards and policies.* Assist in performing periodic access reviews, inactivity reviews, and manual compliance/validation of tasks/activities, responding to customer requests and inquiries concerning applications/systems and providing guidance and/or resolution.* Employees may be required to participate in a weekly on-call rotation.**Job Qualifications***Education** Bachelor's Degree in a Computer Sciences or Information Systems related field or equivalent work experience.*Experience** 2 years - Experience in Information Security and/or IT related experience required.* Preferred experience with Windows scripting and automation methodology (PowerShell, VBScript, Perl, Batch programming).*Skills\\Certifications** Proficient in Microsoft Office (Outlook, Word, Excel and PowerPoint)* Proven analytical and problem-solving skills and ability to perform non-routine analytical tasks* Proven ability toward analyzing cross system accesses and troubleshooting access requirements.* Understanding of Identity and Access Management solutions.* Understanding of Microsoft Active Directory implementation, maintenance, and support for a large-scale environment.* Understanding of IAM systems, attribute-based security, role-based security and common connections to applications and systems for a centralized Identity solution.* Understanding of a password vault and assistance in ensuring new service accounts are placed in the centralized repository with proper password rotation settings in place.* Understanding of troubleshooting approaches, including knowledge of underlying security tools, networking, server, application, and cloud concepts.* Proven ability to organize and distribute access through ABAC and RBAC methods.* Understanding of tables and columns to identify needed data for an Identity and Access Management provisioning system.* Demonstrated ability to interpret and translate technical and/or or complex concepts into information meaningful to IAM team members and/or business personnel.* Ability to work independently with minimal supervision or function in a team environment sharing responsibility, roles, and accountability.* Understanding of Projects regarding estimates, planning, and deliverables.* Preferred understanding of APIs, databases, and file connections for application connections.* Preferred understanding of configuring SSO and step-up authentication to support authorization, including federation services.