Identity and Access Management Administrator

BlueCross BlueShield of Tennessee; United States; Remote; USD 80,000 - 110,000; Full time

Job summary

BlueCross BlueShield of Tennessee is hiring an Identity & Access Management Administrator to join the IAM team. The role covers day-to-day IAM operations, including initial ticket triage, user access administration, AD administration, and Facets support.

Strong candidates will have 2 years in Information Security/IT, plus knowledge of ABAC/RBAC, and scripting (PowerShell, VBScript). The position is remote with final on-site interviews in Chattanooga, TN; periodic on-call rotation applies.

Qualifications

• Bachelor’s Degree in a Computer Sciences or Information Systems related field or equivalent work experience.
• 2 years - Experience in Information Security and/or IT related experience required.
• Preferred experience with Windows scripting and automation methodology (PowerShell, VBScript, Perl, Batch programming).

Responsibilities

• Administers access by creating, modifying, and deleting profiles, groups, and roles to ensure secure access of organizational systems, as part of a rotating on-call schedule.
• Creates/Maintains IAM process documentation and reviews processes for improvement.
• Meets service level agreements (SLAs) and ensures compliance with corporate security standards.
• Assists in performing periodic access reviews, inactivity reviews, and manual compliance/validation of tasks.

Skills

IAM concepts

Active Directory

ABAC RBAC

Analytical skills

Troubleshooting

PowerShell scripting

Windows scripting

Security basics

Education

Bachelor's degree in CS/IS

Tools

PowerShell

VBScript

Perl

Job description

We are hiring an Identity & Access Management Administrator to join the Identity & Access Management (IAM) team!

In this role, you will support day-to-day IAM operations, including initial ticket triage, user access administration, operational tasks, and Active Directory administration , while providing support for Facets access management. You will help ensure users have secure and appropriate access to enterprise systems and applications while supporting established security, compliance, and identity governance practices. As you develop in the role, you will have the opportunity to build deeper expertise in Facets security administration and grow into a subject matter expert.

To be successful in this role, in addition to the core job requirements, you’ll bring strong organizational and analytical skills, initiative, and the ability to learn independently and take on increasingly complex responsibilities. Strong candidates may bring end-user experience with Facets and an understanding of healthcare operations such as claims processing and related workflows. Advanced Facets experience, Facets security administration experience, and hands-on Active Directory experience beyond basic familiarity are preferred. Candidates with strong business or operational backgrounds and significant end-user system expertise who are motivated to develop their IAM technical skills are also encouraged to apply.

Note:

• This is a remote, work-from-home position, but the final round of interviews will take place on-site in our Chattanooga, TN office.
• Periodic weekly on-call rotation is required.
• Sponsorship is not available for this role.

Job Responsibilities

• Administers access by creating, modifying, and deleting profiles, groups, and roles to ensure secure access of organizational systems, participating and/or assisting other team members in a rotating on-call schedule to promptly resolve high-priority issues that surface outside of normal business hours.
• Creates/Maintains IAM process documentation. Reviews processes for improvement/efficiencies.
• Meeting service level agreements (SLAs) according to established turn-around times, ensuring compliance with corporate security standards and policies.
• Assist in performing periodic access reviews, inactivity reviews, and manual compliance/validation of tasks/activities, responding to customer requests and inquiries concerning applications/systems and providing guidance and/or resolution.
• Employees may be required to participate in a weekly on-call rotation.

Job Qualifications

Education

• Bachelor’s Degree in a Computer Sciences or Information Systems related field or equivalent work experience.

Experience

• 2 years - Experience in Information Security and/or IT related experience required.
• Preferred experience with Windows scripting and automation methodology (PowerShell, VBScript, Perl, Batch programming).

Skills\Certifications

• Proficient in Microsoft Office (Outlook, Word, Excel and PowerPoint)
• Proven analytical and problem-solving skills and ability to perform non-routine analytical tasks
• Proven ability toward analyzing cross system accesses and troubleshooting access requirements.
• Understanding of Identity and Access Management solutions.
• Understanding of Microsoft Active Directory implementation, maintenance, and support for a large-scale environment.
• Understanding of IAM systems, attribute-based security, role-based security and common connections to applications and systems for a centralized Identity solution.
• Understanding of a password vault and assistance in ensuring new service accounts are placed in the centralized repository with proper password rotation settings in place.
• Understanding of troubleshooting approaches, including knowledge of underlying security tools, networking, server, application, and cloud concepts.
• Proven ability to organize and distribute access through ABAC and RBAC methods.
• Understanding of tables and columns to identify needed data for an Identity and Access Management provisioning system.
• Demonstrated ability to interpret and translate technical and/or or complex concepts into information meaningful to IAM team members and/or business personnel.
• Ability to work independently with minimal supervision or function in a team environment sharing responsibility, roles, and accountability.
• Understanding of Projects regarding estimates, planning, and deliverables.
• Preferred understanding of APIs, databases, and file connections for application connections.
• Preferred understanding of configuring SSO and step-up authentication to support authorization, including federation services.

Number of Openings Available

1

Worker Type:

Employee

Company:

BCBST BlueCross BlueShield of Tennessee, Inc.

Applying for this job indicates your acknowledgement and understanding of the following statements:

BCBST will recruit, hire, train and promote individuals in all job classifications without regard to race, religion, color, age, sex, national origin, citizenship, pregnancy, veteran status, sexual orientation, physical or mental disability, gender identity, or any other characteristic protected by applicable law.

Further information regarding BCBST’s EEO Policies/Notices may be found by reviewing the following page:

BCBST’s EEO Policies/Notices

BlueCross BlueShield of Tennessee is not accepting unsolicited assistance from search firms for this employment opportunity. All resumes submitted by search firms to any employee at BlueCross BlueShield of Tennessee via-email, the Internet or any other method without a valid, written Direct Placement Agreement in place for this position from BlueCross BlueShield of Tennessee HR/Talent Acquisition will not be considered. No fee will be paid in the event the applicant is hired by BlueCross BlueShield of Tennessee as a result of the referral or through other means.