IT Security Specialist-Identity and Access Management (REF#ISP 10003)

Mican Technologies Inc.; Northern (KY); On-site; USD 80,000 - 110,000; Full time

Job summary

Mican Technologies is seeking an IT Security Specialist focusing on Identity and Access Management. This fully remote position requires strong expertise in managing access to applications and data, alongside a Bachelor's degree in Computer Science or related field. With responsibilities that range from evaluating access procedures to conducting audits and developing training materials, candidates must demonstrate advanced proficiency with relevant security tools and practices. A minimum of 4 years' experience in IT Security is necessary.

Qualifications

• 4+ years’ experience in IT Security or a related field.
• Advanced understanding of Information Security concepts and industry best practices.
• Demonstrated expertise with security management tools.

Responsibilities

• Evaluate and maintain access procedures for users.
• Design and implement security roles and processes.
• Provisions user security roles across various systems.
• Conduct audits to ensure compliance with security policies.
• Develop communications and training content on security.

Skills

Identity and Access Management experience

RBAC (role-based access controls)

Advanced proficiency with Active Directory

Windows security tools

UNIX/Linux security

Database security

Analytical thinking

Problem solving

Communication skills

Education

Bachelor’s degree in Computer Science or related field

Tools

RACF

TSO

Active Directory

Windows tools (Word, Excel, etc.)

LDAP

Security management tools

SQL

Oracle

Job description

IT Security Specialist-Identity and Access Management

Location: Fully Remote East Coast Hours

The IT Security Specialist is accountable for critical activities that ensure all users in the organization have the appropriate levels of access to applications, systems and data resources. They evaluate and maintain procedures to safeguard information systems assets from intentional or inadvertent access or destruction.

This particular role will be designing, documenting, implementing, integrating and training new processes to securely provision role based access to the minimum necessary applications, systems and data needed to perform each role.

Key Responsibilities

• Performs a role in promotion of security awareness programs, assessing gaps and implementing solutions.
• Responsible for the end-to-end completion of security requests.
• Provisions user security roles and manages security groups across systems, platforms, databases, applications, servers, directories and folders.
• Analyzes existing role structures to improve and streamline structures, security administration and improve end-user experience.
• Responsible for highly sensitive security access for outsourced vendors and ensuring compliance with policy, regulations, and contractual requirements.
• Accountable for highly sensitive emergency processes.
• Creates or maintains application scripts and uses application specific tools to create or manage application security.
• Plans, coordinates, communicates, tests and implements audits ensuring that access entitlements are appropriate for job requirements.
• Maintains and creates operational procedures and maintains Security Knowledge Base.
• Provides subject matter expertise, leadership and guidance to work teams and end users on security policies, standards and procedures and processes.
• Investigates business processes to understand and implement security requirements weighing business needs and security risks and resolving issues.
• Researches solutions, works with vendors to enhance Security Monitoring Program.
• Develops training content as needed.

Preferred Qualifications

• Identity and Access Management experience

Job Requirements

• This position requires a Bachelor’s degree or foreign academic equivalent in Computer Science, Information Technology, Electrical/Electronics Engineering, CIS, MIS, or a related field.
• Must be willing to work 40 hours per week.
• 4+ years’ experience in IT Security or equivalent combination of transferable experience and education.
• Advanced understanding of RBAC (role-based access controls), the principle of least privilege, the HIPAA standard of Minimum Necessary and the internal Segregation of Duties.
• Advanced understanding of Information Security concepts, protocols, industry best practices, and regulatory requirements.
• Advanced proficiency with RACF, TSO and tools used to administer security on the mainframe.
• Advanced proficiency with Active Directory groups and user accounts, Windows folder structures and folder security.
• Proficiency with Windows skills such as Windows Explorer, Word, Excel, PowerPoint, Outlook, etc.
• Advanced proficiency with UNIX/Linux security and tools used to administer security in these environments.
• Advanced proficiency with LDAP groups and user accounts and tools used to administer security in this environment.
• Advanced proficiency with database security and tools used to administer security within the various databases, e.g., UDB, DB2, SQL and Oracle.
• Demonstrated expertise with security management tools and advanced security knowledge of the organization's existing platforms.
• In-depth knowledge of Information Technology field and computer systems.
• Demonstrated analytical thinking, problem solving, quantitative analysis ability, organizational skills, change management, collaboration skills.
• High critical thinking skills to evaluate alternatives and present solutions that are consistent with business objectives and strategy.
• Ability to communicate technical information clearly and articulately.
• Must have an understanding of the systems development life cycle.