Lead IAM Security Engineer

Strategic Staffing Solutions; Town of Florida (NY); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Relocation bonus

Excellent benefits package

Job summary

Strategic Staffing Solutions is seeking an IAM engineer to lead the design and implementation of Identity and Access Management solutions in a complex enterprise environment. The role focuses on policy development, role-based access controls, and governance across multiple systems with collaboration across Cyber Security, HR, and business units.

Ideal candidates will have hands-on IAM configuration experience, strong RBAC expertise, and the ability to integrate IAM with diverse directories and

Qualifications

• Hands-on configuration expertise in IAM/IAG platforms.
• Strong understanding of RBAC and access control concepts.
• Experience designing RBAC to positions in org structure.
• Ability to integrate IAM with various applications and directories.
• Audit, compliance and regulatory experience (SOX, PII) preferable.

Responsibilities

• Lead IAM strategy roadmap aligned with business goals.
• Design and implement access control policies and least privilege.
• Develop and manage IGA processes (RBAC, certification, reviews).
• Deploy and manage SSO solutions across systems.
• Collaborate with security, HR, RPA, and LoBs; provide SME input.
• Monitor and respond to security incidents related to IAM.

Skills

RBAC design & assignment

Identity lifecycle management

IAM tooling scripting

Position-based security

Reporting & privileges

GRC & SOX awareness

SAP portal security

Compliance frameworks (NERC, CIP, SOX)

Job description

Competitive Salary + excellent benefits package, relocation bonus

Role Summary

Primary focus: Saviynt IGA (SailPoint is acceptable in lieu of Saviynt although Saviynt is preferred.

Candidate must bring hands on configuration expertise.

PRIMARY DUTIES AND RESPONSIBILITIES

• Lead, develop and maintain a strategic roadmap for Identity and Access Management (IAM) aligned with both business and technological objectives. Collaborate closely with teams including Cyber Security, Human Resources, RPA, and Lines of Business (LoBs) to create efficient and user-friendly IAM solutions.
• Lead, design, and implement access control policies and authorization mechanisms to govern user access to systems, applications, and data. Enforce the principle of least privilege to minimize security risks.
• Design, Implement and maintain IGA processes, including role-based access control (RBAC), certification, and compliance monitoring. Conduct regular access reviews and audits to ensure compliance with policies and regulations.
• Enforce security policies related to authentication, password management, and session management. Monitor, respond to security incidents related to unauthorized access attempts and troubleshoot the incidents.
• Serve as Subject Matter Expert (SME) for audit, compliance, and regulatory efforts pertaining to IAM, SOX, and PII through investigating, documenting, and reporting to management.
• Deploy and manage SSO solutions to enhance user convenience while maintaining security. Integrate applications to enable seamless and secure authentication across multiple systems.
• Effectively collaborate with both Technical and Non-technical business owners, highlighting strong interpersonal skills. Actively seek opportunities to optimize the use of IAM toolsets and processes in support of business goals and provide innovative ideas.

Required:

• Proficient understanding of RBAC roles, including their assignment, coupled with a practical grasp of authorization object concepts.
• Advanced/Expert knowledge of the identity lifecycle management by designing workflows for user onboarding, offboarding and changes.
• Advanced/Expert understanding of Developing scripts, connectors, or custom code to enhance IAM functionality and address specific requirements.
• Advanced Knowledge of position based security and how roles are assigned to positions on the org structure. This includes advanced troubleshooting of access issues related to position-based security
• Advanced/Expert knowledge of the use of reporting tools and privileges concepts
• Advance knowledge of Customizing IAM solutions to align with specific business needs and processes and Integrate IAM systems with other applications, directories, and platforms.
• Advanced knowledge of Reporting tool security as it relates to securing access to various reports, applications, connections, WEBI's, performing certain functions within certain related objects along with creating users.
• Advanced knowledge of the SAP portal architecture and user administration and how it handled through portal frontend along with troubleshooting knowledge of said architecture. Perform SAP security and authorizations duties, including Portal Roles, Single-Sign-On, Directory services, and securing Internet Transaction Server / web services
• Advanced knowledge of established system security control policies as it relates to GRC. Ability to analyze application authorization/privileges assignments and segregation of duties (SOD) conflicts, works with internal audit and compliance teams to resolved identified violations. Functional knowledge and implementation experience of GRC Access Control
• Working knowledge of the processes that ensure compliance with NERC, CIP, SOX, NIST and PCI