Security Analyst - Identity and Access Management

Crowell & Moring; United States; Remote; USD 76,000 - 120,000; Full time

Benefits offered by this job

Healthcare

Vision

Dental

Retirement

Paid leave

Back-up childcare

Wellness programs

Cultural events

Social activities

Job summary

Crowell & Moring LLP is seeking a Security Analyst specialized in Identity and Access Management (IAM) to maintain the firm's IAM platform, including SSO, MFA, and federation technologies. The role supports appropriate access across data and applications and stays current with identity threats and automation.

Qualified candidates will have a Bachelor’s degree or equivalent, 4+ years of related experience, and certifications such as SC-300, CISSP, or GIAC are a plus.

Qualifications

• SAML, SSO, OAuth, OpenID and related identity technologies.
• Understanding of AD/LDAP/Kerberos, RADIUS, PKI.
• Familiarity with Microsoft identity products such as Entra ID and Defender for Identity.
• Knowledge of MFA technologies per NIST 800-63 R4.

Responsibilities

• Manage the IAM system including Enterprise Applications, federations, certificates, IdP.
• Maintain and validate MFA systems.
• Integrate external apps with the identity system using OAuth, SAML, OpenID.
• Coordinate Join/Move/Leave processes for employee, Partner, and third-party identities.
• Maintain Identity sources including Active Directory, Microsoft Entra ID, and AD FS.
• Manage federation and replication technologies such as Entra ID Connect.
• Maintain PKI systems including certificate templates, issuance policies, automation, security, and revocation.
• Complete special projects and other duties as assigned.

Skills

Identity technologies

SAML

SSO

OAuth

OpenID

MFA

Windows AD

Entra ID

AD FS

Security basics

Education

Bachelor’s degree in CS/MIS or cert

4 years of related experience

Tools

Active Directory

Microsoft Entra ID

AD FS

Entra ID Connect

Job description

Crowell & Moring LLP is an international law firm with offices in the United States, Europe, MENA, and Asia that represents clients in litigation and arbitration, regulatory and policy, intellectual property, and transactional and corporate matters. The firm is internationally recognized for representing Fortune 500 companies in high-stakes litigation and government-facing matters, as well as its ongoing commitment to pro bono service and diversity, equity, and inclusion. At Crowell & Moring, exceptional client service begins with exceptional people. We are committed to delivering responsive, high-quality, and professional service to our clients and to one another, while continuously elevating standards of excellence across every aspect of our work.

Job Summary

The Security Analyst specializes in Identity and Access Management (IAM) technologies and applications including Single Sign-On (SSO), federation, permissions, authorizations, and identity management. The Security Analyst maintains the Firm’s IAM platform and related systems and works with Security Services management and others in the Firm to ensure the right people have appropriate access to data and applications at the right time. The Security Analyst is responsible for keeping up-to-date with current identity technologies, threats, vulnerabilities, and automation and participates in projects implementing, upgrading, and modifying identity systems.

Job Responsibilities

• Under general supervision the Security Analyst manages the IAM system including Enterprise Applications, federations, certificates, Identity Provider (IdP).
• Maintains and validates the Firm’s Multifactor Authentication (MFA) systems.
• Integrates external applications with the Firm’s identity system using OAUTH, SAML, OpenID or other appropriate technology
• Coordinates with Human Resources, Finance, and others to automate as much as possible the Join/Move/Leave process for employee, Partner, and third-party identities.
• Maintains and manages the Firm’s sources of Identity, including Active Directory, Microsoft Entra ID, and Active Directory Federation Systems (AD FS)
• Manages federation and replication technologies such as Entra ID Connect.
• Maintains the Firm’s Public Key Infrastructure (PKI) systems including certificate templates, issuance policies, automation, security, and revocation.
• Completes special projects and other duties as assigned

Knowledge, Skills and Abilities

• Knowledge of Identity technologies and systems including Security Assertion Markup Language (SAML), Single Sign On (SSO), and related technologies such as OAUTH, OpenID.
• Understanding of directory and authentication technologies such as Active Directory (AD), lightweight directory access protocol (LDAP), Kerberos, RADIUS, and Public Key Infrastructure (PKI)
• Understanding of Microsoft identity products such as Entra ID, Conditional Access, Defender for Identity, and Enterprise Applications
• Understanding of multifactor technologies and platforms, including NIST 800-63 R4 approved methods.
• Ability to work overtime as needed.

Education

The position requires a Bachelor’s Degree, preferably in Computer Science/MIS or equivalent certification from an accredited technical training school. Four years of progressive experience may substitute for education.

Certification

Microsoft SC-300 or related Identity and Access, Azure, or Entra certifications. CISSP or GIAC certifications are a plus

Experience

The position requires a minimum of four (4) years of increasingly responsible, directly related experience during which knowledge, skills and abilities applicable to the position were demonstrated.

Pay Range

$76,000 - $120,000 Other US Locations

Our Firm is committed to fair and equitable compensation practice in accordance with applicable laws. Additional compensation may include a discretionary bonus. The salary for this position may vary based on location, market data, an applicant’s skills and prior experience, certain degrees and certifications, and other factors.

Crowell & Moring LLP offers a competitive compensation and comprehensive benefits package. Our benefits include healthcare, vision, dental, retirement, and all-purpose leave and progressive optionssuch as back up childcare, wellness programs, cultural events and social activities. We take great pride in our positive, friendly culture that rewards hard work and success, at the same time recognizing the importance of family and community service.

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

U.S. Privacy Notice: https://www.crowell.com/en/US-Candidate-Privacy-Notice

U.K. Privacy Notice: https://www.crowell.com/en/UK-GDPR-Candidate-Privacy-Notice

EOE m/f/d/v
Crowell & Moring LLP participates in the E-Verify program.