Security Specialist - Senior

aep; Columbus (OH); Presencial; USD 110.000 - 150.000; Jornada completa

Descripción de la vacante

The Security Specialist - Identity and Access Management at American Electric Power supports the delivery of IAM capabilities across the enterprise. You will serve as an IAM SME and collaborate with partners, security teams, architects, and developers to ensure secure, compliant identity practices throughout the lifecycle.

You will gather requirements, evaluate solutions, support operations, and contribute to IAM modernization initiatives including role-based access control, privileged access

Formación

• Experience designing and delivering IAM capabilities across large enterprises.
• Knowledge of RBAC, PAM, identity governance and cloud identity.
• Ability to document requirements and translate them into technical solutions.

Responsabilidades

• Participate in design, implementation, enhancement, and support of IAM technologies.
• Analyze requirements and recommend IAM solutions aligned with security objectives.
• Support access provisioning, certifications, and entitlement reviews.
• Contribute to governance, risk, and compliance activities for IAM.
• Develop runbooks and documentation to improve IAM operations.
• Collaborate with partners, security teams, and developers across environments.

Conocimientos

IAM Strategy

RBAC

Privileged Access

Cloud Identity

Documentation

Herramientas

Microsoft Entra ID

Descripción del empleo

Job Summary

The Security Specialist - Identity & Access Management (IAM) is responsible for supporting and delivering Identity and Access Management capabilities across the enterprise. This position serves as an IAM Subject Matter Expert (SME) and participates in the analysis, design, implementation, support, governance, and continuous improvement of IAM processes and solutions.

The role works closely with business partners, security teams, architects, developers, auditors, and technology teams to ensure secure, compliant, and efficient access management practices are implemented throughout the identity lifecycle. Responsibilities include gathering and documenting requirements, evaluating technical and functional solutions, assessing risks and controls, supporting IAM operations, and contributing to IAM strategy and modernization initiatives.

The successful candidate possesses strong communication, analytical, problem-solving, documentation, and relationship management skills. This individual must be capable of translating business requirements into technical solutions while balancing security, usability, compliance, and operational efficiency.

Job Description

What You'll Do:

Essential Job Functions & Tasks:

IAM Strategy & Solution Delivery

• Participate in the design, implementation, enhancement, and support of IAM technologies and processes.
• Analyze business and technical requirements and recommend IAM solutions aligned with enterprise security objectives.
• Evaluate functional and technical options, document recommendations, and support strategic decision-making.
• Contribute to IAM modernization initiatives including role-based access control, privileged access governance, identity hygiene, and non-human identity management.
• Assist in developing IAM roadmaps, standards, and best practices.

Identity Governance & Administration

• Support access requests, approval, provisioning, de-provisioning, and reconciliation processes.
• Assist with access certifications, entitlement reviews, and attestation activities.
• Support role engineering, role mining, and RBAC implementation efforts.
• Validate access models and entitlement structures to ensure least privilege principles are maintained.
• Identify segregation of duties conflicts and access risks.

Privileged Access Management

• Support governance and lifecycle management of privileged accounts and privileged access.
• Participate in onboarding, monitoring, and auditing privileged identities.
• Partner with technology teams to improve privileged access controls and reduce standing privileges.

Non-Human Identity Governance

• Support lifecycle management of service accounts, application accounts, APIs, and other non-human identities.
• Assist in establishing accountability, ownership, certification, and governance requirements.
• Evaluate orphaned or unmanaged identities and recommend remediation actions.
• Support controls related to secrets, certificates, and machine credentials.

Cloud & Hybrid Identity

• Assist in managing and supporting cloud identity capabilities including Microsoft Entra ID.
• Partner with infrastructure and application teams to integrate cloud and on-premises identity services.

Analysis, Documentation & Process Improvement

• Elicit, analyze, and document business, functional, technical, and security requirements.
• Develop process flows, data mappings, architecture diagrams, use cases, and operational documentation.
• Analyze business processes and identify opportunities for standardization, automation, and optimization.
• Develop status reports, executive summaries, operational metrics, and project documentation.

IAM Automation & Integration

• Develop or assist with automation, reporting, scripting, and process improvements where appropriate.
• Collaborate with development teams to ensure IAM requirements are incorporated into solution designs.

Security Governance, Risk & Compliance

• Support audits, assessments, regulatory reviews, and compliance initiatives.
• Participate in the development and maintenance of IAM policies, standards, procedures, and control documentation.
• Evaluate IAM-related risks and recommend mitigation strategies.
• Assist in gathering control evidence and supporting internal and external audits.

IAM Operations & Continuous Improvement

• Assist in troubleshooting identity and access management issues.
• Participate in incident, problem, and root cause analysis activities.
• Develop and maintain operational runbooks and support documentation.
• Identify opportunities to enhance IAM service quality, operational efficiency, and user experience.

Stakeholder & Team Collaboration

• Work closely with business partners, security teams, architects, developers, auditors, and vendors.
• Communicate complex IAM concepts to both technical and non-technical audiences.
• Mentor junior team members and share IAM knowledge across teams.
• Foster productive working relationshi