IAM Analyst I

This is a fully remote position, open to applicants in United States.

📋 Description

• Engage in the planning and design of enterprise security architecture with an emphasis on Identity and Access Management.

• Develop enterprise IAM security policies, standards, baselines, guidelines, and procedures.

• Take part in the planning and design of business continuity and disaster recovery strategies.

• Create and implement access controls, authorization rules, and role-based access policies.

• Design and execute role-based access policies utilizing Okta, AWS, Azure, GCP, and Microsoft AD.

• Keep abreast of the latest developments in cybersecurity and IAM security solutions, processes, attack methods, and threat vectors.

• Suggest IAM security solutions and improvements.

• Deploy, integrate, and configure new and upgraded security solutions.

• Collaborate with application owners and leadership to deploy, govern, and enhance identity services.

• Maintain security baselines in accordance with CIS and CSA frameworks.

• Ensure operational configurations align with established baselines and industry best practices.

• Monitor existing security solutions to ensure efficient and proper functioning.

• Analyze device logs and reports, interpret activities, and formulate resolution strategies.

• Address tickets related to security issues, vulnerabilities, and end-user concerns.

• Participate in investigations concerning suspicious activities.

• Engage in vulnerability assessments, penetration tests, and security audits.

• Provide on-call support for end users and IAM security solutions.

• Collaborate with AppDev to identify and mitigate application vulnerabilities.

• Review and process access requests from employees and departments for policy compliance.

• Configure, maintain, and optimize IAM systems and associated tools.

• Enforce access-control policies and ensure appropriate user access levels.

• Manage user onboarding, role modifications, offboarding, provisioning, and de-provisioning processes.

• Review and audit IAM logs, documenting compliance, tracking, and incident reporting.

• Carry out additional responsibilities as assigned.

⛳️ Requirements

• A college diploma or university degree in Cybersecurity or another computer technology field, and/or two years of equivalent professional experience.

• One or more of the following certifications, or the ability to obtain them within a specified timeframe after starting employment: CompTIA Security+, GIAC Information Security Fundamentals, Okta Certified Professional, AWS Certified Security - Specialty, Microsoft Certified Systems Administrator: Security, Associate of (ISC)² or CISSP, ISACA CISA or CISM.

• At least 2 years of experience in an Identity Access Management role.

• A minimum of 1 year of experience with network, server, and data storage security technologies is recommended.

• At least 1 year of hands-on experience with cloud-based security technologies is required.

• A minimum of 1 year of experience with protocols such as OAuth 2.0, OpenID Connect, and SAML.

• General knowledge of security frameworks and controls, including NIST, CIS, CSA, and ISO27000.

• Some familiarity with security systems and tools, including Firewalls, WAF, SIEM, SOAR, MDR, IAM, PAM/PIM, network packet sniffers, Nmap, IDS/IPS, SAST/DAST, and Burp Suite.

• Some experience with encryption, antivirus/malware solutions, penetration testing, and source code scanning.

• Some understanding of IAM concepts such as user provisioning, authentication, authorization, access control, and identity lifecycle management.

• Technical knowledge of cloud and SaaS security solutions and tools.

• Basic understanding of IP, TCP/IP, and other network administration protocols.

• Basic understanding of IAM lifecycle management, security controls, and system configurations for AWS, Azure, GCP, and Microsoft AD.

• Some experience with IAM solutions such as Okta, Active Directory, LDAP, or similar IAM software.

• Knowledge of MFA, biometrics, and SSO authentication methods.

• Preferred experience in implementing and assessing industry security standards, including HIPAA HITECH, GDPR, HITRUST, FISMA, ISO27K, PCI, and NIST.

• Proven analytical and problem-solving skills.

• Ability to prioritize and execute tasks in a high-pressure environment.

• Excellent written, verbal, and interpersonal communication abilities.

• Capability to conduct IT security research and communicate ideas in a user-friendly and business-friendly manner.

• Ability to organize tasks and manage priorities effectively.

• Self-motivated, goal-oriented, and capable of working independently as well as within teams.

• Strong attention to detail and a collaborative, team-oriented working style.

• Must be able to remain stationary for 50% of the time.

• Will frequently operate a computer and office productivity equipment.

• Will often communicate via video calls with both internal and external stakeholders.

🏝️ Benefits

• Medical insurance.

• Dental insurance.

• Vision insurance.

• Supplemental income insurance.

• Employer-paid disability insurance.

• Employer-paid life insurance.

• Pre-tax FSA for medical and dependent care.

• 401K.