Architecture/Systems Design Senior Analyst

ABM is currently seeking a highly motivated and experienced Sr. Engineer, Identity & Access Management (IAM). The

IAM position directly reports to the Director, Systems Engineer & Operations. The Identity and Access Engineer (IAE) will

play a vital role in safeguarding ABM’s digital assets by ensuring that only authorized individuals have access to the right

resources. They will work closely cross-functional with InfoSec and CoreTech engineers, administrators, and architects

to implement and maintain IAM solutions, including user provisioning, authentication, and access control systems.

Responsibilities:

Specific job duties or deliverables that the position requires which will also measure performance:

1.IAM System Design and Implementation Management:

- Assist in the creation, modification, and deletion of user accounts and access privileges in various

systems and applications.

- Conduct regular reviews and audits of user accounts to ensure compliance with security policies.

2. Privileged Access Management:

- Provide direct configuration and maintenance of PAM solutions such as Delinea, password vaulting,

service account compliance, and related policies.

- Assist directly in migration and implementation of PAM solutions.

3. Authentication and Authorization:

- Help in the configuration and maintenance of authentication methods such as single sign-on (SSO),

multi-factor authentication (MFA), and password policies.

- Collaborate in the definition and management of role-based access control (RBAC) policies.

4.Provisioning and De-provisioning:

- Assist in automating user provisioning and de-provisioning processes to improve efficiency and

security.

- Ensure that employees have access to the appropriate resources during their employment lifecycle.

5. Access Policy Management:

- Create and enforce access control policies and security standards in alignment with regulatory

requirements.

- Monitor and review access policies and make adjustments as necessary.

6. Access Governance:

- Participate in access reviews and certification processes to minimize access rights and permissions

that are no longer required.

- Work on IAM reporting and analytics to identify and mitigate risks.

7. Security Policy and Compliance:

- Follow security policies and industry standards to maintain a secure IAM environment.

- Collaborate with senior engineers to ensure compliance with regulations and standards (e.g., GDPR,

HIPAA, NIST).

8. Troubleshooting and Support:

- Assist in resolving IAM-related incidents and provide support for end-users who encounter access

issues.

- Collaborate with the IT Service Desk and other relevant teams to resolve access problems.

9. Collaboration and Documentation:

- Collaborate with cross-functional teams, including IT, security, and compliance teams, to understand

business requirements.

- Maintain comprehensive documentation of IAM processes, policies, and configurations.

10. Training:

- Provide guidance and knowledge transfer to junior IAM staff and end-users on best practices in

access management.

Required Qualifications:

- A bachelor's degree in computer science, information technology, or a related field is preferred.

- Knowledge of authentication methods, directory services, and access control systems.

- Strong oral, and written communication skills

- Customer Facing Exposure is a must.

- Strong working knowledge of PAM solutions, including implementation and maintenance

-Delinea

- CyberArk

- Strong problem-solving skills and attention to detail.

- Strong project management skills and the ability to work in a team environment.

- An eagerness to learn and stay updated on the latest developments in IAM and cybersecurity.

- Good understanding of LDAP concepts and working experience with at least a few of the

following technologies:

-Azure Active Directory, SSO, MFA

- Active Directory (on-prem)

- Should have the ability to understand customer scenarios and requirements (may include

integration situations) and be capable of suggesting solutions.

- Should have good knowledge of current IDM, strong Authentication, and PKI (Public Key

Infrastructure) technologies and products.

- Certifications in any of the IAM products would be an added advantage

Preferred Qualifications:

- One or more of the following certifications in area of specialty are preferred. Examples include

CompTIA, CISSP, CSSLP, CISA, CISM, GIAC certs, ITIL, CFE, CNP, CEH

- ISIM support