The Security Engineer I (IAM) will report to the Security Engineering Manager in the Technology Department. This role is responsible for managing and enhancing our enterprise identity and access management (IAM) framework with a primary focus on user access reviews, certifications, enterprise password management, and entitlement mappings. The ideal candidate will work closely with cross-functional teams to ensure robust access controls, maintain compliance, and streamline IAM processes across the organization.
Duties & Responsibilities:
Work closely with cross-functional teams to implement and manage identity governance systems, perform audits, and lead projects to enhance our IAM environment
Implement, configure, and maintain IAM solutions such as Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Role-Based Access Control (RBAC)
Conduct regular access reviews and audits to ensure compliance with internal policies and regulatory requirements
Provide training and support to internal teams on IAM tools and best practices
Develop, document, and enforce password policies and procedures to enhance security and reduce risk
Analyze and design access control models to ensure that systems, applications, and data are appropriately protected
Prepare for and support internal and external audits by providing detailed reports and analysis of user access and entitlement data
Implement remediation strategies to address audit findings and ensure continuous compliance with industry standards (e.g., PCI-DSS, HIPAA)
Serve as a subject matter expert for IAM-related queries and issues, providing guidance to IT, HR, and business units
Facilitate training sessions and workshops to educate end users and administrators on IAM policies and procedures
Work collaboratively with security architects and engineers to ensure seamless integration of IAM solutions within the broader security infrastructure