Identity and Access Management (IAM) Engineer

Company Description

STCU is consistently rated one of the top-performing credit unions in the nation, and has been named one of Fortune Magazine’s Great Places to Work. We look for employees who have a strong desire to serve others, are lifelong learners, are committed to working hard, have a fun-loving attitude, and who want to make a difference in our members’ lives. We love people who share our core values: Joyfulness, generosity, belonging, goodness, and striving. We believe in being a force for good in the community, while helping members achieve their financial goals and dreams.

STCU offers excellent benefits: 
•  Paid time off—plus 11 paid holidays!
•  Medical, dental, vision and life insurance 
•  Flexible schedules and remote work opportunities
•  Training and career development
•  Success sharing plan
•  401(k) matching contributions
•  Tuition reimbursement

An overview of the benefits can be found here.  
Salary range: $8,231.60 - $11,298 per month

Job Description

The Identity and Access Management (IAM) Engineer will design, implement, and maintain the organization’s IAM infrastructure and processes to ensure that access to critical systems and data is secure, efficient, and compliant with regulatory requirements. This role will be responsible for integration of new and legacy systems to ensure a secure and seamless user experience as well as automating processes to improve sustainability.

*Remote work is only offered in the following states: Florida, Georgia, Idaho, Oregon, Texas, Virginia, Washington, and Wyoming.

Core Job Requirements/Outcomes

• Design and guide the implementation of IAM processes, including but not limited to access provisioning, access changes, access termination, and access reviews by developing and leading the execution of strategies related to scaling IAM processes and initiatives.  This includes automation of key IAM tasks by utilizing both industry standard tools and programmatic coding.
• Implement internal and external application access effectively by utilizing advanced knowledge of federation and other authentication methods.  This includes Security Assertion Markup Language (SAML), OpenID Connect (OIDC), Kerberos, LDAP, OAuth and others.
• Demonstrate high proficiency with Active Directory (AD), Azure AD, GPOs, LDAP Directory Services, deployment and management of Identity Governance and Privileged Access tools, Certificate Management, Public Key Infrastructure (PKI), Cloud Technology and device authentication by directing the most effective option for IAM implementations.
• Oversee effective implementation and maintenance of role-based-access control (RBAC) definitions that meet business needs, as well as implement the principle of least privilege, and Segregation of Duties by collaborating and gathering information from organizational stakeholders.

Other Essential Functions

• Effectively create, update or troubleshoot code or scripts to resolve issues, create efficiencies or integrate systems.
• Deliver metrics and reporting that demonstrates value provided by IAM solutions, illustrates program efficiency and effectiveness, and highlights the risk of being reduced through program maturity.
• Remain informed on trends, best practices or other strategically valuable issues that impact the department and make recommendations to manager on new initiatives and existing program improvements that deliver secure products and services. Ensure market value and user satisfaction.

Qualifications

Education: Bachelor’s Degree in Information Technology, Information Systems, Business Management or Cybersecurity or equivalent work experience is required.

Job Experience: Minimum of five years of related experience within a medium to large organization. Demonstrated proficiency in Microsoft AD, Azure AD, Identity Governance (IGA) and Privileged Access (PAM) tools in a 500+ user enterprise environment is required. Experience is required to include 2-3 years of experience building custom integrations with enterprise applications. Direct experience implementing PAM or IGA or both, managing employee lifecycle, and   producing documentation (run book etc.) is required.

Certifications: Desired: At least two ISACA, ISC2, GIAC or other industry standard certifications that demonstrate working knowledge of Information Security Domains, Risk Management or Identity Governance are required. 

Software Skills: Software development and implementation skills of Identity and Access Management (IAM) processes and workflows is required.  Experience implementing and supporting a commercial Identity Governance and Administration (IGA) tool in a large enterprise is preferred.

Physical Demands: Must be able to regularly talk, hear and operate a computer, keyboard and mouse and occasionally lift, pull/push and carry up to 20 pounds with accommodations.

Work Conditions: Exposure to constant or intermittent sounds at a low or moderate level consistent within an office setting. Exposure to high-stress, fast-paced, deadline-oriented environment. This role is part of an on-call rotation requiring <1hr response time.

Additional Information

Ready to apply? Click on I'm interested!