Full-Time Senior Identity and Access Management Engineer

Responsibilities

• DUO MFA Management: Administer and manage the DUO Multi-Factor Authentication (MFA) platform. Implement and enforce MFA policies, ensuring integration with various applications and systems. Monitor MFA performance, troubleshoot issues, and handle escalations related to authentication failures or policy violations.
• Microsoft Information Protection (MIP) Implementation: Configure and maintain MIP policies to safeguard sensitive data. Collaborate with security and compliance teams to establish data classification and labeling policies. Conduct regular audits and reviews of MIP policy adherence, ensuring protection of sensitive information.
• Key Management Services (KMS): Manage KMS for encryption key lifecycle, ensuring proper distribution and rotation of keys for critical systems. Maintain KMS compliance with encryption and security best practices, ensuring availability and integrity of key materials.
• Mobile Device Management (MDM): Support administration and monitoring of MDM solutions to manage device security, app deployment, and access policies. Work with IT teams to ensure all mobile devices comply with security policies and access controls.
• Active Directory (AD) and Azure AD: Provide support for Active Directory, managing user accounts, group policies, and organizational units. Assist with synchronization between on-premises AD and Azure AD using Azure AD Connect, ensuring seamless hybrid identity integration. Troubleshoot AD/AAD authentication and access provisioning issues.
• IAM Process Optimization: Evaluate and improve IAM processes related to MFA, MIP, and KMS to enhance security and user experience. Automate routine identity management tasks to increase efficiency and reduce errors.
• Incident Response and Troubleshooting: Act as the technical escalation point for identity-related incidents. Investigate, troubleshoot, and resolve IAM issues.
• Compliance and Reporting: Ensure IAM solutions meet compliance requirements (e.g., SOX). Generate reports for auditing purposes and provide insights into the security posture of identity systems.
• Collaboration and Documentation: Collaborate with security, IT, and compliance teams. Develop and maintain comprehensive documentation for IAM solutions, policies, and procedures.
• Training and Knowledge Sharing: Provide training to end-users and technical staff on IAM best practices.
• Professional Attributes: Demonstrated leadership, problem-solving, analytical skills, attention to detail, strong communication and collaboration skills. Customer-focused, adaptability to new tools and technologies, and cross-functional team management experience.

Technical Experience Required

• DUO MFA: Experience in administering and managing DUO MFA or similar platforms.
• Microsoft Information Protection (MIP): Hands-on experience with MIP and understanding of data protection frameworks.
• Key Management Services (KMS): Proficient in managing KMS for encryption key lifecycle.
• Mobile Device Management (MDM): Knowledge of MDM platforms, enterprise device management, and compliance/access control.
• Active Directory (AD) and Azure AD: Experience managing user accounts, group policies, and organizational units in AD; familiarity with hybrid identity environments.
• PowerShell Scripting: Basic PowerShell scripting skills
• SIEM and Auditing Tools

Scripting and Programming Languages: PowerShell, Python (optional)

IAM and Directory Tools: DUO MFA, Azure AD Connect, MIP, KMS tools, MDM platforms

Monitoring and Logging: Familiarity with SIEM platforms like Splunk or Microsoft Sentinel.

Career and Education Experience

• Experience: 6+ years in IT/Information Security, with 3+ years direct experience with DUO MFA, MIP, and KMS.
• Education: Bachelor's degree or equivalent experience in IT, Computer Science, Information Security.

Language Experience

• English proficiency (speaking and writing)

Logistics

• General and/or home office environment
• 24/7 on-call availability
• Cross-time zone support for US coverage

What is the last date for applying to the job?

Which countries are accepted for this remote job?