IAM Security Engineer (#636270)

Will design formal IAM and enterprise directory standards and procedures consistent with corporate security policy, legal, and regulatory requirements, and industry best practices. Use enterprise directory architecture and design best practices – automate the entire employees life cycle (onboarding/offboarding/access) using IAM tools like SailPoint, Active Directory and Federation tools like Ping Federate. Work in Ping Federate in conjunction with ODSEE/OUD Directories, Symantec SiteMinder adapters to implement various flows of authentication to provide single sign on (SSO) solutions to various clients in different scenarios. Assist in design and architect of likely mergers/acquisitions of the Identities from sister concerns into single directory. Facilitate large volumes of organizational data changes flow. On-board new application in Cloud (Azure AD, AWS, GCP) for SSO with conditional access policies and user provisioning using System for Cross-domain Identity Management (SCIM). Conduct risk assessments and implement security best practices to safeguard customer data and privacy, and test users by creating situations that could compromise system security. Determine vulnerabilities in company databases and develop solutions and recommendations for issues caused by process challenges, emerging threats, and technology changes. Implement data modelling in Identity management using python and graph database. Design and implement custom application using Python and Neo4j database to provide 360 view of identity and access data for each identity in the organization. Implement High availability of data using different regions in Azure cloud. Design and implement Radiant Logic FID and ICS product for identity and access management. Develop custom export framework to enable data export from identity store in various file formats and send to different downstream applications. Develop virtual identity view to read data from multiple data sources and join them to form a single identity data. Develop custom identifier assignment tool for different workforce type identities. Integrate SCIM and JDBC connector with various servers to receive input from the source applications. Work as an Identity and Access Management lead and manage Identity and Access Governance Data Transformation projects.

Position requires up to 100% domestic travel. This position is for full-time, salaried (W-2), permanent employment.

REQUIREMENTS:

Master’s Degree or foreign equivalent in Computer Science, Information Technology, Computer Applications, Information Systems, Engineering, or a related field.

Please reference Job Number 636270 when sending resumes. Please mail resumes to: HR, Beacon Hill Solutions Group, LLC, 20 Ashburton Place, 5^th Floor, Boston, MA 02108.

California residents: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

If you would like to complete our voluntary self-identification form, please click here or copy and paste the following link into an open window in your browser: https://jobs.beaconhillstaffing.com/jobs/eeoc/

Completion of this form is voluntary and will not affect your opportunity for employment, or the terms or conditions of your employment. This form will be used for reporting purposes only and will be kept separate from all other records.

Beacon Hill offers a robust benefit package including, but not limited to, medical, dental, vision, and federal and state leave programs as required by applicable agency regulations to those that meet eligibility.  Upon successfully being hired, details will be provided related to our benefit offerings.