Enterprise IAM is one of the core wings of Circles Cybersecurity office
As a Security Engineer, Enterprise IAM, you will be given a unique opportunity to solve security challenges with the Identity and access management space through high impact projects
Responsibilities:
Serve as Security Engineer focused driving standardization of identity and access management best practices.
Identify areas to improve our identity and access management posture and propose solutions to close gaps
Understanding of methodologies used for identity management in cloud environment like AWS and GCP
Develop access management(ABAC/RBAC) use cases to enable privileged access management workflows. Implement using API framework exposed by the platform.
Develop Python scripts, or similar, to automate recurring security and access management tasks/workflows
Work with cross functional teams to define access management rules and policies.
Understanding of security fundamentals required to ensure confidentiality, integrity, and availability of information assets
Requirements:
Bachelor s degree in IT, information security, computer science, or a related field.
3 to 5 years of hands-on experience in defining and implementing Identity and access management strategies.
Comprehensive knowledge and experience with authentication standards and technologies such as multi factor authentication, JSON Web Token (JWT), etc.
Extensive hands-on knowledge of identity and access management best practices, procedures, and software solutions such as CyberArk, Jump Cloud, etc.
Extensive knowledge and experience with identity and access management technology, such as single sign-on (SSO), two-factor authentication, privileged access management, etc.
Privilege Access Management fundamentals should be clear.
Experience with one or more backend programming/scripting languages such as JavaScript, Python, Go. Familiarity with Web Services/Rest API and ability to implement integration with various enterprise tools.
Experience with Windows, Linux / Unix, scripting (Bash, PowerShell, or Perl), LDAP, SQL, and web services.
Ability to communicate effectively with business representatives in explaining security topics and requirements/risks clearly to stakeholders from engineering to senior leadership
Ability to document deployment diagrams and operational runbooks
Knowledge of ISO27001 and SOX compliance will be a plus.