Location
Davis, CA | United States
Job description
Job Summary:
Under the direction of the Identity & Access Management (IAM) Supervisor, this position serves as a senior IAM engineer in the UCD Enterprise Infrastructure Services (EIS) group within Information & Educational Technology (IET)unit.
The IAM engineer has the primary role in capturing and developing IAM business and security requirements and policies based on current state IAM tools, stakeholder inputs from key business areas and technology groups. They are also responsible for developing technical documentation and IAM security and business requirements and translating them into configurations within a commercial Identity Governance and Adminstration (IGA) tool.
Essential Responsibilities:
65% IAM Policy Analysis, Documentation, and Implementation
- Document and analyze existing IAM processes, workflows, and policies that are implemented in the current IET IAM toolset.
- Develop and document information security policy requirements that apply to the IAM platform to comply with university business and security policies.
- Develop and document IAM policy specifications including business roles and access entitlements.
- Develop and document IAM business process workflow specifications.
- Develop and document IAM functional specifications encompassing data models, workflows, data manipulation, screen layouts, and user interactions.
- Develop automation of policies and business rules within the IAM tools.
35% IAM Business and Security Policy Requirement Development
- Work with internal customers, business analysts, and application teams to understand current access requirements and policies.
- Work with cross-functional teams to conduct requirement and data analysis that inform IAM policies and guidelines.
- Work with Information Security to understand security standards and policies (e.g. IS-3) and translate into technical IAM policies as applicable.
- Participate in IAM audits and review access control reports to identify potential risks. Develop IAM reports in support of security audits.
Qualifications:
Minimum Qualifications
- Five years of experience in identity and access management.
- Experience in operating and configuring changes within IAM tools such as SailPoint (IdentityNow), particularly in the role management, workflow, reporting, and entitlement management modules.
- Experience with IAM domains and best practices, encompassing identity lifecycle management, identity governance, role-based access control (RBAC), authentication, and authorization directory services, and privileged access management (PAM).
- Experience in effectively communicating both orally and in writing to share IAM policies and guidelines with internal teams, and with stakeholders.
- Experience with access management tools such as Azure AD, Ping Identity, and similar solutions.
- Strong understanding of security concepts and applicability to IAM.
- Utilize data query, analytics, and modeling techniques to develop IAM policies and guidelines.
Preferred Qualifications
Degree in Computer Science or related ?eld.
Experience converting business requirements into IAM tool speci?cations for large, multi-functional, web-based software applications that must integrate within a complex, service architecture.
- Experience with SQL and relational databases.
- Experience with scripting and programming languages such as Java.
Familiar with software packaging and release management processes; including utilizing issue tracking, release tracking, continuous integration and build artifact repository systems (e.g. Jira, Bitbucket, Maven, Pipelines, GitHub).
Job tags
Salary
