Engineer, Identity and Access Management

Navitus Health Solutions, LLC

7d•Remote

About The Position

Navitus Health Solutions is seeking an Identity and Access Management Engineer to join our team! The Identity and Access Management (IAM) Engineer will be responsible for developing processes for account creation, modification, disabling and deleting accounts. This would include OKTA Directory, Active Directory, O365 and other downstream systems. The Engineer will work closely with application owners to develop processes to manage the entire user account lifecycle to include SSO (SAML) configurations, User Entitlement Review as well as meet audit and compliance requirements. The Identity and Access Management unit is responsible for provisioning support which includes ticket management, customer support, and knowledge of least privilege methodology with security rights, permissions and groups, experience with OKTA, Active Directory, O365, ADFS and Multifactor platforms. Due to the importance of this position, it is expected that a person supporting IAM has basic troubleshooting skills with networking and computer systems, can multitask, work in a fast-paced environment while providing excellent customer service. In addition to the primary role of IAM Engineer this position will also perform general security Engineer duties. Is this you? Find out more below!

Requirements

Bachelor’s degree required. or 4+ years equivalent work experience (ex. IAM, System Admin, Cybersecurity Engineer)
2-5 years' experience in Identity and Access Management or related area
OKTA Administrator/Architecture understanding
Relevant certifications: CompTIA Network+, Security+, or CySA+, GIAC GSec, Associate of (ISC)², CAMS, CIMP or equivalent
Experience with Active Directory and ADFS
Experience provisioning for Office 365 and Azure a plus
Experience with multifactor and SSO platforms (OKTA)
Demonstrated experience performing control evaluations within an intricate environment
Ability to perform analysis of data, processes, policies, procedures and/or systems
Familiarity of regulatory requirements (i.e., PCI, HIPAA, GLBA, SOC) and frameworks (e.g., NIST, ISO 27002 etc.)
Knowledge of "best practice" security frameworks (NIST Cyber Security Framework, NIST SP 800-53, CIS CSC, and HITRUST Security Framework) are preferred
Experience working in a Regulated Industries preferred. Familiarity with healthcare regulatory (HIPAA, HITECH, PCI) environments is a plus
Experience working with Agile Scrum & Kanban project management teams
Participate in, adhere to, and support compliance program objectives
The ability to consistently interact cooperatively and respectfully with other employees

Nice To Haves

Bachelor’s degree in the field of Computer Science with a focus on Cyber Security preferred
Relevant certification preferred: (ISC)² CISSP, ISACA CISM, CAMS, CIMP or equivalent

Responsibilities

Design, implement, monitor and evaluate IAM security controls that protect systems and data via least privilege access model
Configuring OKTA SSO Federations and support troubleshooting of OKTA environments. Working with our customer’s IT team to configure SSO SAML Injection for seamless passing of customer Idp authentication and authorization
Build and configure OKTA tenants for project teams
Ensure OKTA is synchronized with our ADFS structure
Triage and troubleshoot issue with OKTA performance. Perform health-check on the platform, working with our 3rd party support teams
Participate in the development and maintenance of the IAM workflows that manage the provisioning of entitlements to end users
Assist in investigations of IAM security incidents as well as document security breaches to determine extent of exposure or damage
Install and manage IAM software designed to protect systems and information infrastructure
Maintain IAM Awareness Training platform
Assist in developing corporate IAM strategies, including deployment, administration, configuration and support of IAM related systems, policies and procedures
Develop increased breadth and depth of the organization’s monitoring resources, documenting and maintaining a framework to consistently assess the organization’s IAM security posture
Other duties as assigned