Engineer Identity Systems

Academy Sports + Outdoors • Katy, TX

1d

About The Position

The Engineer Identity Systems administers, configures, maintains, and integrates enterprise identity and access management (IAM) tools and solutions. The role supports identity governance activities, access recertification, account lifecycle and role automation, application performance, and hosting infrastructure. It works with department leaders and cross-functional IT teams to develop roles, applications, workflows, and configuration components, while ensuring solutions meet enterprise operations standards and change-control procedures. The position also supports test and pre-production environments, participates in incident recovery and root-cause analysis, and develops an understanding of company policies, procedures, and safety rules. Duties may change, and team members may be assigned other duties.

Requirements

• Bachelor’s degree in Information Technology or a relevant field.
• At least 3 years of in-depth IAM administration experience, including research, design, installation, testing, configuration, implementation, daily use, troubleshooting, and maintenance of IAM tools such as SailPoint.
• Foundational knowledge of Windows, Linux/Unix, and iSeries (AS400) operating systems.
• Working knowledge of database, networking, virtualization, and server hardware concepts.
• Experience with CyberArk or a similar Privileged Access Management platform.
• Working knowledge of rogue accounts and role management processes.
• Expertise in Identity and Access Management and identity governance.
• Experience automating access-control processes such as user provisioning, onboarding, RBAC, authorization models, SSO, LDAP, and Active Directory.
• Working experience with SSO, password reset, self-service, federated identity, MFA, and IAM products and services, including IDaaS.
• Strong interpersonal, written, and verbal communication skills to interface effectively with individuals at various levels.
• Thorough working knowledge of Windows Server 2003/2008/2012/2016 and Unix.
• Thorough working knowledge of Active Directory.
• Subject-matter-expert-level experience in one or more of WAM, SSO federation (SAML and OIDC), MFA, LDAP directories, or Active Directory.
• Experience setting up and administering CyberArk.
• Experience managing deployments of an IAM platform such as Oracle IdM, SailPoint IdentityIQ, or Savyint.
• Experience with role mining, role-based access control, and access certification using Oracle IdM, SailPoint IdentityIQ, or Savyint.
• Scripting skills in Java, BeanShell/JavaScript, JSP/Servlets, SQL, and/or PowerShell are preferred in the posting’s Skills section.
• Profound understanding of web-based technologies, including multi-tier applications and security standards such as HTTP, TLS, REST/SOAP, cookie handling, SAML, OAuth, OIDC, and WS-Trust.
• Thorough working knowledge of Microsoft Office 365 and ability to configure it and resolve related issues.
• Ability to stay organized, pay attention to detail, and meet critical deadlines.
• Analytical, with strong problem-solving abilities and creative resolution skills.
• Ability to work well under pressure while consistently meeting time-sensitive deadlines.
• Acceptable hearing and vision to perform job duties.
• Ability to adhere to company work hours, policies, procedures, and rules governing professional staff behavior; regular attendance is required.

Nice To Haves

• Experience with application support and system troubleshooting.
• Experience migrating disparate legacy IAM technologies and processes to modern architectures.
• Experience working with offshore teams.
• MCSE, MCIPT, Azure, Google, and/or VMware VCP6-DCV certifications.

Responsibilities

• Administer, configure, and maintain enterprise IAM tools.
• Conduct periodic recertification activities for identity and access management processes.
• Proactively monitor customer experience, application performance, and hosting infrastructure.
• Customize and integrate IAM solutions, including Azure Active Directory, SailPoint, CyberArk, and PingFederate.
• Partner with department leaders to support the development of roles, applications, workflows, and other configuration components.
• Participate in root-cause analysis and develop long-term solutions to improve application portfolio availability and performance.
• Participate in projects and provide cross-functional IT application support.
• Ensure developed solutions align with Enterprise Operations standards and procedures.
• Maintain and administer test and pre-production environments.
• Participate in high-severity incident recovery efforts.
• Manage the IAM rule engine, using automation and attributes for account lifecycle and role automation.
• Identify and mitigate risk while following corporate and department change-control procedures.
• Develop a thorough understanding of Academy’s policies, procedures, and safety rules.
• Perform other duties as assigned.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level