IAM Security Engineer

TECO Energy•Lutz, FL

1d•Onsite

About The Position

This role supports the company’s information security systems, ensuring that all procedures are followed on a daily, weekly, and monthly basis. It provides support for all systems used to secure the enterprise information technology assets, including network infrastructure, operating systems, and web server platforms throughout TECO Energy and its subsidiaries. The position assists with the development and enhancement of IAM systems including SSO, authentication, and access controls, ensuring the confidentiality, integrity, and availability of IAM systems and data. It provides IAM Security support for the TECO environment, focusing on IT corporate applications and OT/NERC applications. The role is responsible for adhering to established policies, following best practices, developing and possessing a solid understanding of exploits and vulnerabilities, and resolving issues by following appropriate escalation procedures. It supports the enforcement of corporate, regulatory, and risk management policies and assists in developing, maintaining, and publishing corporate IAM security standards, procedures, and guidelines for enterprise computing platforms. The position will be responsible for collaborating with multiple business units across multiple Emera affiliates.

Requirements

Bachelor’s Degree in Computer Science, Information Systems or other technology-related field from an accredited college or university. An associate’s degree with an additional 2 years of required experience may be considered in lieu of a bachelor’s degree. A high school diploma and an additional 4 years of required experience may be considered in lieu of a bachelor’s degree.
At least one (1) year of experience in IAM or related security engineering experience.
Understanding of Identity and Access Management concepts, including RBAC, least privilege, entitlement management, and access controls.
Knowledge of identity lifecycle management, including Joiner/Mover/Leaver processes, onboarding, offboarding, access changes, and automated provisioning/deprovisioning.
Knowledge of Identity Governance and Administration capabilities, including access requests, certifications/access reviews, role management, application onboarding, and governance processes.
Understanding of Privileged Access Management concepts, including privileged account onboarding, credential management, access controls, and privileged access governance.
Experience or working knowledge of enterprise IAM technologies such as Saviynt, CyberArk, Microsoft Entra ID, Active Directory, SSO, and MFA.
Understanding of connectors, REST APIs, scripts, and automation used to integrate IAM platforms with applications, directories, HR systems, and other enterprise technologies.
Ability to troubleshoot identity, authentication, provisioning, access, and integration-related issues.
Knowledge of designing and implementing IAM solutions aligned with business requirements, security standards, and enterprise architecture.
Understanding of access reviews, segregation of duties, excessive access, privileged access, and least-privilege principles.
Ability to analyze IAM security issues and support remediation of access-related risks and control deficiencies.
Working knowledge of security and regulatory requirements including NERC CIP, SOX, NIST, and other applicable security frameworks.
Ability to collaborate effectively with application owners, business teams, Cyber Security, Infrastructure, Architecture, Compliance, implementation partners, and managed service providers.

Nice To Haves

CISSP, CISM, CIAM, ITIL, Sabiynt, CyberArk, Microsoft Identity/Entra, or other relevant IAM/security certifications

Responsibilities

Assist in Developing and maintaining a roadmap for Identity and Access Management (IAM) including Governance and Administration (IGA), Privileged Access Management (PAM), authentication, SSO, directory services, and access governance.
Collaborate closely with teams including Cyber Security, Human Resources, Technology, Architecture and Lines of Business (LoBs) to create efficient and user-friendly IAM solutions.
Assist in designing, implementing, and maintaining access governance processes, including Joiner/Mover/Leaver workflows, access requests, RBAC, access certifications/reviews, application onboarding, and least-privilege controls.
Support enterprise IGA capabilities, including Saviynt, and integrations with business applications and directories.
Support Privileged Access Management (PAM) capabilities, including privileged account onboarding, credential management, access controls, and privileged access remediation with emphasis on platforms such as CyberArk.
Assist with the deployment, management and enhancement of SSO and authentication solutions, including integrations with enterprise applications, Microsoft Entra ID/Active Directory, and other identity platforms to provide secure and seamless authentication.
Assist with the implementation and management of authentication and access control mechanisms, including multi-factor authentication, conditional access, and identity security controls.
Assist with the monitoring, troubleshooting and response to identity and access-related incidents and technical issues.
Support remediation of unauthorized access, excessive privileges, identity lifecycle failures, and other IAMN control issues.
Effectively collaborate with both technical and non-technical business owners, application teams, implementation partners, and managed service providers.
Identify opportunities to improve IAM automation, integrations, processes and toolsets, and provide hands-on technical support for activities outside standard managed service scope.