Staff Identity and Access Management Engineer

Ridgeline•Reno, NV

3d•Hybrid

About The Position

As a Staff Identity and Access Management Engineer, you will play a crucial role in refining our organization's approach to managing user access and permissions. You'll be responsible for creating a comprehensive inventory of accounts and permissions across our tools, all while ensuring that our identity and access management practices align closely with security principles. Your work will focus on automating workflows to enhance security and reduce the risks associated with over-privileged or duplicate service accounts, making a significant impact on our overall security posture.

Requirements

Bachelor's degree in Computer Science, Information Technology, or related field
5+ years with identity and access management solutions
3+ years with security policy development
4+ years with incident response and management
Proficiency in identity and access management tools like Okta, Active Directory, or similar
Experience with role-based access control (RBAC) implementation
Familiarity with security frameworks and compliance standards such as NIST, GDPR, or ISO 27001
Ability to conduct audits and analyze access logs for suspicious activity
Skills in automating workflows using scripting languages like Python or PowerShell
Knowledge of user lifecycle management processes
Experience with security policy drafting and compliance monitoring
Familiarity with incident response procedures and documentation
Ability to create and maintain technical documentation and user manuals
Experience with cross-functional teamwork in security and IT environments

Nice To Haves

Successfully implemented access control policies that enhanced security posture
Developed and maintained a comprehensive inventory of user accounts and permissions
Automated workflows that increased efficiency in user provisioning and de-provisioning
Conducted regular audits that improved compliance with identity management policies
Led incident response efforts that effectively mitigated security breaches related to access management
Produced detailed technical documentation that streamlined identity and access management processes

Responsibilities

Implement access control policies to safeguard system resources.
Regularly monitor and review user access levels to ensure compliance with security standards.
Configure role-based access controls that reflect the organization's business needs and establish prompt mechanisms for revoking access for terminated users.
Conduct periodic reviews and audits to maintain oversight of system access permissions.
Create and maintain an exhaustive inventory of user accounts and permissions.
Automate workflows to enhance user provisioning and de-provisioning efficiency.
Ensure compliance with identity management best practices and security guidelines by collaborating with cross-functional teams to improve user identity lifecycle management.
Develop security policies focused on identity and access management.
Ensure all user access activities comply with these policies and conduct training sessions to educate staff on the requirements.
Regularly review and update policies in response to regulatory changes while collaborating with security teams to identify and address any policy violations.
Conduct regular audits of access logs to identify any suspicious activities.
Analyze discrepancies in user access and permissions during these audits, and generate compliance reports that showcase our adherence to identity management policies.
Collaborate with audit teams to ensure we align with regulatory standards and implement corrective actions for any identified compliance violations.
Lead the incident response team to effectively address security breaches related to access management.
Evaluate the impact of incidents and coordinate communication between technical teams and stakeholders to ensure a smooth resolution.
Document response actions and outcomes for future reference while developing comprehensive incident response plans tailored to identity and access management.
Develop comprehensive technical documentation for identity and access management processes.
Create user manuals and guidelines that promote best practices in access management.
Document workflow automation processes clearly and maintain updated documentation to reflect changes in systems and policies.
Collaborate with engineering and security teams to gather essential information for accurate documentation.