Cybersecurity Architect - IAM

Creative Artists Agency · Nashville, TN · 2 wk ago

EngineeringFull-time

Maintain architectural diagrams and workflows of the identity access management platform
Provide design, evaluation, analysis of identity and access management programs to support the company’s strategy
Develop standards and guidelines for access management across the company and department
Understand user lifecycle management; including provisioning/de-provisioning, access requests, user entitlements and audit & validations
Collaborate with HRIS, IT service owners, service desk and end-users to gather feedback and design solutions with identity related workflows
Present on design & vision that meets user and business needs
Create overall structure for new and existing cloud and on-premise applications into the identity access management platform
Create identity governance workflows with the concepts of attestation and auditing
Ensure systems are scalable, maintainable and meet business needs
Create documentation to support architectural decisions and workflows
Review identity workflows and processes for lifecycle management, auditing, reporting, governance and self-service
Design a RESTful identity API to provide Identity as a Service to downstream services and directory owners
Play an active role in CAA’s security incident response efforts, working to identify and mitigate information security threats

A minimum of 7 years in Information Technology, ideally with a focus on information security
A minimum of 3 years’ experience in identity and access management
Architecture or Engineering degree
Strong communication and presentation skills with ability to explain complex concepts to both technical and non-technical audiences
Understanding of Zero Trust Identity architecture
Experience architecting IAM projects from design through implementation
Understanding of OAuth, SAML and OpenID frameworks
Knowledge in automation and integration with SaaS applications
Knowledge of lifecycle management and provisioning and de-provisioning
Knowledge of different MFA and compensating controls for identity
Knowledge of privilege identity management, privileged access management, and concepts of just in time provisioning, just enough access, and principal of least privilege
Knowledge of scripting in at least one of the following languages: PowerShell, Python, JavaScript

Creative Artists Agency, LLC (the “Company”) is committed to a policy of Equal Employment Opportunity and will not discriminate on the basis of race (inclusive of traits historically associated with race, including hair texture and protective hairstyles), color, religion, creed, gender or sex (including pregnancy, childbirth, breastfeeding or related medical conditions), national origin, ancestry, age, physical disability, mental disability, medical condition, genetic information, family and medical care leave status, military or veteran status, marital status, family status, sexual orientation, gender identity, gender expression, political affiliation, an employee’s or their dependent’s reproductive health decision making (e.g., the decision to use or access a particular drug, device or medical service), or any other characteristic protected by applicable law.
The absence of a permanent address is not a bar to employment.
The Company does not discriminate against individuals based on housing status, including the absence of a fixed address.
The Company also complies with the Americans with Disabilities Act and applicable state and local laws with regard to providing reasonable accommodation for qualified individuals with disabilities.

Similar jobs