IAM Engineer (hybrid)

About the role

The IAM Engineer provides support for a complex environment(s). They provide knowledge, skillsets and subject matter expertise (SME) for provisioning/deprovisioning, federation, authentication and access management, and directory services. Linux based Architecture, infrastructure and identity integrations with various technologies and services.

Responsibilities

• Strategic Planning
  • Contribute to Risk Assessment and IAM Evaluations
  • Provide Guidance and Support in evaluating vendors, open source products and internally developed systems
  • Contribute to yearly planning of IAM portfolio
  • Support processes and systems around vulnerability assessments, risk analysis, and risk mitigation procedures
  • Represent the Identity & Access Management Office in collaborative initiatives, applying expertise and functioning as an integral, complementary part of the information security department
• Administration
  • Act as IAM point-of-contact for assigned AM team product(s)
  • Serve as Tier 3 support and an escalation point for domain technology issues that cannot be solved by Tier 1 and Tier 2 support
  • Perform/Own root cause analysis, problem management, documentation and communication for Identity Environment(s)
  • Create and maintain system documentation for domain technologies, including installation, configuration, and appropriate trouble shooting steps
  • Identify opportunities to innovate, extend and enhance service delivery where possible
  • Engineer Ability to develop/code, test, integrate and deploy IAM AM team frameworks, systems and protocols
  • Aid in design and implement solutions for AM Team infrastructure -Sailpoint, Shibboleth/SAML, Forgerock SSO, Forgerock DS/LDAP, NU Directory, Web Services, etc) for efficiency and continuous improvement opportunities
  • Ability to create scripting, read code, utilize Git for versioning and use an orchestration tool like (Cloudbees, Rundeck or other) for automation
• Performance
  • Collaborate with other Identity staff or NUIT staff as needed for incident remediation or incident investigations
  • Provides troubleshooting and investigation assistance to users regarding potential or actual Identity incidents
  • Partners with users and internal/external staff to monitor and/or report school, unit, or departmental level IAM issues/incidents within applications or systems
  • Develop and maintain IAM AM team expertise through university-provided and external training/seminars/courses; staying abreast of industry trends, methods, and published literature; and participating in professional development programs/initiatives and approved by information security management
• Supervision
  • Cultivate subject-matter expertise and skills in less experienced IAM staff, in coordination with their supervisors and IAM management

Qualifications

• Successful completion of a full 4-year course of study in an accredited college or university leading to a bachelor's or higher degree in a major such as computer science, information technology, or related; OR appropriate combination of education and experience
• 3+ years’ experience with IAM technology such as provisioning/deprovisioning, SSO, SAML/Federation, LDAP/Directories, MFA, PAM, Group management or other relevant identity and access management technologies
• Foundational knowledge of Identity Life Cycle Management, Runtime enforcement(API’s), provisioning and de-provisioning, Identity Federation (SAML), and Conditional access policies
• Experience with several of the following: IT Operations & Incident Response, IAM Engineering, IAM provisioning and deprovisioning, Authentication products and methodology and protocols
• Support of IAM on premise systems, SAAS and Cloud based solutions
• Support of Linux operating systems and server hardware, Git version control, Cloudbees or other orchestration tools
• Knowledge of operations reports and usage of splunk
• Demonstrate knowledge with problem resolution and experience with Tier 3 troubleshooting, on call and incident response
• Monitoring and performance tuning for Linux operation systems including – connectivity, synchronization, replication, Iptables, certificate trusts, etc
• Support of IAM on premise systems, SAAS, and Cloud based solutions
• Amazon Web Services (AWS) Identity Management/Provisioning
• Information Security Ldap Linux Operating System
• Microsoft Office (Word, Excel, Powerpoint, Access, Outlook)
• Microsoft Sharepoint
• Openam (Identity Management)
• Oracle And Oracle Rac
• Puppet/Chef/Ansible
• Server Hardware Sql/Mysql/Postgres Storage Hardware
• Tomcat Java Javascript Jquery Shell Scripting

Skills

• Strong oral and written communications skills
• Ability to weigh business needs against security concerns and articulate issues to the user community

Benefits

At Northwestern, we are proud to provide meaningful, competitive, high-quality health care plans, retirement benefits, tuition discounts and more! Visit us at https://www.northwestern.edu/hr/benefits/index.html to learn more.

Work-Life & Wellness

• Northwestern offers comprehensive programs and services to help you and your family navigate life’s challenges and opportunities, and adopt and maintain healthy lifestyles.
• We support flexible work arrangements where possible and programs to help you locate and pay for quality, affordable childcare and senior/adult care.

Professional Growth & Development

• Northwestern supports employee career development in all circumstances whether your workspace is on campus or at home. If you’re interested in developing your professional potential or continuing your formal education, we offer a variety of tools and resources.
• Visit us at https://www.northwestern.edu/hr/learning/index.html to learn more.

Northwestern University is an Equal Opportunity Employer and does not discriminate on the basis of protected characteristics, including disability and veteran status. View Northwestern’s non-discrimination statement.