IAM Cloud Lead Engineer

Candidate should be able to :

Document IAM runbook, playbooks, and administration tasks as appropriate

Interface with Application, IT, Infrastructure and Support teams for application integration and runtime issues to the IAM platform

Develop role modeling for cloud services, including databases and applications

Integrate cloud services into SailPoint and other IAM tools

Apply the least privileged principle to build appropriate policies in the cloud

Improve automation for lifecycle events (joiner, mover, leaver, re-hire, conversion, etc.)

Build alerting and reporting mechanisms for workflow and general SailPoint errors

Provides primary Level 3 support on IAM cloud issues

Centralize and build access request flows using SailPoint

Build automation processes to eliminate manual repeatable processes

Handles production change management per policies

Interface with teams for Ping, CyberArk, and RSA integration

Candidate should have :

Technology Skills :

Terraform experience is a bonus, but not required if knowledgeable in Python

Recent relevant experience with CyberArk a plus

Understand AWS IAM Condition statements and use them to restrict access

Fluent in AWS IAM policy language and be able to craft custom policies using JSON

IT Security or IT Operations experience within a Financial Services industry highly preferred

Active Directory / LDAP administration and support

Banking or other regulated business experience a plus

Ping Single Sign-On (SSO) administration

1-2 years of experience with SailPoint IdentityIQ administration

2-3 years of experience with AWS, specifically AWS IAM

1-2 years of experience with Python or other automation languages

1+ years supporting Azure administration, especially as it relates to IAM functions

1-2 years of experience with API integrations for IAM products

AWS associate certificate minimum, AWS Certified Security – Specialty preferred

ITIL familiarity or certification highly desired

Other IAM related or Security certifications (such as CISSP) a plus