Title: Senior Engineer: Zero Trust and IAM

What we look for

Required

• 5+ years’ experience implementing enterprise Identity and Access Management (IAM), Privileged Access Management (PAM) solutions (e.g. Saviynt, Okta, Sail Point, Ping Identity, Omada, Microsoft Identity Manager, Beyond Trust, Cyber Ark or equivalent IAM solution) in client environments.
• Experience developing technical strategies, architectures, and roadmaps.
• Outstanding communication and presentation skills. Able to articulate complex, technical concepts to non-technical audiences.

Preferred

• Experience hardening security for Active Directory, Windows, nix OS.
• Good knowledge of software development principles and design patterns
• Experience with IDaaS providers such as Microsoft, Okta, Ping Identity, Google Cloud Identity
• Experience with cloud architectures particularly Azure, AWS, GCP native IAM controls.
• Experience with Identity Governance processes and solutions such as Saviynt, Sail Point, Ping Identity or equivalent.
• Experience with Microsoft 365, Active Directory, SAML, OIDC
• Knowledge of Applied Cryptography and PKI
• Development knowledge e.g. Python, Java, C#, .NET, Web Services (SOAP/REST/RESTful, APIs), Shell programming/scripting
• Strong interpersonal and communication skills to build / maintain ongoing business
• Act as a key influencer in IAM proof of concepts (POCs), requests for proposals (RFPs), and vendor selection
• Experience with User Behavior Analytics
• Experience with Workday, SAP, Salesforce
• Experience with MDM capabilities such as Intune or Air Watch
• Understanding of trends and regulations to ensure effectiveness and compliance with all regulations and frameworks (NIST, HIPPA-HITECH, HITRUST, PCI, GDPR)
• Excellent written and verbal communication and organizational skills

Certifications

• CISSP, or SANS, GIAC, CIMP a plus

• OKTA – Professional or Consultant is a plus

• Google/AWS/Microsoft Professional Cloud Architect is a plus