Engineer, Identity & Access Security

Enterprise Products•Houston, TX

About The Position

The Identity & Access Security Engineer will work as part of the IT Security & Compliance’s Identity & Access Management (IAM) team to manage risk by architecting, engineering, and administration of the identity and access management systems of the organization, including identity governance tools, multifactor authentication, privileged access management, and other identity sources. The ideal candidate will be a subject matter expert on identity architecture and take an ownership role in identity management. This person will assist application teams with identity and access integrations (LDAP, SAML, etc.). They will also collaborate within IT and with other departments to promote secure practices, improve information security processes, and to develop standards related to identity and access management. Other responsibilities include, but are not limited to: Participate as a key member of projects related to Identity Governance and Administration (IGA), Privileged Access Management (PAM), and Multifactor Authentication (MFA) projects, including identity lifecycle management, access provisioning & de-provisioning, compliance policy & workflow implementation, access certification, etc. Documentation of process, guidelines, standards, configurations, and technical specifications, including network & system architecture diagrams. Develop and document test cases, test plans, as well as perform unit and peer testing. Administration of software and tools used to support identity & access management. Identify opportunities for improvement and enhance the maturity of the identity & access management function. Develop methods to automate elements of the identity & access management function. Available for problem resolution 24x7. Performs root cause analysis for any assigned problem. Adheres to and supports change management policy/procedures, as well as all other company policies and procedures. Monitors and tests supported systems during maintenance windows for patch management and system changes, which are conducted outside of business hours. Other projects as assigned.

Requirements

College or technical school degree is preferred.
Relevant certifications are preferred.
Substantial knowledge and experience in the architecture, operation and administration of the following: Privileged access management (CyberArk, Lieberman, Thycotic, etc.) Identity governance (SailPoint, Saviynt, etc.) Windows Active Directory LDAP
Extensive background in IT Infrastructure and applications.
Experience working in medium to large scale, enterprise environment consisting of 10,000+ user accounts and 1,000+ servers.
3+ years of applicable professional experience that substantially includes the following: Privileged access management architecture and administration Identity governance architecture and administration Windows Active Directory architecture and administration LDAP architecture and administration
Self-motivated and able to work with limited supervision.
Project management capabilities and reporting skills.
Strong organization and time management skills.
Understanding of business strategy and the impact of IT on those strategies.
Exceptional customer support and interpersonal skills.
Excellent troubleshooting and problem-solving skills.
Experience working in a demanding IT environment.
Ability to work and contribute to a team environment to accomplish overall team objectives.

Nice To Haves

Experience with multifactor authentication architecture and administration is preferred.
Experience with in one or more of the following is preferred\: Powershell, SQL, Oracle, Java, C#.

Responsibilities

Participate as a key member of projects related to Identity Governance and Administration (IGA), Privileged Access Management (PAM), and Multifactor Authentication (MFA) projects, including identity lifecycle management, access provisioning & de-provisioning, compliance policy & workflow implementation, access certification, etc.
Documentation of process, guidelines, standards, configurations, and technical specifications, including network & system architecture diagrams.
Develop and document test cases, test plans, as well as perform unit and peer testing.
Administration of software and tools used to support identity & access management.
Identify opportunities for improvement and enhance the maturity of the identity & access management function.
Develop methods to automate elements of the identity & access management function.
Available for problem resolution 24x7.
Performs root cause analysis for any assigned problem.
Adheres to and supports change management policy/procedures, as well as all other company policies and procedures.
Monitors and tests supported systems during maintenance windows for patch management and system changes, which are conducted outside of business hours.
Other projects as assigned.