IT Security Specialist

NW Natural•Happy Valley, OR

22d•Hybrid

About The Position

At NW Natural, we offer more than rewarding career opportunities and a vibrant, inclusive work culture. We invite you to join us in providing safe and reliable utility services and renewable energy to better the lives of the communities we serve. Our vision is to be the leader in service excellence, innovation and environmental stewardship for our customers, while building on our strengths as a trusted energy provider and environmental leader for our industry. In addition to environmental stewardship, we’re also deeply committed to Diversity, Equity and Inclusion at NW Natural. Our DEI Council started 21 years ago, and today we continue to foster a culture where all employees can experience a sense of belonging, shared purpose and possibility. The Role: You’ll be a member of the Security Operations Team and collaborate with our teams on projects and operational work, as part of our security program. Your responsibilities will include people, processes, and technology. You will understand security in the context of business priorities/constraints. This is a key role in a technology organization maturing its processes and modernizing its Identity and Access Management (IAM) technology. This position will be based at our office in downtown Portland. Day to Day: Identity Management Design - Define IAM security requirements for the implementation of new applications and projects. Provide analytical and technical guidance to the team and recommend and take action to direct the analysis and solutions required. Contribute to the overall architecture of our identity and access management standards. Implement - Automate IAM processes to reduce manual effort. Work with managed service providers and peers to ensure new systems are onboarded into IAM tools successfully. Escalate and work closely with product vendors to support the technical environment. Operate - Provide IAM administration as well as maintenance of user access roles including reviewing changes in the production environments and coordinating with the key stakeholders from IT, business delivery teams, and third-party vendors. Monitor IAM activities to proactively identify both operational issues and security incidents; identify and resolve issues with IAM tools. Drive towards identity standards and processes; provide guidance on application IAM best practices. Support - Update IAM workflows in line with information security principles in response to business requirements. Ensure product/content updates occur successfully. Create and update IAM documentation (e.g., policies, standards, processes, etc.). Develop and report on key performance indicators to show the effectiveness of the identity governance administration (IGA) program. Security Consulting - Collaborate on projects to ensure that identity security issues are addressed throughout the project lifecycle. Review system designs and identify areas for security improvements. Provide ad hoc consulting on tactical identity security topics.

Requirements

Minimum three years of identity management or information security experience.
Bachelor's degree or equivalent additional work experience.
Advanced understanding of Identity Management, Identity Governance and Authentication/Authorization integration, PIV, SSO (e.g., Active Directory, ADFS, SAML, LDAP, MFA, OAuth 2.0, OIDC, etc.).
Experience with secure code development practices.
Experience with the Java/Beanshell, Python, and PowerShell programming languages
Familiarity with developing web-based APIs, HTTP-RPC, and REST.
ITIL Foundations certified or successful completion within 90 days of starting.
A solid understanding of IAM and security priorities and concepts
Technical knowledge of identity and access management technologies, mainstream operating systems, and complex applications.
You’ll interact with NW Natural's personnel at various levels and across business units to understand business imperatives.
Deep technical skills paired with collaboration will be key to your success, as will your ability to communicate IAM concepts and situations to audiences with varying levels of familiarity with these concepts.
Leadership abilities with the capability to direct other technical staff on identity security initiatives and guide team members.
You’ll get to work with minimal supervision.
Strong analytical skills to analyze identity security requirements and relate them to appropriate security controls.
Your ability to manage expectations appropriately will help and build long-term relationships.
You’ll remain current with industry trends and evolving threats.

Responsibilities

Define IAM security requirements for the implementation of new applications and projects.
Provide analytical and technical guidance to the team and recommend and take action to direct the analysis and solutions required.
Contribute to the overall architecture of our identity and access management standards.
Automate IAM processes to reduce manual effort.
Work with managed service providers and peers to ensure new systems are onboarded into IAM tools successfully.
Escalate and work closely with product vendors to support the technical environment.
Provide IAM administration as well as maintenance of user access roles including reviewing changes in the production environments and coordinating with the key stakeholders from IT, business delivery teams, and third-party vendors.
Monitor IAM activities to proactively identify both operational issues and security incidents; identify and resolve issues with IAM tools.
Drive towards identity standards and processes; provide guidance on application IAM best practices.
Update IAM workflows in line with information security principles in response to business requirements.
Ensure product/content updates occur successfully.
Create and update IAM documentation (e.g., policies, standards, processes, etc.).
Develop and report on key performance indicators to show the effectiveness of the identity governance administration (IGA) program.
Collaborate on projects to ensure that identity security issues are addressed throughout the project lifecycle.
Review system designs and identify areas for security improvements.
Provide ad hoc consulting on tactical identity security topics.

Benefits

Rich health insurance benefits with competitive employer contribution
Free access to an online wellness resources platform
Up to 23 Vacation Days
80 Hours of Sick Time
10 paid holidays and 3 floating holidays
Flexible work arrangements
3 weeks paid parental leave
Green Team / Diversity, Equity & Inclusion Council / Safety Team / Women’s Network and many other Employee Resource Groups
1500 sq foot exercise facility and secure bike room
Meaningful annual incentive bonus opportunity in addition to base salary
Competitive 401K company contribution and match
15% discount on NW Natural stock through Employee Stock Purchase Program
Up to $5250 a year in tuition reimbursement
Wellness incentive program
20% off natural gas service
Up to 30% discount at NW Natural Appliance Center
TriMet Pass for all HQ employees
Generous discounts with Verizon & AT&T Wireless