•Identity and Access Management (IAM) Design: Design and architect IAM solutions for cloud-based applications and services, ensuring scalability, security, and compliance with industry standards.
•User Lifecycle Management: Manage the end-to-end lifecycle of user identities, including provisioning, de-provisioning, access requests, and access revocation.
•Single Sign-On (SSO) Implementation: Implement and maintain SSO solutions to streamline user authentication and authorization processes across various cloud and on-premises systems.
•Role-Based Access Control (RBAC): Define and enforce RBAC policies to grant appropriate permissions to users and groups based on their roles and responsibilities.
•Identity Federation: Establish and manage identity federation relationships with trusted partners and external identity providers.
•Access Reviews and Auditing: Conduct regular access reviews and audits to ensure compliance with security policies and industry regulations.
•Incident Response: Collaborate with the security team to investigate and respond to identity-related security incidents and breaches.
•Security Policy Enforcement: Ensure that IAM policies and controls are consistently enforced to mitigate security risks.
•Documentation and Training: Create documentation and provide training to end-users and IT staff on IAM best practices and procedures.
•Monitoring and Alerts: Set up monitoring and alerting systems to detect and respond to suspicious or unauthorized activities related to identity and access management.
•Compliance and Reporting: Assist in compliance efforts by generating reports, documenting security controls, and participating in audits.
Requirements •Bachelor's degree in computer science, information technology, or a related field (or equivalent experience).
•2+ years of experience with scripting languages; python, PowerShell, bash, etc.
•2+ years of experience in cloud identity and access management, preferably in AWS, Azure, or Google Cloud Platform.
•Strong knowledge of IAM protocols, standards, and technologies (e.g., OAuth, OpenID Connect, SAML).
•Knowledge of cybersecurity best practices and compliance standards (e.g., NIST, GDPR, HIPAA).
•Excellent problem-solving skills and attention to detail.
•Strong communication and interpersonal skills.
•Relevant certifications (e.g., AWS Certified Security - Specialty, Certified Identity and Access Management Professional) are a plus.
•Bi-lingual in English and Spanish; Portuguese is a plus.
•Experience with javascript and Python Lambda functions •Experience operating within Agile/Scrum delivery methodologies.
•Comfortable dealing with ambiguity and working through change.
•Works well on a team; supplemented by the ability to work with minimal supervision.
