As and IAM Cloud Identity Engineer, you will work on a team of information security professionals and be accountable for operationalizing and administrating enterprise focused Identity and access management (IAM) solutions where the focus lies on centralization and standardization of IAM services in the cloud. In this role, you will be required to demonstrate proficiency in identity and access management concepts as they pertain to every area of security management. Your role will also include interfacing with other business leaders and subject matter experts throughout the organization, responding requests related with Enterprise Identity access and Identity data availability to be consumed by security approved projects and initiatives.
Enterprise Identity and Access Management
Within the technology, the Global Information Security team is responsible for Enterprise IAM.The Enterprise IAM services in Wolters Kluwer has capabilities and services in the following areas:
- Directory Services (AD on Prem and Azure AD)
- Authentication services
- Privileged Access Management Services.
- Lifecycle management services
- User management services
- Zero trust access management services
The strategy is build on the following principles:
- Deliver rapid time to value, but avoid technical debt by use of Identity-as-a-service
- Enterprise level security and compliance for Wolters Kluwer application and services, without added hassles for global Workforce.
- Use IAM services within the Enterprise to help drive business value.
- Accelerate implementations by use of global platforms and cloud-based solutions.
- Invest in standardization of global IAM services and minimize the need for additional or overlapping identity repositories or tooling.
Key Responsibilities for Identity and Governance Automation lead
Contribute to the success of application modernization projects by supporting multiple customers with environment support and monitoring of the cloud environments (e.g. AWS, Azure) and their systems
- Manage access in Azure, AWS, Alibaba Cloud and Google Cloud.
- Analyze requests, finalize details and prepare changes for non-standard requests.
AWS knowledge:
- AWS SSO / Identity Center including AWS federated roles
- AWS IAM including programmatic accounts.
- AWS organizations and policies
- Azure Cloud Identity or Access automation knowledge is a pre.
- Able to automate approved bulk requests to add/remove/verify access
Azure cloud:
- Azure AD – Users
- Azure AD – static, dynamic (attribute based) and synced groups
- Azure AD – Service Principals and Enterprise applications setup and understanding how this is used.
- Azure AD – SCIM provisioning towards apps
- Azure RBAC
- Azure management groups
- Azure Cloud Identity or Access automation knowledge is a pre
- Able to automate approved bulk requests to add/remove/verify access
- Graph api automation knowledge
Job Qualifications
- Bachelor's Degree in Computer Science/MIS or equivalent
- Minimum 5+ years-of demonstrated experience in a role which is Identity and Access management related.
- Certifications in Azure and AWS, specifically in the IAM/Security side of the cloud.
- Good understanding of Identity provisioning concepts (onboarding, changes, offboarding) and possible related events which could be triggered.
- Good expertise in Microsoft Office products – Outlook, Word, Excel, PowerPoint
- An ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily-understood, authoritative, and actionable manner
- Flexible working hours to support a global operation
- ServiceNow knowledge – to work in an Cloud IAM team.
- Understanding of security in cloud environments and a demonstrated basic understanding of the technical aspects of information security, such as network security, infrastructure security, and application security
- Ability to set and manage priorities judiciously.
- Exceptionally self-motivated with a analytical, evaluative, and problem-solving abilities.
Read Full Description