Senior Information Security Analyst, Permanent Opportunity based in Cork
Exciting opportunity to become a key member of our clients Centralised Authentication Services team, contributing during phases of design, configuration, deployments, and operations in areas of Identity and Access Management (IAM). This includes Access Management (IAM), Identity Governance (IGA) and other Identity Management solutions.
This position will be a hands on in a fast paced environment, collaborating with with Business and Internal customers to deliver complex access management solution.
Key Responsibilities:
* Deliver modern access management integrations flawlessly for B2B, B2C and B2E customers using Okta, Ping, Azure AD.
* Good knowledge and understanding of IAM tools such as Okta and Okta Access Gateway (OAG)
* Good experience in Okta versions, Okta Classic and Okta Identity Engine (OIE).
* Strong experience in configuring and enabling Single-Sign On (SSO) and Multi-factor authentication (MFA) for internal external facing application systems.
* Good experience in adaptive authentication configuration solutions.
* Good experience in impersonation technology solutions such as Strata.IO
* Experience in mitigating java and spring boot framework related vulnerabilities.
* Strong troubleshooting skills and understanding of CI/CD deployment pipelines.
* Lead on large projects for Business Units to provide IAM solutions as needed in a team environment.
* Set roadmaps, develop, and implement plans for IAM across on-premises and cloud environments.
* Define and drive risk reduction practices in a scalable manner, working with all levels on access related items, problem escalation/resolution, people development and more.
* Evaluate and test IAM products and platforms, make recommendations, develop plans, and implementation.
* Continually seek ways to automate repetitive functions to improve quality and efficiency of tasks.
* Document standards, architecture, implementation procedures, and troubleshooting.
* Manage customer expectations. Keep the customer aware of the project status, critical issues, and risks. Obtain stakeholder buy in at appropriate toll gates.
* Act as contact point for vendors during evaluation, implementation, and decommissioning of identity platforms.
* Responsible for training, mentoring, directing, and validating the work of less experienced/knowledgeable team members.
* Lead on large projects for Business Units to provide IAM solutions as needed in a team environment.
* Set roadmaps, develop, and implement plans for IAM across on-premises and cloud environments.
Required Skills:
* 5+ years' hands on experience developing/configuring access management solution using Okta or other Access Management products (E.G; Auth0, Azure, ADFS etc.)
* 4-year degree in Computer Science or related field or equivalent experience.
* 5+ years of integration experience with SSO leveraging industry protocols such as SAML, OpenID Connect, OAuth and WS-FED
* 5+ years' experience in the field of Identity and Access Management
* 4+ years of strong development experience developing solutions using modern development languages (java, python, JavaScript, .net etc.)
* 3+ years' experience implementing infrastructure services authentication and authorization (AD, Kerberos, LDAP(S) etc.)
* 5+ years' experience with security compliance, governance, audit, and risk management.
* Working knowledge of cloud-based systems, virtualization, container orchestration, and common application architectures.
* Advanced experience integrating and federating different IDM technologies across multiple domains.
* Strong analytical and problem-solving skills, pride in ownership and ability to troubleshoot complex IAM issues.
* Excellent communication and interpersonal skills, with the ability to collaborate effectively with both technical and non-technical stakeholders.
* Strong technical experience in the following technologies: Okta Classic and Okta Identity Engine, ADFS, Azure, IdP, AD, LDAP
Nice to have skills:
* Advanced experience with automating user access and reporting using industry standard platforms and programming languages (PowerShell, Python, Ansible, Terraform, etc.)
* Good understanding of PKI, encryption schemes, and secure credential storage.
* Advanced understanding of Key Management, secret vaulting, and PAM with products such as CyberArk PAM, Hashicorp Vault
* Advanced manipulation of authentication and authorization tokens (SAML assertions, OAuth claims, grants, and scopes, etc.)
* Certifications such as CISSP, CISM, Okta, or Azure are a plus.