IAM Engineer; hybrid

Position: IAM Engineer (hybrid)
Department:
Information Security Office

Salary/Grade: ITS/81

Target hiring range for this position will be between be $100,000-$105,000. Offered salary will be determined by the applicant's education, experience, knowledge, skills and abilities, as well as internal equity and alignment with market data.

This role requires two days a week onsite in our Evanston, IL office.

Job Summary:

The IAM Engineer provides support for a complex environment(s). They provide knowledge, skillsets and subject matter expertise (SME) for provisioning/deprovisioning, federation, authentication and access management, and directory services. Linux based Architecture, infrastructure and identity integrations with various technologies and services.

In this role, you will apply your knowledge and skillsets to provide support, consultation, design services, testing, documentation and implementation for Sailpoint, Forgerock SSO, Forgerock DS(LDAP), Shibboleth/SAML and Linux based systems. That will include configuration/implementation of new functionality, versioning, modify existing set ups, and provide Tier 3 support for trouble shooting various issues or incidents. You will also provide an array of consultative information, guidance and/or assistance to various groups within NUIT as well as NU schools and units.

As an IAM engineer you will need to have acquired 3 years hands on experience with Sailpoint, SSO, Shibboleth/SAML Fed, Directory, and other Identity products. You will work to ensure that IAM systems/solutions are both resilient and adaptive to an evolving Identity landscape. The IAM Engineer works on IAM projects within the AM team and provides guidance to other staff, as well as ensures compliance with all security associated with NU, state, and federal rules and regulations.

Works closely

with stakeholders throughout Northwestern to implement IAM best practices and controls.

Specific Responsibilities:

Strategic Planning

* Contribute to Risk Assessment and IAM Evaluations

* Provide Guidance and Support in evaluating vendors, open source products and internally developed systems

* Contribute to yearly planning of IAM portfolio.

* Support processes and systems around vulnerability assessments, risk analysis, and risk mitigation procedures.

* Represent the Identity & Access Management Office in collaborative initiatives, applying expertise and functioning as an integral, complementary part of the information security department.

Administration

* Act as IAM point-of-contact for assigned AM team product(s).

* Serve as Tier 3 support and an escalation point for domain technology issues that cannot be solved by Tier 1 and Tier 2 support. Perform/Own root cause analysis, problem management, documentation and communication for Identity Environment(s).

* Perform daily system monitoring, verifying the integrity and availability of all hardware, server resources, system and key processes, reviewing system logs and verifying completion of scheduled tasks/jobs.

* Create and maintain system documentation for domain technologies, including installation, configuration, and appropriate trouble shooting steps.

* Identify opportunities to innovate, extend and enhance service delivery where possible.

Engineer

* Ability to develop/code, test, integrate and deploy IAM AM team frameworks, systems and protocols.

* Assist with design and implement solutions for AM Team infrastructure
-Sailpoint, Shibboleth/SAML, Forgerock SSO, Forgerock DS/LDAP, NU Directory, Web Services, etc) for efficiency and continuous improvement opportunities.

* Ability to create scripting, read code, utilize Git for versioning and use an orchestration tool like (Cloudbees, Rundeck or other) for automation.

* Participate in projects in the design, development, testing, and implementation of technical solutions which advance strategic initiatives in IAM including projects affecting the overall posture of Northwestern University.

* Review existing Identity & Access Management practices, developing and implementing systems and solutions for additional controls, capabilities, or compliance.

* Implement recommendations for assigned projects, in consultation with project team(s) and/or other NUIT staff.

* Provide recommendations for continual process improvements across Identity & Access Management workflows.

* Draft and review documentation such as analyses of technical, administrative, or procedural issues; procedural documentation/playbooks; and team documentation.

Performance

* Collaborate with other Identity staff or NUIT staff as needed for incident remediation or incident investigations.

* Provides troubleshooting and investigation assistance to users regarding potential or actual Identity incidents.

* Partners with users and internal/external staff to monitor and/or report school, unit, or departmental level IAM issues/incidents within applications or systems.

* Develop and maintain IAM AM team expertise through university-provided and external training/seminars/courses; staying abreast of industry…