Identity Access Management Security Engineer

Job Description

Company: Highmark Health

Location: Ashley, US

## Identity Access Management Security Engineer

At Highmark Health we are hiring an Identity & Access Management Security Engineer who will participate in the development, testing, implementation, and integration of Identity and Access Management systems and solutions. This role supports IT internal teams to uphold strong identity access management practices, and includes monitoring and maintenance of IAM systems, training and communication of IAM processes, and advising on IAM solutions and best practices.

You will be expected to: develop, test, implement, and integrate Identity and Access Management (IAM) systems and solutions; perform basic integration testing; execute engineering tasks that protect information resources against unauthorized use, inappropriate degrees of access, disclosure, damage and/or loss; and leverage problem solving and data analysis skills to keep projects on time. Troubleshooting and managing resolution of issues related to identities, systems, access, accounts, authentication, authorization, entitlements, and permissions is an ongoing part of the role. You will determine and recommend appropriate responses to more complex problems by assessing impact and prioritization, and execute maintenance, patching, operating, and monitoring of IAM systems. The role will also help facilitate continuous adoption, training, communication, and education of IAM capabilities, functions, and standards while utilizing and refining reusable strategies, service components, libraries and frameworks to support enterprise-level IAM services.

This position maintains awareness of changes in legal, regulatory, and technology environments that may affect operations, and ensures senior management and staff are informed of changes in a timely manner. Attendance at meetings, seminars and conferences and maintenance of any required or desirable certifications is expected, as applicable. Other duties as assigned.

Experience and technical requirements we preserve exactly:

– Required 5 years of experience in Information Security, IAM Engineering and/or Systems Analysis.

– 3 years’ Experience with IAM concepts such as identity life cycle management, role-based access control, authentication, authorization, access control, multi-factor authentication, single sign-on and cryptography.

– 3 years’ Experience with: Identity Access Management Platforms such as: Sail. Point, Saviynt, Dilinea, Cyber. Ark, Duo, OIM, OAM, Ping Identity, Secure. Auth, Radiant. Logic, Centrify, Azure AD, RACF.

– Programming/Scripting languages such as: Java, C#/C++, Java Bean. Shell, XML, Unix shell scripting, Java. Script, Power. Shell, Python.

– Supporting Technologies and standards: Active Directory, LDAP, Oracle, SQL server, SQL query, Linux/Unix, Windows platform, Apache, IIS, Web. Sphere, Weblogic, JBoss, SAML, OAuth, OIDC, FIDO, SCIM.

Preferred specifics retained verbatim:

– Preferred 3 – 4 years of experience with Sail. Point Identity. IQ that includes following: Providing technical support for, including troubleshooting, diagnosing, and resolving issues related to provisioning, deprovisioning, access requests, certifications, and compliance. Perform routine maintenance tasks, including patching, upgrades, and system checks for the Sail. Point environment.

– 3 years’ Experience working within SAFe Agile framework.

– 3 years’ Experience in financial, healthcare, or other regulated industries.

Skills (as listed):

– Knowledge of HITRUST CSF, NIST 800-83 cyber security framework, PCI, HIPAA, HITECH, COBIT, ISO 27001/2, and ITIL3.

– Identity Access Management Platforms: Systems integration or software engineering of identity and access management (IAM) solutions such as Sail. Point, Saviynt, Di. Linea, Cyber. Ark, Duo, OIM, OAM, Ping Identity, Secure. Auth, Radiant. Logic, Centrify, Azure AD, RACF.

– Programming language: Java, Java Beanshell, C#/C++.

– Directory Services: Active Directory, LDAP, virtual directory services.

– Database Services: Oracle, SQL server, query language, stored procedures.

– Operating Systems: Linux/Unix, Windows platform.

– Web/application Servers: Apache, IIS, Web. Sphere, Weblogic, JBoss.

– Scripting languages: Unix shell scripting, Java. Script, Power. Shell.

– Industry standard Web Access Management (WAM) and related protocols: OAuth, OIDC, FIDO, SCIM, LDAP v3, SAML.

– Familiarity with secure SDLC best practices.

– Knowledge of Microsoft Apps and Suites, Windows server, Share. Point, etc.

– Strong teamwork and inter-personal skills.

Education and certifications preserved exactly:

– Required: Bachelor’s or Associate’s degree in Computer Science, Information Systems or closely related discipline.

– Preferred: Master’s degree in Computer Science, Information Systems or closely related discipline.

– LICENSES or CERTIFICATIONS Required: None

– LICENSES or CERTIFICATIONS Preferred: Certified Information Systems Security Professional (CISSP); CISA; CISM; SANS Certifications; IAM Vendor Certification (like Sail. Point, Azure AD, etc.); Cloud Certification; SAFe Agile Certifications.

Logistics and other details included exactly:

– Location: PA, Working at Home

– Pennsylvania

– Position Type Office- or Remote-based

– Travel Requirement: 0% – 25%

Physical, mental demands and working conditions noted in the posting include lifting details and site requirements; the job posting also states the role may teach/train others occasionally and may require rare travel from the office to various worksites.

Pay information preserved exactly as shown in the posting:

Pay Range Minimum: $86,400.00 Pay Range Maximum: $138,600.00

Base pay is determined by a variety of factors including a candidate’s qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations. The displayed salary range does not reflect any geographic differential Highmark may apply for certain locations based upon comparative markets.

Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law.

Source: Bandana.com