The Identity Security Engineer is a pivotal member of the Identity and Access Management team, responsible for ensuring efficient and secure user access across the organization. This role focuses on improving the user onboarding experience, streamlining employee transfers, and guaranteeing compliance with termination policies to maintain the highest level of security and operational efficiency. This role will be the main owner of the Bank’s Identity Governance and Administration platform (IGA), and act as a subject matter expert on identity and access management (IAM) technologies and processes, implementing solutions and providing support to the organization.
A key aspect of this role is creating and maintaining robust IAM workflows and automations and establishing clear service level agreements (SLAs) for onboarding new users, and other key IdAM processes. This role will facilitate developing key performance indicators (KPIs) to measure the effectiveness of IAM processes and drive continuous improvement. This includes collaborating closely with various teams, such as Cyber Security, Human Resources, RPA, and Lines of Business (LoBs), to implement and optimize user-friendly IAM solutions.
Principal Duties & Responsibilities:
- Onboarding and User Lifecycle Management:
- Develop and implement streamlined processes for new user setup, ensuring a positive and efficient onboarding experience that meets defined SLAs.
- Oversee user access modifications and transfers, ensuring appropriate permissions are maintained throughout employee lifecycle changes.
- Implement and strictly enforce procedures for user access termination, minimizing security risks associated with departing employees.
- IAM System Management:
- Manage the lifecycle of IAM solutions, including releases and integrations with other systems.
- Work with the design, implementation, maintenance, and troubleshooting of the organization's automated access control and identity management systems.
- Utilize programming skills to customize and enhance IGA platforms, ensuring they meet the organization’s business and compliance requirements.
- Develop and maintain scripts and automation for IAM processes.
- Troubleshoot and resolve technical issues related to IAM platforms and services.
- Collaboration and Improvement:
- Work closely with Cyber Security, Human Resources, RPA, and LOB teams to create efficient and frictionless IAM and SSO solutions.
- Identify and address process deficiencies, implementing improvements to enhance the overall efficiency and effectiveness of IAM operations.
- Supports development and implementation of IAM KPIs and KRIs, including the development of scorecards/dashboards.
- Security and Compliance:
- Ensure IAM solutions comply with relevant security standards, policies, and regulations.
- Assist with internal and external audit and regulatory bodies during security assessments and audits of IAM systems.
- As a backup for other IAM professionals, conducts re-certifications of special user access reviews to ensure ongoing compliance with security policies and regulations.
- Continuous Learning: Stay abreast of technological and threat environment changes that impact the IAM function, assist with creating and executing a comprehensive IAM vision to meet those challenges.
