Senior Identity and Access Management Engineer

ZOLL Medical Corporation is dedicated to enhancing patient outcomes through innovative technologies. The Senior Identity and Access Management (IAM) Operations Engineer will play a crucial role in the Global IT and Technology Risk organization by engineering and operating identity and access management tools, collaborating with stakeholders, and defining best practices for cloud-based security solutions.

Responsibilities:

• Design, implement, and support identity platforms and systems for managing access to all systems across the organization leveraging Azure AD and Active Directory Services
• Responsible for implementing identity standards and technologies with other applications and business systems (SAML/SSO configurations)
• Collaborate with others in the Identity and Security teams to establish standard operations, new capabilities, as well as provide input on developing access standards and reference frameworks related to Identity & Access Management
• Proliferate improvements in security access authentication (MFA and risk-based access), accelerating new integrations with systems or 3rd party solutions, working to enable new onboarding and process automation for staff entitlements, assisting in designing new Privileged Access Management (PAM) solutions and working to help integrate password self-service and improved password hygiene standards globally
• Create and implement least-privilege-based IAM solutions to meet other teams' project and access requirements
• Support user life cycle processes including, but not limited to, on-boarding and off-boarding of all types of user accounts
• Support IAM Password Management processes and processing of system access requests
• Perform administration and maintenance of identity solutions
• Perform troubleshooting of escalated issues with identity providers or integrations
• Generate tech specifications, architecture. and documentation for IAM implementations
• Collaborate in the design, development, and maintenance of user repositories and directories
• Design and develop enterprise-wide authentication solutions in Active Directory, Azure AD, and Okta
• Collaborate and partner with Global IT and business stakeholders to enable new Identity concepts, thinking, and integrations
• Coordinate the implementation of process improvements and automation, and manage escalations, issues or high-priority tasks
• Provide guidance and mentorship and assign tasks to/for technical teams

Requirements:

• BS Information technology equivalent required or
• Related experience in a technology role required
• 7+ years of industry experience required
• Experience with at least 4 of the following capabilities: SailPoint IdentityNow, CyberArk, Data Loss Prevention (DLP), Hardware Security Modules, Web Proxies, CASB, Single Sign On/Federation, Web Application Security, Online DLP, MCAS, Right Management Services required or
• Azure Information Protection, mail transfer (Exchange, M365) and network technologies (proxy, firewall, VPN, etc.) required
• Experience supporting business critical solutions and triaging production issues therein required
• Strong knowledge of risk management standards including identifying risks and solutions/remediations for minimizing
• Technical understanding across IT systems (e.g., applications, networks, LDAP, domains, etc.) and application authentication techniques
• Ability to work with an automation mind set, and proven expertise in the use and creation of PowerShell scripts
• Familiarity with vendor provided MFA and/or risk-based authentication technologies such as Azure/Okta and the integration into the authentication, authorization, and SSO process for applications and systems
• Must have an understanding of Identity Governance and Administration (IGA) for combining application and system data for access certification, RBAC, access governance
• Foundational knowledge of Identity Life Cycle Management, Runtime enforcement (APIs), Privileged Access Management, Identity federation (SAML), Conditional Access policies (Azure AD)
• Ability to communicate effectively and coordinate with IT and business stakeholders to support requests for the IAM environment
• Coordinate the implementation of process improvements and automation, and manage escalations, issues, or high-priority tasks
• Attention to detail and aptitude for analytical problem resolution
• Ability to work independently and with cross-functional teams on complex problems
• Strong analytical & problem-solving skills and experience
• Advanced troubleshooting skills and the ability to mentor junior technical staff
• Highly self-motivated and directed, with keen attention to detail