Information Security Engineer

Info Security Engineer Onsite 3 Month Contract to Hire

MAJOR RESPONSIBILITIES

• The primary role of the Information Security Engineer, Information Security (IAM) is to support the daily operations of the IAM team by providing support for access management activities.
• This position will work with peers and technology owners to execute on continuous improvements with regards to IAM processes, with a primary focus on implementing Identity and Access control systems and support of core Identity and Access Management processes and system, while ensuring core assets are only accessible by authorized personnel and rights & privileges are appropriately managed.
• Key responsibilities include the support of core IAM systems, including Active Directory, Office365, Okta, CyberArk and other various applications, as well as managing requests and incidents through their ticketing system, and change control releases via the company’s change management tools.
• This role will also be responsible for designing and implementing all aspects of company identity and access management strategy – from single sign-on, self-service password request, dynamic multi-factor authentication, including expanding the scope of IAM to include 3rd parties, vendors, partners, and affiliates, as needed.
• The incumbent is also responsible for creating and implementing best practices and standards-based approaches as it relates to cloud security access controls in general and the integrations that are required for hybrid, cloud and service environments.
• Knowledge of security controls, frameworks, and standards such as PCI, HIPAA, etc. are required.

REQUIRED:

• Bachelor’s Degree from an accredited college in IT/Information Security, Computer Science, IT, Engineering or related field. In lieu of degree 5+ years of experience is required or the equivalent combination of education and experience.
• Must have at least 3+ years of implementing identity and access management solutions, Role-Based Access Control (RBAC) in a medium-large sized organization (5,000+ users) with products such as Okta, Ping Identity, DUO, SecZetta, etc.
• 2+ years of experience with Okta, configuring application SSO using OIDC or OAuth token services, Okta Access Gateway for legacy SSO, or privileged access with Advanced Server Access
• 2+ years of experience with PowerShell scripting focused on user management tasks and routines.
• 1+ years of experience with utilizing APIs using API testing tools such as Postman. • Experience with access control on at-least one large scale ERP solution. Healthcare EMR such as Epic, Cerner, or Allscripts preferred.

PREFERRED:

• One or more security certifications such as CISSP, SSCP, Security +, CISM, CISA, or equivalent / Certified Okta Professional or Certified Okta Developer is considered a plus.
• Working knowledge of cloud provisioning strategies (i.e., SCIM, JIT, etc.)
• Good understanding of API, Web Services and Microservices
• Experience in a multi-regional healthcare, retail, or dental company.

KNOWLEDGE/SKILLS/ABILITIES:

• Demonstrated experience in creating strategies, roadmaps and execution plans for successfully delivering the identity and access capabilities at other organizations.
• Must possess strong communication skills ensuring consistency from a technical to non-technical perspective and everything in between. • Knowledge of core Information Security frameworks, standards such as ISO 27001, NIST, SANS, HITRUST, HIPAA, PCI, etc. is essential, including experience using GRC tools for reporting, analysis, measurements, etc. Experience in protecting electronically protected health information (ePHI) and sensitive customer personally identifiable information is desirable.
• The ideal person will be a dynamic, ambitious, humble, technically competent, hands-on self-starter with strong communication, leadership and organizational development skills.
• Leadership capability with skills in team building and motivating people.
• Ability to plan, organize, schedule, prioritize and manage workload and resources to execute reliably in Strong Project Management skills – Ability to plan, organize based on priority. • Able to work with multiple project teams simultaneously and thrive in a fast-paced environment.
• Interpersonal and collaboration skills to partner effectively with internal business partners, vendors, consultant resources, including the ability to be both directive and collaborative as appropriate to the situation.
• Ability to multi-task effectively without compromising the quality of the work.
• Ability to respond to common inquiries from customers, staff, regulatory agencies, vendors, and other members of the business community.
• A self-motivated, reliable individual capable of working independently as well as part of a team. My3Tech Inc