Identity & Access Management Security Engineer Senior

Overview The Identity Security Engineer is a pivotal member of the Identity and Access Management team, responsible for ensuring efficient and secure user access across the organization. This role focuses on improving the user onboarding experience, streamlining employee transfers, and guaranteeing compliance with termination policies to maintain the highest level of security and operational efficiency. This role will be the main owner of the Bank’s Identity Governance and Administration platform (IGA), and act as a subject matter expert on identity and access management (IAM) technologies and processes, implementing solutions and providing support to the organization. A key aspect of this role is creating and maintaining robust IAM workflows and automations and establishing clear service level agreements (SLAs) for onboarding new users, and other key IdAM processes. This role will facilitate developing key performance indicators (KPIs) to measure the effectiveness of IAM processes and drive continuous improvement. This includes collaborating closely with various teams, such as Cyber Security, Human Resources, RPA, and Lines of Business (LoBs), to implement and optimize user-friendly IAM solutions. Principal Duties & Responsibilities: Onboarding and User Lifecycle Management: Develop and implement streamlined processes for new user setup, ensuring a positive and efficient onboarding experience that meets defined SLAs. Oversee user access modifications and transfers, ensuring appropriate permissions are maintained throughout employee lifecycle changes. Implement and strictly enforce procedures for user access termination, minimizing security risks associated with departing employees. IAM System Management: Manage the lifecycle of IAM solutions, including releases and integrations with other systems. Work with the design, implementation, maintenance, and troubleshooting of the organization's automated access control and identity management systems. Utilize programming skills to customize and enhance IGA platforms, ensuring they meet the organization’s business and compliance requirements. Develop and maintain scripts and automation for IAM processes. Troubleshoot and resolve technical issues related to IAM platforms and services. Collaboration and Improvement: Work closely with Cyber Security, Human Resources, RPA, and LOB teams to create efficient and frictionless IAM and SSO solutions. Identify and address process deficiencies, implementing improvements to enhance the overall efficiency and effectiveness of IAM operations. Supports development and implementation of IAM KPIs and KRIs, including the development of scorecards/dashboards. Security and Compliance: Ensure IAM solutions comply with relevant security standards, policies, and regulations. Assist with internal and external audit and regulatory bodies during security assessments and audits of IAM systems. As a backup for other IAM professionals, conducts re-certifications of special user access reviews to ensure ongoing compliance with security policies and regulations. Continuous Learning: Stay abreast of technological and threat environment changes that impact the IAM function, assist with creating and executing a comprehensive IAM vision to meet those challenges. Qualifications 5-7 years of prior experience in the following IAM Technologies: IAM, IGA, SSO, MFA, Active Directory, Digital Certificates, and Certificate Authority. Experience leading IAM delivery processes to ensure automation, security, and governance best practices. Have led, deployed, or been heavily involved in enterprise rollout of IAM platform solution previously. Have expert knowledge of IAM concepts such as Least Privilege, Privilege Access, Roles and Data mining, Segregation of Duty (SoD) and Role Based Access Control. Must be comfortable working within IAM/IGA platforms, including building customer workflows, connectors, and other customization that would be required to manage across a multitude of systems. Proficiency in programming languages such as Java, Python, or PowerShell, particularly in the context of IGA platforms. Strong knowledge of IAM and security Best Practices and Guidelines. Implementation based on risk, criticality, and complexity. Knowledge and experience with Identity Management solutions, Kerberos, SSO, OAuth, SAML, OIDC, SWA within the Okta SAAS. Experience with SailPoint, Okta, Microsoft Azure AD, or a similar platform preferred. Ability to work with technical and non-technical business owners. Very strong ability to work collaboratively across interdisciplinary teams and manage relationships across multiple areas of the business. Excellent verbal and written communication skills, including the ability to effectively communicate with internal and external clients. Must have the ability to work independently and to carry out assignments to completion within the parameters of instructions given, prescribed routines, and standard accepted practices. Must be proficient with MS Office (Word, Excel, and Outlook). Licenses & Certifications Relevant certifications such as CISSP, CISM, or certifications specific to IAM technologies. Education Bachelor's Degree in Computer Science, Data Science or related field (Required) Relevant certifications on IGA / IAM (Preferred) Special Instructions to Candidates City National Bank of Florida is an Equal Opportunity Employer and is committed to providing equal employment opportunities to all applicants. We do not discriminate on the basis of race, color, religion, sex, pregnancy, national origin, age, disability, genetic information, protected veteran status, or any other status protected under federal, state, or Florida law. City National Bank of Florida complies with the Americans with Disabilities Act (ADA) and applicable Florida laws. Qualified individuals with disabilities who require a reasonable accommodation in order to complete the online application or participate in the hiring process may contact our Human Resources Talent Attraction Department View email address on click.appcast.io. #J-18808-Ljbffr