Security Architect (Architecture, Development)

Position : IAM Security Engineer Location : Onsite 4 days a week in Lutz FL Duration : 6-month contract to hire The goal is not to hire administrators or analysts performing day-to-day operational work. OpenKyber already provides Tier 1/Tier 2 support and routine administration. The organization needs senior-level IAM and Data Security professionals who drive maturity, innovation, and strategic execution. Someone who can provide strategic direction, mature the organization's use of the platform, and guide future CyberArk/PAM capabilities. Privileged Access Management (PAM) The organization needs senior-level IAM and Data Security professionals who drive maturity, innovation, and strategic execution. Roughly 5+ years preferred Automate manual processes where possible Develop roadmaps and execution plans Partner with OpenKyber rather than perform outsourced operational tasks Have engineering/problem-solving mindsets rather than ticket-processing backgrounds POSITION CONCEPT The IAM Security Engineer is responsible for operating the company's information security systems, ensuring that all procedures are followed on a daily, weekly, and monthly basis. Provides expert level support, within a team environment, for all systems used to secure the enterprise information technology assets, the scope includes all network infrastructure, operating systems, and web server platforms throughout TECO Energy and its subsidiaries. Direct assistance with the development and enhancing of IAM systems including SSO, authentication, and access controls ensuring confidentiality, integrity, and availability of IAM systems and data. Provides IAM Security support for the TECO environment primarily focusing on SAP and Non-SAP Corps applications, NERC Applications. Responsible for adhering to established policies, following best practices, developing, and possessing an in-depth understanding of exploits and vulnerabilities, resolving issues by taking the appropriate corrective action, or following the appropriate escalation procedures. Supports the enforcement of corporate, regulatory, and risk management policies and assists in developing, maintaining, and publishing corporate IAM security standards, procedures, and guidelines for enterprise computing platforms. Position will be responsible for collaborating with multiple business units across Tampa Electric (TEC), Peoples Gas (PGS), New Mexico Gas (NMG), and Emera. Collaborate closely with teams including Cyber Security, Human Resources, RPA, and Lines of Business (LoBs) to create efficient and user-friendly IAM solutions. (20%) Lead, design, and implement access control policies and authorization mechanisms to govern user access to systems, applications, and data. Enforce the principle of least privilege to minimize security risks. (20%) Design, Implement and maintain IGA processes, including role-based access control (RBAC), certification, and compliance monitoring. Conduct regular access reviews and audits to ensure compliance with policies and regulations. (20%) Enforce security policies related to authentication, password management, and session management. 10%) Serve as Subject Matter Expert (SME) for audit, compliance, and regulatory efforts pertaining to IAM, SOX, and PII through investigating, documenting, and reporting to management. (Integrate applications to enable seamless and secure authentication across multiple systems. (Advanced Knowledge of position based security and how roles are assigned to positions on the org structure. This includes advanced troubleshooting of access issues related to position-based security Advanced knowledge of how structural authorization is used via the org structure to restrict access to HR data. Authorizations are based on a user's position within the org structure. Should also have advanced knowledge of the other configuration, organizational structure, and structural profile considerations, which govern what users, can do & on what HR data they can operate Advanced/Expert knowledge of the use of reporting tools and privileges concepts Advance knowledge of Customizing IAM solutions to align with specific business needs and processes and Integrate IAM systems with other applications, directories, and platforms. Advanced knowledge of Reporting tool security as it relates to securing access to various reports, applications, connections, WEBI's, performing certain functions within certain related objects along with creating users. Advanced knowledge of the SAP portal architecture and user administration and how it handled through portal frontend along with troubleshooting knowledge of said architecture. Perform SAP security and authorizations duties, including Portal Roles, Single-Sign-On, Directory services, and securing Internet Transaction Server / web services Advanced knowledge of established system security control policies as it relates to GRC. Ability to analyze application authorization/privileges assignments and segregation of duties (SOD) conflicts, works with internal audit and compliance teams to resolved identified violations. Functional knowledge and implementation experience of GRC Access Control Working knowledge of the processes that ensure compliance with NERC, CIP, SOX, NIST and PCI; Preferred: General knowledge of Active Directory (AD) or other LDAP Directory Services, especially querying/updating through scripts/programs Multi-Factor Authentication (MFA) technology skills deploying and supporting MFA technology for internal and internet-facing application requirements. Single Sign-On (SSO) technology skills deploying and supporting Single Sign-on (SSO) applications within an organization. Federated SSO - Security Assertion Markup Language (SAML) and/or OpenID Connect (OIDC) skills required to support both internal and vendor authentication. The organization needs senior-level IAM and Data Security professionals who drive maturity, innovation, and strategic execution. Core Hiring Philosophy Target candidates who: 90%+ Program maturity Engineering Roadmap execution Integration planning Process improvement Partner governance Automation Audit readiness improvements Less than 10% Routine operational work Manual certifications Administrative tasks Examples: Expanding integrated applications from 7 to 14 Building IAM roadmap execution plans Identifying non-human identity gaps Developing PKI/certificate management strategies Improving audit evidence collection through automation Desired IAM Candidate Profile Experience Strong candidates with less experience may be considered if they demonstrate significant accomplishments Preferred Background Experience with: CyberArk / Palo Alto PAM IGA platforms Microsoft Identity SSO Access Management Authentication systems Nice-to-have certifications : CyberArk certifications IGA certifications Microsoft identity certifications Ideal Traits Engineering mindset Problem solver Process improvement focus Ability to build programs from the ground up Strong analytical skills Self-directed

For applications and inquiries, contact:View email address on us.fitly.work.