Description

Design and engineer omni-channel IAM solution architectures to support workforce transformation, defining standard patterns for digital, voice, and paper channels based on target state IAM.

Responsibilities

• Develop standard patterns for digital, voice, and paper channels based on target state IAM architecture.
• Create engineering diagrams and infrastructure-as-code examples to support solution design and technical discovery.
• Design architecture for identity records covering employees, contractors, and robots.
• Build use cases and role models for birthright access and identity management system (IDMS) implementation.
• Engineer access management services including registration, authentication, authorization, and de-provisioning patterns.

Required Skills

• 5-7 years of experience in IAM solution architecture and engineering design patterns.
• Deep technical understanding of IAM solutions from vendors such as Microsoft, Okta, and Quest.
• Expertise in IAM protocols including SAML, SPML, XACML, SCIM, OpenID, and OAuth.
• Strong experience with Directories, SSO, Federation, Delegated Administration, and API gateways.
• Hands-on experience with App Gateways and App Proxies.
• Functional knowledge of MFA, PAM, and Risk-Based Authentication.
• Familiarity with NIST SP 800-63 Digital Authentication standards and NIST Cybersecurity Framework (CSF).
• Experience working across multiple teams to integrate IAM with CMDB and ITSM systems.

Preferred Skills

• Directory services design experience with AD and AAD.
• Scripting and implementation experience.

Key Skills

Education

Bachelor’s in Computer Science