Job Description
Job Description
Cloud Security Services is currently looking for an experienced external Identity and Access Management (xIAM / CIAM) architect with background in global, complex, and diverse xIAM environments to assist with the development of a program that will design, develop, and deploy xIAM solutions. Experience with business architecture is a plus as the right candidate will be enabling change management activities to identify areas where process controls could be made more efficient and help reduce cycle times for onboarding of new resources onto the team through training, education and mentoring activities. This is a 6-month remote opportunity with the possibility of going full-time.
Key Responsibilities :
Provide Business Architecture for Security support to meet primary goals for :
- Maturing Business Architecture for Security
Operating Model
Staffing PlanClarifying Roles & ResponsibilitiesRACI
Role-Based Curricula DevelopmentOnboarding Process ImprovementReduce Ramp-up Time for New Hires
xIAM Architecture AdvisoryAnalysis
Reference ArchitectureSolution ArchitectureThis is in order to (1) Advance client’s target state xIAM platforms / services with key capabilities around BYOID (Bring Your Own ID), common identity, modern authentication, core profile data management, consent & privacy management, etc. and (2) Meet the xIAM needs of specific applications by leveraging target state xIAM platforms / services where available, or by delivering interim solutions when requisite target state xIAM platforms / services are not yet finalized.
Responsibilities :
xIAM program architecture supportSupport to advance product roadmap milestones, as neededAlign target skill sets with business objectives and deliverablesDevelop RACI or related framework that outlines the resource roles and responsibilities in alignment with client objectivesFacilitate and develop new hire (resource) onboarding processesFacilitate and develop new hire (resource) training content and processesFacilitate playbook creation and maintenance protocolDevelop method to assess efficiency and effectiveness of onboarding processesDefine and document continuous improvement recommendationsRequired Skills :
7-10 years’ experience working in the Identity and Access management (IAM) information security space in an architecture and engineering capacity.5-7 years’ experience with the following :Global Workforce IAM
Global Consumer IAM (CIAM)Federation and single sign-on (B2B and B2C)National Institute of Standards and Technology (NIST) 800-53NIST 800-63NIST Cybersecurity Framework (CSF)Experience creating high and low level IAM architecture patternsExperience developing and implementing IAM strategies and roadmapsExperience with major IAM platforms including :Microsoft Active Directory
One Identity ManagerPing FederateExperience building roles and responsibilities (e.g., RACI matrices)Experience with process control designAbility to work as liaison between business and information security / information technologyAbility to clearly explain IAM & xIAM concepts to audiences of various levels.Broad and deep understanding of xIAM- and IAM-related capabilities, patterns, protocols, technologies, and solutions.Intimately familiar with xIAM- and IAM-related protocols such as OAuth, OIDC, SAML, LDAP,SPML, XACML, SCIM, Kerberos, PKI (certs, CA’s, sigs, etc).
Strong experience with directories, SSO, federation, MFA, RBA, delegated administration, API gateways, SOA services.Preferred Skills :
Experience with App Gateways, App Proxies, Live Chat, Chat Bots, Contact Centers, IVRs and Web Portals for CIAMGood understanding of MFA, PAM and Risk Based AuthenticationDeep technical experience with two or more xIAM technologies including Okta, Janrain / Akamai, Forgerock, Microsoft Azure B2C, Amazon AWS Cognito.Strong familiarity with adjacent technologies such as PingFederate / PingOne, IGA (e.g. : OneIM, Sailpoint), virtual directory (e.g. : Radiant), API management (e.g. : Apigee, Mulesoft).Understanding of industry and leading practices including industry standards such as the National Institute for Standards and Technology (NIST) Special Publication (SP) 800-63; Digital Authentication, NIST Cybersecurity Framework (CSF) and NIST SP 800-53; Security and Privacy Controls.Business process engineering experienceStrong project management skillsA deep overall understanding of business & technology transformation around digital identity both within and across enterprises, identity providers, and other entities.Excellent interpersonal communication skills with strong spoken and written English.Business outcomes mindset.Understanding of global regulations and compliance frameworks includingNY DFS
CCPAGDPRSolid balance of strategic thinking with detail orientation.Collaborative team worker – both in person and virtually using MS Teams or similar.Flexibility to accommodate working across different time zones.CISSP, CISM, or equivalent certification a plus.Required Education :
BS in Computer Science or related field of study, or equivalent work experiencePreferred Education :
Cybersecurity certifications such as CISSP, CISM, etc.Powered by JazzHR
W7zUgtdbku