Job Description

• Provide user account life cycle management, including creating, provisioning, securing, and inactivation of access.
• Lead and participate in projects and production support operations focused on implementing Identity and Access Management (IAM) integrations and Role Based Access Control (RBAC) strategies and integrations.
• Lead and collaborate in the design, implementation, and support of the IAM technologies.
• Lead and participate in projects to ensure standard processes and procedures are implemented when rolling out new provisioning and role management points.
• Plan, build, test, manage, and update security for the protection of and access to isw systems.
• Lead the planning, development, implementation, and support of RBAC.
• Ensure all evidence of authorization is documented and archived according to best practice.
• Manage directory account permissions via RBAC.
• Act as the subject matter expert for Identity Governance and RBAC.
• Lead application upgrades, and evaluation of new technology, settings, and functionality related to IAM.
• Troubleshoot security and workflow issues independently or in collaboration with other Information Systems teams and/or stakeholders, while adhering to isw standards.
• Enforce organisational policies and procedures to ensure only authorised personnel have access to information in compliance with the Minimum Necessary Rules.
• Participate in ongoing auditing and risk assessments and implementation of audit recommendations.
• Identify and ensure dormant accounts/records are disabled using automation as much as possible; eliminate access for those who no longer need applicable information.
• Develop system access and security implementation plans derived from operational customer needs and requests.
• Develop, validate, and maintain detailed documentation on standard operating procedures, system configurations, and technical settings for internal team use, end-user support, and other teams as needed.
• Write and generate reports to perform in-depth analysis and data collection for issues associated with IAM using PowerShell or other reporting methods.
• Provide Microsoft O365 Shared Resource Management and Support (Distribution Lists, Shared Calendars, Shared Mailboxes, Mail Contacts, and Resource Calendars).
• Support the enrollment of Multifactor Authentication (MFA), Single Sign-on (SSO), and Mobile Device Management (MDM).
• Lead efficiency improvements by recommending process changes as well as developing solutions to automate and orchestrate repeatable tasks for IAM.
• Conduct account quality checks.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field (or equivalent work experience).
• A minimum of 3 years of experience in Identity and Access Management roles.
• Strong understanding of IAM principles, including authentication, authorisation, and access control.
• Excellent problem-solving skills and the ability to troubleshoot access issues promptly.
• Strong communication and collaboration skills, as this role will involve working closely with cross-functional teams and stakeholders.
• Familiarity with industry-standard IAM frameworks and compliance requirements (e.g., NIST, ISO 27001, GDPR).
• Certifications in IAM-related technologies (e.g., CISSP, CompTIA Security+, AWS Certified Security - Specialty) would be a plus.
• Strong documentation skills for maintaining IAM policies, procedures, and best practices.
• Single Sign-On (SSO): Experience in configuring, maintaining, and troubleshooting SSO solutions, with expertise in Azure, Okta, and a general understanding of key SSO concepts.
• Workday Integration: Proficiency in integrating IAM solutions with Workday to manage employee access and provisioning efficiently.
• Scripting: Proficiency in scripting languages such as Powershell, Bash, and Python to automate IAM processes, user provisioning, and access control.
• Intune Management: Proficient in managing access and security policies using Microsoft Intune for endpoint management and mobile device security.
• Multi-Domain/Network/Infrastructure: Demonstrated ability to work with multiple domains, networks, and infrastructures, ensuring seamless access and security across diverse environments.
• Cloud Environments: Proficient in IAM practices in cloud environments, specifically AWS and Azure, including role-based access control, security group management, and multi-cloud integration.

Additional Information

** At this time insightsoftware is not able to offer sponsorship to candidates who are not eligible to work in the country where the position is located. **

Learn more about our high-energy, high-performance global team. Work With Us »

insightsoftware About Us: Hear From Our Team - InsightSoftware (wistia.com)

Background checks are required for employment with insightsoftware, where permitted by country, state/province.

At insightsoftware, we are committed to equal employment opportunity regardless of race, color, ethnicity, ancestry, religion, national origin, gender, sex, gender identity or expression, sexual orientation, age, citizenship, marital or parental status, disability, veteran status, or other class protected by applicable law. We are proud to be an equal opportunity workplace.