The Identity and Access Management Engineer 3 is a key member of the Global Security & Risk team, responsible for the support and maintenance of the Identity and Access Management (IAM) platform and the Privileged Access Management (PAM) platform. This role will focus on the systems associated with general and privileged access, analysis and maintenance of directory attributes, auditing and compliance, and day-to-day business support of both IAM platforms. To effectively manage the enterprise IAM and PAM platforms, this Engineer will be involved with research and day-to-day operational support, which includes the ServiceNow ticketing system. This role requires a high level of collaboration with Asurion end users in both platforms and the IAM team.
Essential Duties & Responsibilities:
- Assist in day-to-day operational requests and requirements related to the IAM platform.
- Maintain and create IAM roles as requested or assigned.
- Use problem solving skills with urgency to address major outages and emergency incidents.
- Update and manage day-to-day ServiceNow incidents and requests within service level agreement.
- Act as a point of contact (using Asurion communication platforms such as email and messaging) for IAM and PAM issues or concerns.
- Communicate compliance requirements related to role questions and additions.
- Maintain and update documentation as required.
- Diligently report issues or concerns when discovered.
- Perform quarterly access certifications as outlined in SOC1, SOC2, and Financial Requirements.
- Create and maintain access certification artifacts and documentation as required for audit.
- Provide recommendations for audit-related gaps and issues.
- Maintain documentation for applications tied to audit and the IAM system.
- Communicate audit or application concerns related to SOC1, SOC2, and Financial Requirements to management.
- Conduct frequent communication between application and business teams.
- Assist with response to identity management inquiries and incidents where IAM or directory services expertise is required.
- Update job knowledge by tracking and understanding emerging identity management practices and standards and participate in educational opportunities.
- Collaborate with Customer Trust team to address and rectify non-compliance issues, as needed.
- Perform other related duties as assigned.
Education, experience, and skills desired:
- Bachelors degree in computer science or similar education or experience in a related field.
- 1-year practical experience in a related field.
- Background in security or in information technology.
- ServiceNow or other ticketing system expertise.
- Understanding of Active Directory.
- Experience with SailPoint IIQ or other enterprise IAM platforms such as RSA, One Identity, Saviynt, Okta, ForgeRock, etc. preferred.
- Familiarity with privilege access management platforms such as CyberArk.
- Strong analytical and problem-solving skills are necessary.
- Competence in Microsoft Office products.
- Excellent communication (oral, written, presentation), interpersonal, and consultative skills in English are required.
- Ability to operate effectively in a fast-paced environment.
- Experience in meeting deadlines and adapting to frequent changes.
- Work schedule flexibility.
