Architecture/Systems Design Senior Analyst

ABM is currently seeking a highly motivated and experienced Sr. Engineer, Identity & Access Management (IAM). The
IAM position directly reports to the Director, Systems Engineer & Operations. The Identity and Access Engineer (IAE) will
play a vital role in safeguarding ABM’s digital assets by ensuring that only authorized individuals have access to the right
resources. They will work closely cross-functional with InfoSec and CoreTech engineers, administrators, and architects
to implement and maintain IAM solutions, including user provisioning, authentication, and access control systems.

Responsibilities:

Specific job duties or deliverables that the position requires which will also measure performance:

1. IAM System Design and Implementation Management:

• Assist in the creation, modification, and deletion of user accounts and access privileges in various

systems and applications.

• Conduct regular reviews and audits of user accounts to ensure compliance with security policies.

2. Privileged Access Management:

• Provide direct configuration and maintenance of PAM solutions such as Delinea, password vaulting,

service account compliance, and related policies.

• Assist directly in migration and implementation of PAM solutions.

3. Authentication and Authorization:

• Help in the configuration and maintenance of authentication methods such as single sign-on (SSO),

multi-factor authentication (MFA), and password policies.

• Collaborate in the definition and management of role-based access control (RBAC) policies.

4.Provisioning and De-provisioning:

• Assist in automating user provisioning and de-provisioning processes to improve efficiency and

security.

• Ensure that employees have access to the appropriate resources during their employment lifecycle.

5. Access Policy Management:

• Create and enforce access control policies and security standards in alignment with regulatory

requirements.

• Monitor and review access policies and make adjustments as necessary.

6. Access Governance:

• Participate in access reviews and certification processes to minimize access rights and permissions

that are no longer required.

• Work on IAM reporting and analytics to identify and mitigate risks.

7. Security Policy and Compliance:

• Follow security policies and industry standards to maintain a secure IAM environment.
• Collaborate with senior engineers to ensure compliance with regulations and standards (e.g., GDPR,

HIPAA, NIST).

8. Troubleshooting and Support:

• Assist in resolving IAM-related incidents and provide support for end-users who encounter access

issues.

• Collaborate with the IT Service Desk and other relevant teams to resolve access problems.

9. Collaboration and Documentation:

• Collaborate with cross-functional teams, including IT, security, and compliance teams, to understand

business requirements.

• Maintain comprehensive documentation of IAM processes, policies, and configurations.

10. Training:

• Provide guidance and knowledge transfer to junior IAM staff and end-users on best practices in

access management.
Required Qualifications:

• A bachelor's degree in computer science, information technology, or a related field is preferred.
• Knowledge of authentication methods, directory services, and access control systems.
• Strong oral, and written communication skills
• Customer Facing Exposure is a must.
• Strong working knowledge of PAM solutions, including implementation and maintenance

-Delinea

• CyberArk
• Strong problem-solving skills and attention to detail.
• Strong project management skills and the ability to work in a team environment.
• An eagerness to learn and stay updated on the latest developments in IAM and cybersecurity.
• Good understanding of LDAP concepts and working experience with at least a few of the

following technologies:
-Azure Active Directory, SSO, MFA

• Active Directory (on-prem)
• Should have the ability to understand customer scenarios and requirements (may include

integration situations) and be capable of suggesting solutions.

• Should have good knowledge of current IDM, strong Authentication, and PKI (Public Key

Infrastructure) technologies and products.

• Certifications in any of the IAM products would be an added advantage

Preferred Qualifications:

• One or more of the following certifications in area of specialty are preferred. Examples include

CompTIA, CISSP, CSSLP, CISA, CISM, GIAC certs, ITIL, CFE, CNP, CEH

• ISIM support