Principal Systems Architect I

Position Overview

English Version

This is more than a job. It’s a chance to build, grow, and make a real impact

We are seeking an IAM (Identity & Access Management) Specialist to support our infrastructure security and operations.

As part of our Cybersecurity Solutions Group (CSG), this role is responsible for account life cycle management and auditing as appropriate. The IAM Specialist utilizes defined workflows to support infrastructure and services access through users, groups, service principals, SSO integrations, and enterprise apps. Additionally, the IAM Specialist helps support the security operations of CSG as required.

Responsibilities

The selected candidate will follow policies and procedures for the IAM program to:

• Provide end-user technical support to enable user services and app access
• Collaborate with corporate teams to implement, manage and ensure user access to systems, applications, and data.
• Monitor compliance with policies, regulations, and customer requirements.
• Perform assessments and audits of the IAM systems as directed by CSG management.
• Investigate incidents and recommend corrective actions.
• Update processes and procedures as necessary.
• Value documentation creation and communication, leverage technical experience to enhance team collaboration, and be self-driven to solve problems with a focus on achieving the team mission.
• Collaborate with the CSG Management and various IT Teams to support the IT Security Mission
• Provide support for M365, Entra ID and other IAM related functions
  • Participate in projects and production support operations focused on implementing Identity and Access Management (IAM) integrations and Roles Based Access Control (RBAC) strategies and integrations.
  • Collaborate in the design, implementation, and support of the IAM technologies.
  • Participate in projects to ensure standard processes and procedures are implemented when rolling out new provisioning and role management points.
  • Support the enrollment of Multifactor Authentication (MFA) and Single Sign-on (SSO).

Qualifications

The foundation of success is found in the ability to work with diverse technical and non-technical teams to promote the implementation of security principles into the business processes. A successful candidate must be able to communicate effectively (verbal and written) with our internal and external customers while analyzing and solving security problems collaboratively to ensure the best customer experience to our internal and external customers. And in every case, strong ethical behavior must guide the work to protect our customers and their data. The best candidates navigate the complexities of leadership in a diverse, multi-team environment. They must be able to communicate professionally, empathetically and effectively.

Other Knowledge, Skills and Abilities

• Ability to analyze data and information with an understanding of regulatory requirements as well as security frameworks and methodologies
• Meticulous attention to detail
• Strong problem-solving skills
• Ability to work comfortably under pressure and deliver on tight deadlines
• Ability to maintain the highest standards of confidentiality, integrity, and personal accountability

Work Experience

• Demonstrated success administrating Entra ID and M365
• Preferred 3 years relevant work experience and software experience: Entra ID/Microsoft O365

Demonstrated knowledge and/or experience in the following:

• Strong knowledge of identity and access management concepts, such as SSO, role-based access control, and identity federation.
• Experience with identity and access management tools, such as Active Directory, LDAP, and Azure AD.
• Strong understanding of authentication protocols, such as SAML, OAuth, and Kerberos.
• Familiarity with networking concepts like firewalls, VPNs, and DNS.
• Experience with Entra ID/M365 automations using PowerShell.
• Experience with at least one PAM solution (CyberArk, Wallix, Secret Server, etc.)
• Ability to troubleshoot technical issues related to identity and access management.
• Willingness to learn new technologies and keep up with industry trends.

Preferred certifications

• SC-300 – Microsoft Identity and Access Administrator ;
• AZ-900 – Microsoft Azure Fundamentals ;
• AZ-104 – Microsoft Azure Administrator.

French Version

Bien plus qu’un emploi, une opportunité de construire, d’évoluer et d’avoir un réel impact

Nous recherchons un(e) Spécialiste IAM (Identity & Access Management) pour contribuer à la sécurité et à l’exploitation de n