Identity and Access Management Expert

Purpose

The IAM Expert is responsible for the development, management, and oversight of the organization’s identity and access management systems. This role involves designing and implementing IAM solutions to ensure that access to IT systems is secure, efficient, and in compliance with relevant policies and regulations.

Areas of responsibility

Design & Implementation

 Develop and implement IAM policies, procedures, and technologies to protect the organization’s digital assets.

 Collaborate with business and IT stakeholders to gather requirements and design IAM solutions that meet the organization's needs.

 Lead the design and implementation of IAM solutions, ensuring they are scalable, secure, and in compliance with global standards and best practices.

 Manage the lifecycle of IAM solutions, including provisioning, de-provisioning, role-based access control (RBAC), and identity federation.

 Formulate RFQs/RFPs for IAM solutions vendors (UserCube, Entra-ID), evaluate their proposals, and present the best-suited solutions to decision-makers.

 Document and present IAM architectures to technical experts and business stakeholders, ensuring alignment with business goals.

 Utilize orchestration tools to automate identity lifecycle management tasks and integrate IAM processes with broader IT automation frameworks.

Security & Compliance

 Ensure IAM solutions adhere to security standards and regulatory requirements.

 Monitor and audit IAM systems to detect and respond to security incidents, ensuring timely resolution and compliance with incident management processes.

 Contribute to the development of security policies, procedures, and controls related to identity and access management.

 Regularly assess IAM systems and processes to identify areas for improvement, implementing enhancements as necessary.

 Incorporate responsibilities related to IGA (Identity Governance and Administration) tools and practices to ensure proper identity lifecycle management, including access reviews and certification processes.

 Emphasize the importance of Zero Trust principles in the IAM strategy, ensuring that no entity is trusted by default and that all access is continuously verified.

 Introduce the exploration and potential integration of AI/ML technologies for anomaly detection and predictive access management.

 Highlight the need for close collaboration with cybersecurity, legal, and compliance teams to ensure IAM strategies align with broader security policies and regulatory requirements.

Operation&Support

 Provide L3 support during incident and problem management processes, acting as the IAM subject matter expert.

 Lead troubleshooting efforts for IAM-related issues, working closely with IT operations and security teams to resolve incidents.

 Ensure the consistent and secure operation of IAM solutions, coordinating with other IT teams to manage changes and updates.

 Include responsibilities related to mentoring junior staff and providing training sessions on IAM tools and best practices to other teams within the organization.

 Introduce the tracking and reporting of KPIs related to IAM, such as access request fulfillment times, the number of security incidents related to identity, and compliance audit scores.

Expected results

 Effective and secure IAM systems that protect the organization’s digital assets.

 High-level to low-level design documentation for IAM systems.

 Consistent and compliant IAM practices across the organization.

 Timely and effective resolution of IAM-related incidents and problems.

Required skills and qualifications

 5+ years of experience in IAM, IGA or related fields.

 Strong technical knowledge in IAM technologies and practices, including SSO, MFA, RBAC, and identity federation.

 Expertise in Azure AD (hybrid identity management), CyberArk, and Okta.

 Good understanding of IT security principles and practices.

 Experience in managing IAM systems in a multi-location, multi-cultural environment.

 Strong documentation and communication skills.

 Proficiency in English.

 Good knowledge of IT operations and security.

 Knowledge of industrial context appreciated.