Architecture/Systems Design Senior Analyst

ABM is currently seeking a highly motivated and experienced Sr. Engineer, Identity & Access Management (IAM). The 
IAM position directly reports to the Director, Systems Engineer & Operations. The Identity and Access Engineer (IAE) will 
play a vital role in safeguarding ABM’s digital assets by ensuring that only authorized individuals have access to the right 
resources. They will work closely cross-functional with InfoSec and CoreTech engineers, administrators, and architects 
to implement and maintain IAM solutions, including user provisioning, authentication, and access control systems. 

Responsibilities: 

Specific job duties or deliverables that the position requires which will also measure performance: 

1. IAM System Design and Implementation Management: 
- Assist in the creation, modification, and deletion of user accounts and access privileges in various 
systems and applications. 
- Conduct regular reviews and audits of user accounts to ensure compliance with security policies. 

2. Privileged Access Management: 
- Provide direct configuration and maintenance of PAM solutions such as Delinea, password vaulting, 
service account compliance, and related policies. 
- Assist directly in migration and implementation of PAM solutions. 
 

3. Authentication and Authorization: 
- Help in the configuration and maintenance of authentication methods such as single sign-on (SSO), 
multi-factor authentication (MFA), and password policies. 
- Collaborate in the definition and management of role-based access control (RBAC) policies. 
 

4.Provisioning and De-provisioning: 
- Assist in automating user provisioning and de-provisioning processes to improve efficiency and 
security. 
- Ensure that employees have access to the appropriate resources during their employment lifecycle. 
 

5. Access Policy Management: 
- Create and enforce access control policies and security standards in alignment with regulatory 
requirements. 
- Monitor and review access policies and make adjustments as necessary. 

6. Access Governance: 
- Participate in access reviews and certification processes to minimize access rights and permissions 
that are no longer required. 
- Work on IAM reporting and analytics to identify and mitigate risks. 
 

7. Security Policy and Compliance: 
- Follow security policies and industry standards to maintain a secure IAM environment. 
- Collaborate with senior engineers to ensure compliance with regulations and standards (e.g., GDPR, 
HIPAA, NIST). 
 

8. Troubleshooting and Support: 
- Assist in resolving IAM-related incidents and provide support for end-users who encounter access 
issues. 
- Collaborate with the IT Service Desk and other relevant teams to resolve access problems. 
 

9. Collaboration and Documentation: 
- Collaborate with cross-functional teams, including IT, security, and compliance teams, to understand 
business requirements. 
- Maintain comprehensive documentation of IAM processes, policies, and configurations. 
 

10. Training: 
- Provide guidance and knowledge transfer to junior IAM staff and end-users on best practices in 
access management. 
 

Required Qualifications: 

- A bachelor's degree in computer science, information technology, or a related field is preferred. 
- Knowledge of authentication methods, directory services, and access control systems. 
- Strong oral, and written communication skills 
- Customer Facing Exposure is a must.
- Strong working knowledge of PAM solutions, including implementation and maintenance
         -Delinea
         - CyberArk
- Strong problem-solving skills and attention to detail. 
- Strong project management skills and the ability to work in a team environment. 
- An eagerness to learn and stay updated on the latest developments in IAM and cybersecurity. 
- Good understanding of LDAP concepts and working experience with at least a few of the 
following technologies: 
           -Azure Active Directory, SSO, MFA 
           - Active Directory (on-prem) 
- Should have the ability to understand customer scenarios and requirements (may include 
integration situations) and be capable of suggesting solutions. 
- Should have good knowledge of current IDM, strong Authentication, and PKI (Public Key 
Infrastructure) technologies and products. 
- Certifications in any of the IAM products would be an added advantage

Preferred Qualifications: 

- One or more of the following certifications in area of specialty are preferred. Examples include 
CompTIA, CISSP, CSSLP, CISA, CISM, GIAC certs, ITIL, CFE, CNP, CEH 
- ISIM support