Engineer, Identity and Access Management

Navitus Health Solutions is seeking an Identity and Access Management Engineer to join our team!

The Identity and Access Management (IAM) Engineer will be responsible for developing processes for account creation, modification, disabling and deleting accounts. This would include OKTA Directory, Active Directory, O365 and other downstream systems. The Engineer will work closely with application owners to develop processes to manage the entire user account lifecycle to include SSO (SAML) configurations, User Entitlement Review as well as meet audit and compliance requirements. The Identity and Access Management unit is responsible for provisioning support which includes ticket management, customer support, and knowledge of least privilege methodology with security rights, permissions and groups, experience with OKTA, Active Directory, O365, ADFS and Multifactor platforms. Due to the importance of this position, it is expected that a person supporting IAM has basic troubleshooting skills with networking and computer systems, can multitask, work in a fast-paced environment while providing excellent customer service. In addition to the primary role of IAM Engineer this position will also perform general security Engineer duties.

Is this you? Find out more below!

How do I make an impact on my team?

Design, implement, monitor and evaluate IAM security controls that protect systems and data via least privilege access model
• Configuring OKTA SSO Federations and support troubleshooting of OKTA environments. Working with our customer's IT team to configure SSO SAML Injection for seamless passing of customer Idp authentication and authorization
• Build and configure OKTA tenants for project teams
• Ensure OKTA is synchronized with our ADFS structure
• Triage and troubleshoot issue with OKTA performance. Perform health-check on the platform, working with our 3rd party support teams
• Participate in the development and maintenance of the IAM workflows that manage the provisioning of entitlements to end users
• Assist in investigations of IAM security incidents as well as document security breaches to determine extent of exposure or damage
• Install and manage IAM software designed to protect systems and information infrastructure
• Maintain IAM Awareness Training platform
• Assist in developing corporate IAM strategies, including deployment, administration, configuration and support of IAM related systems, policies and procedures
• Develop increased breadth and depth of the organization's monitoring resources, documenting and maintaining a framework to consistently assess the organization's IAM security posture
• Other duties as assigned

What our team expects from you?

• Bachelor's degree required. or 4+ years equivalent work experience (ex. IAM, System Admin, Cybersecurity Engineer)
• 2-5 years' experience in Identity and Access Management or related area
• OKTA Administrator/Architecture understanding
• Relevant certifications: CompTIA Network+, Security+, or CySA+, GIAC GSec, Associate of (ISC), CAMS, CIMP or equivalent
• Bachelor's degree in the field of Computer Science with a focus on Cyber Security preferred
• Relevant certification preferred: (ISC) CISSP, ISACA CISM, CAMS, CIMP or equivalent
• Experience with Active Directory and ADFS
• Experience provisioning for Office 365 and Azure a plus
• Experience with multifactor and SSO platforms (OKTA)
• Demonstrated experience performing control evaluations within an intricate environment
• Ability to perform analysis of data, processes, policies, procedures and/or systems
• Familiarity of regulatory requirements (i.e., PCI, HIPAA, GLBA, SOC) and frameworks (e.g., NIST, ISO 27002 etc.)
• Knowledge of "best practice" security frameworks (NIST Cyber Security Framework, NIST SP 800-53, CIS CSC, and HITRUST Security Framework) are preferred
• Experience working in a Regulated Industries preferred. Familiarity with healthcare regulatory (HIPAA, HITECH, PCI) environments is a plus
• Experience working with Agile Scrum & Kanban project management teams
• Participate in, adhere to, and support compliance program objectives
• The ability to consistently interact cooperatively and respectfully with other employees