The Security Analyst/Engineer is the technical resource for access control projects within Information Security. They drive the analysis, design, and implementation of access controls to resources and application. The Security Analyst/Engineer serves as subject matter expert for other IT projects including the automation of identity and access management functions. This position participates in the audit of access controls and remediation efforts.
Acts as the Information Security subject matter expert to application development and infrastructure engineering projects. Consults the IAM automation team for requirements to automate identity and access management functions such as access request, approvals, certifications, password management, etc. Participates in the audit of access controls and remediation efforts.
Designs, implements and maintains security controls and reporting for Active Directory, Exchange, SQL Server, servers, file systems, etc. Designs and implements controls such as single-sign-on, same-sign-on, and multifactor authentication, for access to critical and sensitive applications. Analyzes and designs roles, profiles, and entitlements for access to critical and sensitive applications. Creates procedures and scripting for reporting metrics and health on access controls.
High School Diploma or equivalent required. Bachelor’s degree in Information Technology or similar field preferred.
3-5 years’ experience of AD, Exchange, Server, SQL, and Folder Security required
3-5 years’ experience of IAM Lifecycle Events required
3-5 years’ experience of manipulating data in CSV and Excel formats required
CISSP certification preferred
Administering Active Directory based access required
Knowledge of LDAP filters and SQL queries required
Skilled with MS Office Suite (Excel, Access, PowerPoint, Visio)
Written and verbal communications skills required
Experience in the Banking & Financial Services industry preferred
Must be able to work occasional overtime including evenings and/or weekends.
Occasional travel to other office sites required