Security Engineer, Identity and Access Management (IAM)
About the position Responsibilities • Develop and implement IAM policies and procedures • Design and implement systems that enhance the security of Kinaxis IAM Systems • Document and implement identity governance solutions, access certification and reporting • Troubleshoot and manage issues related to identities, systems access accounts, secrets, authentication, authorization, entitlements, and permissions • Conduct design reviews related to IAM and Secrets management, providing recommendations on control implementations based on findings • Build and maintain tools that improve the Identity and Access Management posture • Participate in the development and oversight of corrective actions relating to security issues as it relates to Identities and Secrets • Implement technologies to centrally integrate identity systems across the organization and automate solutions • Design, implement, and manage Identity Directories and identity services • Collaborate with cross-functional teams to understand access requirements, secrets management requirements and drive the design, development, and implementation of improvements to our IAM systems • Evaluate current secrets management posture and provide integration recommendations, ensuring alignment with organizational objectives • Design and implement secure sharing mechanisms for controlled access to secrets • Provide technical expertise and support for incident response related to IAM and secrets management • Collaborate with the Security Operations team to implement adequate account and secret monitoring and logging capabilities • Provide Level 3 support for IAM related internal issues and requests • Implement and maintain technologies to ensure audit and privacy compliance • Improve identity and access management solutions and systems for protection against evolving threats and efficiency Requirements • BSc or BA in Information Security, Computer Science, Information Systems, or demonstrated equivalent experience • Minimum of 5 years' experience in Information Security (with at least 3 years as an IAM engineer or in a related position) • Certifications such as Certified Identity Management Professional (CIMP), Certified Identity and Access Manager (CIAM) can enhance job prospects • CISSP, CCSP, Comptia Cloud+/Security +, CISM, or GIAC certifications is an advantage • Okta Certified Professional and Okta Certified System Administrator preferred • Familiarity with cybersecurity best practices and industry standards • Strong communication skills, both verbal and written • Ability to manage competing priorities and simultaneous projects in a fast-paced environment with little supervision Nice-to-haves • Extensive knowledge and experience with identity and access management concepts such as single sign-on (SSO), multi-factor authentication, passwordless authentication etc. • Comprehensive knowledge and experience with authentication standards and technologies such as OAuth, OpenID Connect, SAML, LDAP etc. • Proficiency in using and configuring secrets management tools (e.g., HashiCorp Vault, PMP, etc.) • Experience with Privilege Identity Management (PIM) and Privilege Access Management (PAM) systems (e.g. Azure PIM, CyberArk etc.) • Extensive hands-on knowledge of identity and access management best practices, procedures, and software solutions such as CyberArk, Okta, etc. • Experience with security and compliance requirements/frameworks, including but not limited to ISO 27001, NIST frameworks, GDPR, HIPAA, SOX, PCI, SOC2, OWASP etc. • Experience with Directory services such as Azure IAM, Google IAM, Active Directory etc. • Working knowledge of PowerShell, Python, or other scripting languages is an advantage • Strong diagnostic and troubleshooting skills. Benefits • Flexible vacation and Kinaxis Days (company-wide day off on the last Friday of every month) • Flexible work options • Physical and mental well-being programs • Regularly scheduled virtual fitness classes • Mentorship programs and training and career development • Recognition programs and referral rewards • Hackathons Apply tot his job