IAM/PAM Engineer

Job Title: IAM/PAM Engineer 6-month contract to hire Location: Remote (EST or CT preferred)
Only W2
Need:

• CyberArk growth. They have 1 SME currently but need to bring on another Engineer to alleviate their day
• Don t need to be a SME, but we are looking for a CyberArk Engineer

Daily:

• Currently on Prem, ideally moving to CyberArk Secure Cloud Access (SCA) and Secure Infrastructure Access (SIA)
• Scripting and automation for config work within CyberArk
• AWS and Azure; uses Azure & Entra ID for identity verification

Background:

• Bachelor's degree or 5+ years' experience for this level engineer
• Certs not required but help: any CyberArk certificate

• Requirements:
• Top Must-Haves:
• Handson CyberArk Experience (OnPrem Privilege Cloud Migration)
• True IAM Engineer (Engineering II Level Not Senior)
• Hybrid Identity & Cloud Exposure (Azure + AD + AWS)
• Certs not required but help: any CyberArk certificate
• Project Details:
• CyberArk Privilege Cloud Migration: Support the transition from onprem CyberArk to CyberArk Privilege Cloud, including implementation of SIA (Secure Infrastructure Admin) and SCA (Secure Cloud Admin).
• HandsOn PAM Engineering Support: Work alongside the existing CyberArk SME to configure, deploy, and support PAM solutions, including liftandshift migration work and ongoing operational support.
• Hybrid Cloud IAM Environment: Support privileged access across a hybrid environment using Azure (identity), Active Directory, and AWS (application deployments) in a fully remote setup.

PURPOSE:
This position is responsible for the design and implementation of the UNFI Identity and Access Management (IAM) Privileged Access Management (PAM) solutions in accordance with industry and UNFI architecture and security best practices and standards. Core functions include assessing existing deployments for remediation efforts regarding availability, recoverability, security and cost as well as designing new SaaS based solutions based on requirements gathered working cross functionally with the key stakeholders. The IAM Engineer II works under moderate supervision by management and senior team members.
IAM Engineering

• Designs, implements and managed UNFI s PAM solution, leveraging CyberArk s SaaS based Privileged Cloud platform including SIA and SCA and related on-prem infrastructure.
• Management of PVWA, PSM, Vault and CPM components, onboarding privileged accounts, and automating credential management via API development.
• Implementation of JIT access, management of Safe configurations, and non-OOTB accounts via custom CPM plugins.
• Support PAM implementation across on-prem Active Directory, as well as Azure, AWS and Google cloud environments.
• Executes UNFI IAM design efforts to meet the platform and product team requirements while aligning to UNFI IAM and security standards, controls and governance structure
• Executes design of IAM solutions such that they are resilient, highly available, fault tolerant and recoverable from disaster or ransomware
• Executes design and implementation of IAM requirements for on-premises, SaaS, IaaS and PaaS solutions, including adhering to zero trust principles
• Executes design and management of identity federation, Single Sign On and Multi-Factor Authentication, including external users
• Executes design and implementation of solutions and systems for Automated Identity Lifecycle Management, Identity and Access Governance and Automated Provisioning
• Executes design and rollout of tools and processes to manage privileged access for humans and non- humans meeting security standards
• Research and recommend new IAM solutions, execute POC s and feasibility studies to validate next- gen product concepts and technologies leveraging results to guide business and technology decisions.
• Leads IAM requirements analysis to convert platform, security, and business requirements into technical solutions
• A technical subject matter expert that recommends and advises the Operations team in the resolution of outages or high priority incidents
• Analyze log events and performance of IAM solutions and correct deficiencies, including recommendations to the Operations teams on alerting and monitoring
• Create and maintain functional / technical design specifications and solutions to satisfy project requirements
• Create simple, repetitive deployment processes that increase both velocity and quality.

JOB REQUIREMENTS:
Education/ Certifications/or Equivalent combination of education training and experience:

• Bachelor s degree in computer science or a related discipline desired, or relevant IAM Engineering or IT Infrastructure work experience
• Industry Cybersecurity or IAM certifications such as CISSP, ISC2, GSEC, GISF, GCIA and GISP or equivalent
• Relevant product certifications such as CyberArk, SailPoint, Microsoft, AWS Certified Cloud Practitioner

Experience:

• 3-5 years professional experience working in large scale identity environments (10,000 users minimum).
• 3-5 years experience in as an IAM Engineer in a large complex on premises/cloud hybrid identity environment
• 3-5 years experience with directory services, authentication/authorization, privileged access management, identity lifecycle management and/or cloud identity services: Active Directory, Azure AD/SSO/MFA, Azure Identity Framework, AWS cloud native, CyberArk, SailPoint IIQ, Oracle OUD, LDAP, etc.
• 3-5 years experience with Azure AD leveraging Graph API, Identity Experience Framework, CSS, REST, HTML