Title: IAM Manager
Location: Evanston, IL
Must Have:
- Network infrastructure
- IAM Platform engineering
- Basic IAM tools
- OS layer
- Linux/Windows server upgrades
- Patching/service tickets
- Change Management - ITIL Processes/peer reviews
The IAM Manager leads a team(s) responsible for IAM platform engineering, operational support and governance for several IT infrastructure products and services. This role ensures the secure, stable, and compliant operations of multiple platforms across the enterprise. It also requires a leader who combines operational rigor, security discipline, and platform lifecycle management expertise (on premise, cloud, or hybrid), ensuring all IAM services are highly available, resilient, vulnerability-managed, and security/audit-defensible.
The IAM manager ensures 24 x7 IAM operations and service ownership, vendor product lifecycle management and maintenance, security vulnerability and patch management, change management and release governance as well as platform engineering and best practices. You will ensure that IAM technologies and services meet applicable federal and state regulations like (NIST 800-63, CMMC, FERPA, HIPPA, HITECH, GLBA, PCI-DSS and applicable privacy laws)
You will lead the team(s) in a supervisor capacity that includes work assignment, work evaluation/peer review, training, mentoring, and conduct performance evaluation reviews. Guide, instructs, directs the work of other engineers using full technical knowledge and thorough understanding of functionality. Provides supervision to and oversees the work of staff. Leads with the expectation that team members are cross-trained on all products and are staying on top of new skill development within the industry.
- IAM Operations & Service Ownership (24 x 7)
- Own end-to-end availability, reliability and performance of IAM platforms
- Manage 24x7 on call rotation, coverage and escalation paths
- Manage & lead major incident (P1/P2) response for identity and access disruptions
- Manage IAM TDX ticket ques, ensure remediation - responses, problem resolution, and root cause analysis (RCA), documentation and communication are tracked and complete within appropriate SLA's.
- Maintain continuous audit readiness posture.
- Develop & maintain dashboards for IAM service health: to include system up time & availability, vulnerability status, operational KPI's, and project statinformation.
- Vendor Product Lifecycle, Maintenance & Upgrade Management
- Execute product upgrades within IAM global calendar lifecycle, following appropriate IAM processes, documentation, testing, change management and communications.
- Maintain current vendor-supported versions to minimize risk exposure
- Evaluate vendor release notes for security vulnerability fixes, major and minor releases, and integration impacts.
- Change Management & Release Governance
- Ensure change management processes and procedures are followed. That includes: all appropriate documentation, testing, peer review, Pre-CAB, CAB.
- Ensure appropriate coordination with other teams and communication with CAB
- Ensure all changes have appropriate rollout plan inclusive of impact assessment, backout plan, and post implementation support.
- Platform Engineering & Best Practices
- Design, collaborate, and enforce IAM architecture and configuration standards and utilize industry best practices.
- Maintain standard operating procedures (SOP's) and runbooks for operational maintenance & upgrades, incident response and system recovery, as well as operational readiness to respond to security incidents (SI).
- Promote automation including scripting (various types), use of orchestration tools (Jenkins), Api's,etc.
- Promote adherence to best practices - (SOD) separation of duties, (PAM) privilege access management, (AM) access management and the use of least privilege principles.
- People Leadership and Development:
- Lead and manage up to 2 IAM teams (up to 14 FTE) consisting of technical lead(s), IAM engineers (AM, IGA, PAM, ADS, Directory, Cloud, etc), contractors and/or professional services consultants, and interns.
- Hire, develop, cross train, and retain a high performing team(s).
- Provide direct supervision, coaching and performance management. Including goal setting, skills development, performance evaluations, and succession planning.
- Ensure appropriate staff coverage.
- Foster a culture of operational discipline and accountability, with a security mindset, and continuous improvement and automation.
- Collaboration, Representation and Thought Leadership:
- Participate in groups or committee(s) as assigned like (MTL, BTAA,etc)
- Partner with NUIT teams, schools and units and distributed IT.
- Represent IAM in other meetings, groups or projects as assigned.
