OVERVIEW

The Security Ops & Engineering job family is responsible for the operation and engineering of technologies that deliver Security services.  General areas of responsibility include enforcing authorized access to BillGO’s IT infrastructure, applications, and services, in addition to prevention, detection, and response to Security threats.  Positions in Information Security are responsible for designing and monitoring control systems which ensure the integrity and security of BillGO’s systems and data.

The Senior Identity Engineer role is a member of the Identity and Access Management (IAM) Team, whose mission it is to ensure that IAM provides appropriate technologies and services that enable data and application owners to extend access to authorized subjects/actors.  This includes systems for managing the full lifecycle of identities and access management.  Success requires working with the business to understand requirements and implementing Identity services that meet those needs in a manner that achieves our compliance and regulatory objectives.

This position requires strong partnership with IT, Security, business, and third-party stakeholders, to ensure that BillGO can execute its business plans.

RESPONSIBILITIES

Identity and Access Management (80%)

• Provide subject matter expertise and technical stewardship of IAM technical platforms and service offerings
• Ensure that IAM services are always available
• Ensure that appropriate maintenance, monitoring, automation, and response procedures are in place, to meet Security and availability objectives
• Conduct operations in a quality manner, in accordance with our ITIL and other documented processes
• Gather, analyze, and report on IAM service consumption, availability, and value delivered to our customers
• Partner with IT stakeholders to engineer, implement, and enhance technical platforms and related service offerings on an ongoing basis
• Develop engineering patterns that facilitate the re-use of Identity services in a safe, efficient, and compliant manner
• Create/maintain diagrams of IAM platforms and services
• Serve as a technical resource on various initiatives
• Advocate for new/enhanced IAM services on behalf of all stakeholders
• Hold technical debt to minimum possible
• Contribute requirements to technology selection process
• Develop/maintain IAM-related governance (standards and procedures) in alignment with overall Security objectives/governance
• Participate in testing and QA processes as required, to ensure that service offerings perform as expected
• Partner with business and technical consumers of IAM services offerings, to ensure that requirements are being met, future needs understood, and supporting roadmaps are developed accordingly
• Partner closely with stakeholders that maintain data or systems that are integrated with our Security platforms (eg. PeopleOps/HR, Directory Services team, and others)
• Learn and attend training related to monitoring, ongoing support, routine engineering, and operation of new and existing security platforms and services

Leadership (20%)

• Maintain awareness and commitment to company objectives/targets and ensure that deliverables are aligned accordingly 
• Serve as situational team lead, for any return-to-service or other troubleshooting events, to drive issues to resolution and communicate status and outcomes to Security leadership team
• Establish and maintain good working relationships with all IAM customers and other Security, IT, and business stakeholders
• Understand customer and overall company objectives and develop support strategies that map to IAM service offerings
• Drive enterprise adoption and re-use of available roles, access methods, and related IAM services
• Mentor Security peers and others, including training on new administrative functions, sharing best practices, and cultivating ideas and subsequent business cases
• Understand Security and company objectives and develop support strategies that map to Identity and Access Management Service Offerings

QUALIFICATIONS AND REQUIREMENTS

Prior Experience

• Minimum of Six (6) years of experience with Identity and Access Mgmt systems is preferred to perform at expectation. Applies in-depth advanced knowledge and skills of a specific/specialized technical area with understanding of external environment factors that may affect own specialist area. Provides expert advice, coaching, and counseling within discipline/function area.

Technical and Professional Skills

• Operational (and preferably design) experience with one or more enterprise-class Identity Management platforms (eg. Okta, SailPoint, Oracle OIM, etc.).
• Experience with Role Engineering and ongoing mgmt
• Experience with Federation and Single-Sign-On solutions
• Experience with Privileged Access Mgmt platforms 
• Experience with Certificate Authorities and certificate lifecycle mgmt
• Must be able to understand and analyze existing data about users and their entitlements to assist in defining and maintaining Roles
• Experience with Windows and Linux operating systems
• Ability to efficiently operate computers, tablets, and mobile devices 
• Certifications not required, but SSCP (Systems Security Certified Practitioner) or CISSP (Certified Information Systems Security Professional) desirable
• Experience creating diagrams using LucidChart and/or Visio preferred
• Must be self-motivated, proactive, creative, and efficient in identifying issues, understanding, and proposing solutions
• Ability to organize and prioritize work 
• Excellent written, oral, instructional, presentation, and interpersonal skills
• Ability to lead and motivate individuals within a team
• Knowledge of Microsoft Office software (Outlook, Word, Excel, PowerPoint, etc.)
• Working understanding of the SDLC and QA lifecycle and methodology preferred
• Ability to work on cross-functional teams
• Ability to work with all levels of the organization, from front-line developers to senior leadership
• Strong ability to work with time/date deadlines
• Demonstrates strong leadership qualities that can be used to guide a project
• Identifies solutions to problems through application of analytical skills to data

Additional Job Duties and Responsibilities

• Adhere to all policies, rules, regulations, and procedures
• Perform other duties or functions as requested by management
• Participate in “on-call” rotation as a technical and functional expert

The base rate for this role ranges from 130 - 160k based on current market assessments, and varies depending on experience