Overview

The Identity & Access Management Administrator reports to the Director, Information Security and is responsible for access governance for Group O’s Information Technology (IT) systems. The Identity & Access Management Administrator works with members of Information Security (InfoSec), Information Technology (IT) and business leaders to provide account provisioning and de-provisioning, user privileged requests and supplier access requests.

Responsibilities

Primary Tasks:

• Create, configure, and manage users
• Create, configure, and manage groups.
• Manage user Office 365 licenses.
• Create and manage external collaboration settings in Azure Active Directory.
• Manage external users accounts.
• Configure and manage identity providers (external applications, SAML/WS-federation).
• Plan, implement and manage corporate Multi-Factor Authentication (MFA) policies.
• Manage MFA settings for users.
• Plan, implement and manage conditional access policy controls and assignments.
• Implement and manage the Group O user risk policy.
• Implement and manage sign-in risk policies.
• Implement and manage MFA registration policy.
• Monitor, investigate, remediate and report elevated risky users.
• Manage application consent settings.
• Monitor and audit access to integration enterprise applications.
• Implement application user provisioning.
• Work with the IT team and other business leaders to document, develop and manage 3rd party application identities.

Secondary Tasks:

• Work with the Infosec and Quality on identity and access management compliance reports and evidence collection.
• Work with the Infosec team to develop, implement and manage a role-based access control model.
• Assist the Computer Incident Response Team (CIRT) with investigations.

Qualifications

Education:

• Associates degree in IT discipline or equivalent job experience

Training/Certifications:

• Microsoft certified: Identity and Access Administrator (must be willing to obtain in the first year of employment)

Desired Training/Certifications:

• Comptia Security Certification
• CISSP
• ITIL Certification

Skills:

• Demonstrate experience in access management fundamentals.
• Experience with basic Information Security standards as they relate to access management.
• Basic understanding of Payment Card Data Security Standard and ISO 27001 compliance requirements as it relates to access management.
• Strong experience with Active Directory, Azure Active Directory and Office 365.
• Experience managing users and groups in an enterprise organization.
• Basic understanding of information security risk.

Experience:

• 2 years' job experience working in information technology.

Desired Traits:

• Excellent written, verbal, and interpersonal communications skills; ability to work well independently and as part of a team
• Detail oriented; ability to plan, organize and prioritize tasks to complete projects independently and within established time frames.
• Ability to effectively communicate with individuals in other departments.
• Process oriented, ability to identity, develop and provide recommendations to improve information security process and procedures as it relates to access management.