You have a life. We like that about you.
At OCLC, we believe you'll do the best work of your life when you're living the best life possible.
We work hard to build the technology that connects thousands of today's libraries. But we also work hard to make a job at OCLC a meaningful part of a balanced life- not a substitute for one.
Technology with a Purpose. OCLC supports thousands of libraries in making information more accessible and more useful to people around the world. OCLC provides shared technology services, original research and community programs that help libraries meet the ever-evolving needs of their users, institutions, and communities. With office locations around the globe, OCLC employees are dedicated to offering premier services and software to help libraries.
The Job Details are as follows:
We are currently seeking candidates for a Lead Systems Engineer for our Microsoft & Identity Management team. The lead systems engineer will serve as an SME on all things Identity and Access Management and will be responsible for designing, implementing, and maintaining identity management across the enterprise. The perfect candidate will have a solid foundation in identity management best practices and have a strong desire to streamline and automate identity processes.
Responsibilities:
Design, implement and maintain identity and access management solutions using Microsoft Active Directory, Entra (AzureAD), OAuth, SAML, and LDAP.
Serve as an SME on Identity and Access Management to team members and assist staff across the organization.
Automate common identity and access management tasks using modern development tooling
Analyze existing platforms to identify opportunities for automation, improvement, and operational efficiency.
Create and maintain standards surrounding documentation related to identity processes, procedures, and infrastructure configurations.
Support Azure AD Identity, MFA, PIM, Access Packages, MyApps and MyAccess, Azure AD Security Conditional Access Policies, and Cloud Defender, including Defender for Identity.
Implement IAM roles and policies in a multi-cloud environment.
Lead efforts to provide user account lifecycle management, including creating, provisioning, securing, and deactivation of access.
Partner with Global Security team to participate in yearly audits, recommend improvements, and assist with security incidents.
Monitor, audit, and support the identity and access management systems.
Qualifications:
8 years working in an enterprise environment supporting end users as well as application stakeholders.
Expert knowledge of Microsoft Active Directory, Group Policy, Microsoft EntraID, SCIM, SSO, federated identities and MFA technologies
Demonstrated knowledge of infrastructure security concepts (Network Security, Password Policies, and Access Control)
Experience with infrastructure automation tools such as Ansible, Quickbuild, Gitlab
Demonstrated ability to automate processes through scripting languages (Python/PowerShell/bash)
Exposure to Linux authentication management (SSSD/IPA/OpenLDAP)
Experience with IAM best practice in AWS, GCP and Azure
Familiarity with Privileged Identity Management solutions and concepts
Experience with monitoring and performance management tools like Solarwinds, Azure LogAnalytics, KQL.
Excellent verbal and written communication skills
Mindset for continuous improvement
Working Conditions: Normal office environment.
ADA/EAA: The above statements cover what are generally believed to be the principal and essential functions of this job. Specific circumstances may allow or require some people assigned to the job to perform a somewhat different combination of duties.