What are the responsibilities and job description for the Security Administrator position at JPC Partners?
JPC Partners is looking for an Identity & Access Management (IAM) Security Administrator that will develop, maintain, and enforce complex access modeling of all internal information technology resources and physical assets, including resources and assets within the scope of critical infrastructure protection. The candidate will leverage a robust understanding of information systems’ access controls to document the access model within the IAM system to facilitate the authorization and documentation of user access. The candidate will need to have an understanding of key IAM security controls in all activity that they perform.
Responsibilities
Responsibilities
- Modeling existing and novel information systems’ access controls into role based access control (RBAC) model within the IAM system.
- Ensures understanding of governing policies, procedures and standards in order to perform functions with the security and compliance expectations.
- Monitoring and managing access maintenance workflows to ensure compliance requirements are met.
- Managing Identity lifecycle events to ensure timely authorization and de-authorization of user access.
- Analyzing existing RBAC model to ensure key IAM security best practices are being followed (i.e. least privilege, separation of duty, etc)
- Ensures daily tasks are completed with special focus on completing compliance requirements.
- Escalation of AMT items for resolving issues and resolving customer escalations.
- Attends training for staff on current and new system functions for performing AMT duties.
- Follows desk-side procedures utilized by the AMT.
- Builds and develops strong relationships with business area clients by providing superior customer support as demonstrated by clearly owning, resolving and communicating issues and problems; being responsive to needs, requirements, and deadlines; and generally promoting goodwill in a professional and trust-building manner.
- Provides technical and administrative support for the access to systems and data.
- Participates in the analysis and development of documentation and projects to improve security.
- Applies knowledge, skills and abilities to implement a process or procedure, timely and professionally.
- Familiarity with access controls for enterprise level information system platforms (e.g. Linux, Microsoft, Oracle).
- Familiarity with access controls for enterprise level web applications.
- Experience implementing RBAC models within an IAM system at the enterprise level leveraging principles of least privilege and separation of duty (SOD).
- Bachelor’s degree in information systems or equivalent relative work experience.
- Proven at mastering attention to detail.
- Ability to operate in a confidential and controlled environment.
- Strong analytic ability.
- Ability to manage concurrent and differentiated tasks.
- Excellent oral and written communications skills.
- Willingness to learn new technologies.
- Familiarity with the energy regulatory environment and NERC-CIP standards.
- Experience using Cherwell, IdentityIQ, and CyberArk.
- Experience managing access control policies within an IAM system.
- Experience managing privileged accounts within a PAM system.
- Experience implementing access controls on a variety of enterprise level information systems.
