PTC - Identity and Access Management (IAM) Analyst

Identity and Access Management (IAM) Analyst

The Pennsylvania Turnpike Commission is seeking an experienced, motivated individual to join our team as a Identity and Access Management Security Analyst. The Identity and Access Management (IAM) Analyst is responsible for working cross-functionally with business and IT partners, as well as external service partners to deliver the identity administration capabilities across the PTC.

The ideal candidate has experience in technology and security administration across large organizational networks and cloud environments of corporate IT systems and processes, and superb organizational and communication skills.

This position is responsible for working cross-functionally with business and IT partners, as well as external service partners and supports internal and external audits and regulatory compliance requirements for IAM. The candidate will be a member of the Systems Security IAM team within the Information Technology Department. Work involves participating and performing work of varying levels for the assigned unit with an increasing degree of complexity. Work is primarily performed with independence and reviewed by a supervisor or higher-level specialist for attainment of program goals, completion of projects and overall performance.

Essential Functions & Responsibilities
As part of the Security Team, the IAM Analyst supports user provisioning, auditing, and governance
The team member will be expected to become familiar with established policies, procedures, audit, and compliance requirements to support and maintain appropriate access to applications agency-wide
Ensures system access is maintained in accordance with PTC information security policies and procedures
Supports all access management control activities throughout the Identity Management Lifecycle
Ensures access to systems provisioned applying the concepts of least privilege and segregation of duties
Evaluates existing access to ensure levels remain commensurate with employee job responsibilities
Responsible for evaluating access management systems to show continued improvements of IAM lifecycle processes and operations
Create and modify user accounts, security groups, and access policies for on-premise and cloud-based accounts
Assist with access, security reviews, and audits in accordance with regulatory and audit compliance
Identify potential IAM risks unique to each situation and help mitigate potential threats
Create and maintain documentation, data flow diagrams, and gather requirements as needed
Assist in the ongoing review of the Identity Access Management program, policies, and processes

Minimum Experience
2-3+ years' experience supporting security administration, operations, or security architecture
The ideal candidate has experience in technology and security administration across large organizational networks and cloud environments
Understanding of IAM concepts such as attestation, provisioning, SSO, role-based access controls (RBAC), segregation of duty (SOD) policies, federation, etc.
Understanding of single sign-on (SSO) protocols (ADFS, SAML, WS-Fed, OpenID, OAuth
Knowledge of local, cloud and hybrid Directory Service architectures
Working knowledge of large IT organization operations
Strong analytical skills with high attention to detail and accuracy

Required/Desired Skills
SkillRequired /DesiredAmountof ExperienceExperience supporting security administration, operations, or security architectureRequired3YearsExperience in technology and security administration across large organizational networks and cloud environmentsRequired3YearsUnderstanding of IAM concepts (attestation, provisioning, SSO, role-based access controls (RBAC), segregation of duty (SOD) policies, federation, etc)Required0Understanding of single sign-on (SSO) protocols (ADFS, SAML, WS-Fed, OpenID, OAuthRequired0Knowledge of local, cloud and hybrid Directory Service architecturesRequired0Working knowledge of large IT organization operationsRequired0Strong analytical skills with high attention to detail and accuracyRequired0
Questions
No.QuestionQuestion1In addition to the ePATCH background check, PTC requires a National Criminal Background Check prior to engagement start. Do you accept this requirement?Question2The vendor rate for this position is NA, do you accept this rate?Question3Position is primarily remote, however the expectation that the selected resource will be available to report on-site within 3 hours, if needed. Does your candidate agree to this requirement?