Sr Spec, IT - PAM Centrify Engineer

This is where you save and sustain lives

At Baxter we are deeply connected by our mission. No matter your role at Baxter your work makes a positive impact on people around the world. Youll feel a sense of purpose throughout the organization as we know our work improves outcomes for millions of patients.

Baxters products and therapies are found in almost every hospital worldwide in clinics and in the home. For over 85 years we have pioneered significant medical innovations that transform healthcare.

Together we create a place where we are happy successful and inspire each other. This is where you can do your best work.

Join us at the intersection of saving and sustaining liveswhere your purpose accelerates our mission.

About Us

Nothing changes if nothing changes which is why Baxter is transforming our global IT functioninto one that will strengthen partnerships and enable smarter more efficient and connected business processes. In the dynamic healthcare industry we need to be ready to face new challenges and opportunities. As we learn we must be agile and innovative to reveal new ways of working. Technology and our digital capability will help create a more efficient and innovative ecosystem to enable our employees customers and products to drive better outcomes for patients worldwide.

We are at the critical intersection where robust IT infrastructure and networking support meets the physicians nurses and care givers who save and sustain lives. Together we can build upon Baxters rich heritage to advance the next generation of transformative healthcare innovations. Together we can change how IT meets healthcare. Together we are Baxter.

This is where technology fuels purpose-driven work. Where your purpose accelerates our mission.

Title: Sr Spec IT - PAM Engineer

Location: Bangalore

Your Role

Subject matter expert in the design development and implementation of identity and access management (IAM) solutions as well as Privileged Access Management (PAM) solutions to support critical systems products and business programs. Responsible for information security processes & controls to protect the confidentiality integrity and availability of personal and health information as well as corporate data. Hands-on active member of the team helping to drive business and security objectives forward.

What youll be doing

• Taking the lead on the execution of enterprise-wide identity and access management strategy design and implementation of authentication authorization and administration capabilities of end-user and privileged accounts (admin service etc.) in products systems and infrastructure in the enterprise and cloud.
• Provide subject matter expertise on IAM specific capabilities to help customers design and implement Identity solutions such as but not limited to: Access Management Governance and Attestation; Privileged Access Management Multifactor/Single Sign On
• Leading the automation and implementation (including writing codes & scripts) of account provisioning access review sign-on multi-factor authentication capabilities with identity protocols (SAML 2.0 WS-Federation OpenID Connect OAuth SCIM API etc.) to support identity federation and robust access control models (RBAC ABAC).
• Define review and onboarding of group/role access policies (least privilege step-up MFA with conditions) across multiple platforms including but not limited to AWS Delinea (Centrify Thycotic ) CyberArk Active Directory etc...
• Subject matter expert on security design and solution development in various security technologies (IAM Encryption SailPoint Certificate Manager Security Compliance tool etc.)
• Experience with AWS Cloud Security Red Hat Enterprise Linux operating system AMI scripting experience - preferably with Python PowerShell and Perl.
• Support the access governance and periodic access review & recertification of privileged accounts (admin service) in management portal operating systems and databases in AWS Azure and on-Prem
• Lead and/or participate in the evaluation and testing of new & emerging (disruptive) security technology (e.g. blockchain) both on paper and technical proof of concept.
• Architectural review of the application tools as per the Baxter standards and deployment of the same in Dev Test and Prod environments.
• Stay educated on new product technology tangential team capabilities and other specific offerings or programs emerging within our company and within the IAM industry
• Identify areas for continued advancement of strategies aligned with Industry direction client need practice scope and present solutions to leadership.

What youll bring

• BASIC QUALIFICATIONS

• Bachelors degree in Computer Science or higher and/or equivalent experience.
• At least 10 years of relevant technical experience in IT.
• 3 years of experience with AWS IAM KMS & security identity & compliance services and Delinea (Centrify Thycotic secret server ) or similar COTS tools is preferred.
• 3 years of software development and coding experience in any programming languages such as Python Java .NET PowerShell JSON. Experience with various open source software and development tools.
• Experience in automating & implementing identity & security solutions for cloud infrastructure (AWS Azure) SaaS deployment (Office 365 SailPoint Salesforce Workday) and on-premise IT landscapes. DevSecOps experience is a plus
• Knowledge of typical enterprise identity life cycle management processes and standards.
• Excellent analytical problem solving time management and task prioritization skills.
• Excellent oral and written communication skills including ability to interact effectively with developer community technical staff vendors project stakeholders and senior management.
• Ability to work independently and cross-functionally supporting various integration and implementation projects.
• Experience working in large complex global environment healthcare industry and regulatory controls such as HIPAA GDPR FDA GxP SOX is a plus.
  PREFERRED QUALIFICATIONS
• Deployed managed and supported any enterprise level IAM and PAM application and tools
• Demonstrated ability to communicate complex technical matters clearly and concisely orally and in writing.
• Familiar with enterprise IT processes for asset configuration change incident and problem management
• Demonstrated ability to adapt to new technologies and learn quickly
• Experience working with IT and Security leadership to articulate security and or compliance strategies and plans
• Familiar with the normal operation of common network communication protocols authentication processes and logging capabilities of modern platforms to identify and resolve security events
• Certification in AWS cloud is preferred
  

• Certifications below are preferred and not limited to the following:

  Industry certifications:

  CISSP/ CIAM / CISM / CISA / CRISC

  Vendor Solutions and product specific certifications:

  Microsoft Active Directory / Azure Active Directory

  Okta or Auth0 / CyberArk or Thycotic or Centrify

EEO (Equal Employment Opportunity)

Baxter is an equal opportunity employer. Baxter evaluates qualified applicants without regard to race color religion gender national origin age sexual orientation gender identity or expression protected veteran status disability/handicap status or any other legally protected characteristic.

Reasonable Accommodations

Baxter is committed to working with and providing reasonable accommodations to individuals with disabilities globally. If because of a medical condition or disability you need a reasonable accommodation for any part of the application or interview process please click on the link here and let us know the nature of your request along with your contact information.

Recruitment Fraud Notice

Baxter has discovered incidents of employment scams where fraudulent parties pose as Baxter employees recruiters or other agents and engage with online job seekers in an attempt to steal personal and/or financial information. To learn how you can protect yourself review our Recruitment Fraud Notice.