TC-CS-IAM-IMP-One Identity-Senior

At EY youll have the chance to build a career as unique as you are with the global scale support inclusive culture and technology to become the best version of you. And were counting on your unique voice and perspective to help EY become even better too. Join us and build an exceptional experience for yourself and a better working world for all.

Intermediate Quest One Identity Manager Developer

Role Overview:
An Intermediate Quest One Identity Manager Developer is responsible for complex development and integration tasks within the One Identity Manager platform. This role focuses on custom connector development advanced workflow configurations and optimizing synchronization processes for large-scale identity management.

Key Responsibilities:

• Design and implement custom workflows usingDesignerandObject Browserfor complex provisioning tasks including multi-level approval processes and conditional attribute assignment.
• Develop and maintaincustom connectorsfor integrating with external systems (e.g.REST APIsSOAP Web ServicesSAPHR SystemsAzure ADOracle) usingSynchronization EditorandAPIs.
• Write advancedSQL stored procedurestriggers and custom queries for data reconciliation and manipulation within One Identitys database.
• Configure and optimizeJob Service and DBQueueto handle high-volume job processing and resolve performance bottlenecks.
• Develop complexVBScriptandPowerShellscripts to implement business logic (e.g. dynamic role assignments custom event handling and email notifications).
• Implement and configurerole miningandrole lifecycle managementprocesses ensuring role compliance and SoD (Segregation of Duties) policy enforcement.
• Extend the functionality of theWeb Portalby customizing theUI forms adding new fields and configuring specific approval workflows for access requests.
• Perform advanced troubleshooting usingJob Queue Info analyzing detailed logs and debugging synchronization and provisioning failures.
• Implement and maintain theattestation process ensuring compliance through periodic certification of user roles and entitlements.
• Lead efforts to implementcustom reportingusingSQL Server Reporting Services (SSRS)orOne Identity Reporting Moduleto deliver access governance insights.
• IntegrateOne Identity Managerwith cloud services (e.g.Azure ADAWS IAM) and on-prem applications using custom-developed connectors.

Technical Requirements:

• In-depth knowledge ofQuest One Identity Manager architecture includingApplication ServerJob Server andData Governance Edition.
• Advanced SQL skills for writingstored proceduresviews andtriggers.
• Proficiency inVBScriptPowerShell and knowledge ofOne Identity Manager API.
• Strong experience withSynchronization Editorfor developing custom connectors.
• Deep understanding ofActive DirectoryLDAPHR systemsAzure and other integrated systems.
• Familiarity withSoD policiesrole mining and advanced RBAC configuration.

Senior Quest One Identity Manager Developer/Manager

Role Overview:
A Senior Quest One Identity Manager Developer or Manager is responsible for the overall architecture design and delivery of large-scale IAM solutions using One Identity Manager. They lead the design of custom connectors workflows role management and compliance processes ensuring scalability performance and security.

Key Responsibilities:

• Architect and design scalable IAM solutions usingQuest One Identity Managerto handle complex identity lifecycle management processes including HR-driven provisioning custom entitlements and federated identity models.
• Lead the design and development ofcustom connectorsfor integration with on-prem and cloud-based applications usingRESTful APIsSOAP Web Services andJSON/XML data handling.
• Implement complexprovisioning workflowswith multi-step approval processes dynamic decision-making logic and condition-based role assignments usingOne Identity Managers Workflow EngineandObject Layer (DalScript).
• OptimizeJob ServiceandDBQueueconfigurations to ensure high availability and load balancing in large-scale deployments.
• Develop customOne Identity Manager Modules extending the base platform by adding functionality usingC#orOne Identity Manager Framework(Dialog scripts and custom assemblies).
• Implement advancedSegregation of Duties (SoD)enforcement mechanisms including cross-system policy validation and ensure attestation processes are automated and integrated into the identity governance framework.
• Lead the configuration and customization ofOne Identity Manager Web Portal including designing custom forms access request pages and integrating third-party authentication mechanisms (e.g.SAMLOAuth).
• Develop and implement automated compliance reporting and auditing processes ensuring all identity governance data is readily available for audits and access certifications.
• Manage system upgrades migration of connectors and performdisaster recoveryplanning for One Identity Manager infrastructure.
• Lead the development team mentor junior developers and drive best practices inscriptingconnector developmentworkflow design andsystem performance tuning.
• Collaborate with security architects auditors and business stakeholders to ensure One Identity Manager meets all security compliance and business process requirements.

Technical Requirements:

• Deep understanding ofQuest One Identity Manager architecture includingOne Identity Manager APIJob ServerSynchronization Engine andData Governance Edition.
• Expertise inSQL Server with experience in writing complexSQL stored proceduresfunctions andviews.
• Advanced scripting skills inVBScriptPowerShell andC# with knowledge of building custom connectors and developing modules.
• Experience in integrating One Identity Manager with cloud platforms (e.g.AzureAWS) and enterprise applications (e.g.SAPOracleWorkday).
• Knowledge ofRole-Based Access Control (RBAC)SoD and attestation processes.
• Strong experience withAPI integrationand data synchronization.
• Experience leading IAM projects and development teams.

EY Building a better working world

EY exists to build a better working world helping to create long-term value for clients people and society and build trust in the capital markets.

Enabled by data and technology diverse EY teams in over 150 countries provide trust through assurance and help clients grow transform and operate.

Working across assurance consulting law strategy tax and transactions EY teams ask better questions to find new answers for the complex issues facing our world today.