Position: Senior Security Engineer - Identity Access Management
Overview:The Identity Security Engineer will be a key member of the Ecolab Information Security team responsible for managing identity directory services user access provisioning and de-provisioning implementing and maintaining IAM technology and related infrastructure Application Development Life Cycle (SDLC) security auditing identifying and handling exceptions.
Minimum Qualifications:
Bachelors degree in computer science information technology or related discipline.
6-8 years of experience working in Identity and Access Management (IAM) solutions.
Key Responsibilities:
- Support & Maintenance of IAM Infrastructure:
- Oversee the implementation and ongoing maintenance of Identity and Access Management (IAM) technologies and related infrastructure like EntraID AD (Active Directory) PAM (Privileged Account Management).
- Security & Auditing:
- Ensure compliance with SDLC security requirements and related best practices.
- Conduct regular audits and manage exceptions within IAM processes.
- Collaboration & Communication:
- Collaborate with technical staff business teams and senior management.
- Effectively communicate complex concepts to both technical and non-technical stakeholders.
- Proficient in working in a fast-paced complex dynamic multicultural business environment
Key Technical Skills and Experience:
Must Have
- Active Directory (AD):
- Responsible for setting up configuring and managing AD as well as handling domain controllers and replication between AD sites to ensure high availability.
- Privileged Access Management (PAM):
- Responsible for designing implementing and maintaining robust PAM solutions to protect privileged accounts within our environment.
- Knowledge of Windows server systems.
- Knowledge of Linux-based systems.
- Knowledge of SQL Server from an account perspective.
- Group Policy Objects (GPOs):
- Knowledge of managing GPOs to enforce security settings user configurations and system policies across the organization.
- Cloud and Security:
- Basic knowledge of the Administration and management of Entra ID. This includes user provisioning access control and integration with cloud applications as well as managing authentication authorization and security within Microsofts cloud-based services.
- Such as:
- Single Sign-On (SSO) technologies: SAML OAuth2 OIDC
- Cloud only / federated/synced accounts
- Public Key Infrastructure (PKI):
- Managing internal and external certificates particularly those from Entrust and ADCS Systems. Our responsibilities include issuing renewing and revoking digital certificates as well as authentication and signing.
- Microsoft Entra Connect
- Basic knowledge of the tools and processes of Entra Connect in a managed environment
Nice to Have:
- Data & Automation:
- Proficient in PowerShell scripting or Python (automation)
- Ability to understand and write RegEx
- Ability to execute queries using SQL and Elastic Kibana
- Service Desk & Incident Management:
- ServiceNow knowledge particularly around ticket management.
Certifications:
- Industry-specific certifications in Azure including one or more of the following Microsoft exams:
- SC-300 / AZ-104 / AZ-500 / Password safe admin
Required Experience:
Senior IC