IAM Security Engineer

Insight Global is seeking an IAM Engineer to join one of our large PBM clients. This Security Engineer is responsible for implementation, maintenance, and support of IT security tools and controls that enable the organization to detect and prevent computer security and cyber threats. This position works with cross-functional teams to ensure that controls are properly implemented, configured, and performing as intended in support of company security policy and applicable regulations. The Security Engineer serves as a subject matter expert on one or more types of technical security controls and provides guidance to junior staff as well as other areas of IT on the proper application and support of those controls. This role will fill the position of an identity management engineer who can integrate, support, and maintain the security configuration of the clients identity and access management systems.

Other responsibilities of this role include the following:
Collaborate with teams implementing HashiCorp Vault and CyberArk services.
Design/build new authentication methods related to secret engine based on requirements gathered
Assist application team(s) with onboarding digital secrets to HashiCorp to review environment for authentication method, secrets engine to onboarded secrets and end to end lifecycle management activities and ongoing support of solution
Implement security controls and processes around privileged infrastructure access utilizing CyberArk SIA
Implement and maintain security controls to support compliance with regulatory requirements
Document configuration standards, processes, and metrics for technical security controls
Integrate technical security controls with the clients systems and applications
Define configuration standards, processes, and metrics for security controls
Provide security consulting to internal project teams and departments regarding security standards and requirements
Evaluate various software, hardware, or other technologies for possible application to enhance security of the clients systems and data

We are a company committed to creating inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity employer that believes everyone matters. Qualified candidates will receive consideration for employment opportunities without regard to race, religion, sex, age, marital status, national origin, sexual orientation, citizenship status, disability, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com. The EEOC "Know Your Rights" Poster is available here.

To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/ .

Required Qualifications:
Bachelors degree in computer science or related field or combination of education and/or work experience
6 + years in the Information Security field
6 + years in Information Technology
Strong critical thinking and problem solving skills
Ability to interpret and produce technical documentation such as diagrams, configuration
parameters, etc.
Ability to manage multiple priorities
Ability to facilitate meetings with technical and non-technical staff
Proven experience with definition, implementation, and support of technical security controls in an enterprise environment

Technical Qualifications:
HashiCorp Vault secrets experience
Terraform
Cyberark SIA
Identity Management experience in cloud providers GCP, Azure, AWS
Experience with Javascript, JAVA, SQL, SOAP, REST, and Workflow development.
Experience with integrations between systems using API, Web Service, LDAP, or other common integrations
Single Sign-On solutions leveraging OIDC, OAUTH, SAML, and other industry standard protocols.
Familiar with directory services, LDAP v3 and Active Directory.
Understanding of common Identity and Access Management processes such as, Password Management, Role Management, Access Certification, and Automated Provisioning,
Ability to identify a gap or need and drive it to a resolution
Experience working in environment with regulatory compliance requirements (HIPAA, PCI, etc.)
Experience with security configuration and administration on a variety of types of networks, operating systems, and applications

Benefit packages for this role will start on the 31st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.