The Challenge

You will serve as a subject matter expert that contributes directly to the development of OneTrust’s IAM strategy, policy, standards, and procedures.

You will collaborate with various business areas and teams to evaluate IAM management strategies to improve security posture and enhance protection of sensitive data, evaluate potential compliance areas to identify gaps, and ensure full compliance with data protection laws and regulations.

You will participate in the implementation of IAM strategies, solutions, and program.

You will facilitate discussions with internal customers to educate them about applicable IAM requirements.

Your Mission

• Plan, develop, implement, and maintain a digital identity program to support the protection of OneTrust while satisfying compliance and contractual requirements 
• Assist in the design, configuration, and implementation of robust identity and access solutions including tools to support onboarding, offboarding, user provisioning, deprovisioning, single sign on, federated identities, multi-factor authentication, and privileged account management solutions.
• Define or augment access control protocols and establish role-based access control mechanisms to maintain a strategy of least privilege 
• Support security audits and customer assessments as needed 
• Manage and mature processes for recertification of user access 
• Develop and maintain key vendor and other partner relationships to support the identity program  
• Define metrics and develop reporting on the efficacy of access controls 
• Partner with other HR, IT, Security, and Privacy leaders to: 
• Adhere activities to controls necessary for security, privacy, and internal policies 
• Create, maintain, and enforce well documented standards and procedures for the implementation of technical identity and access solutions. 
• Build a growing team of identity professionals to provide a high level of support to the organization and employees 
• You will strategize with business partners in a global fast-growing organization around onboarding/off-boarding
• Directly support user provisioning/deprovisioning, and modern access management solutions, such as single sign-on, multi-factor authentication, and privileged account management. 
• Liaise with the internal and external IT teams to integrate security requirements into core infrastructure practices
• In this role, you will own the overall IAM technology stack, processes and documentation

You Are

• Background in all aspects of Identity & Access Management
• Knowledge of best practices in protecting information
• Ability to communicate clearly, both verbally and in writing
• Ability to collaborate and coordinate with multiple teams and vendors.
• Ability to work independently and as part of a team.
• Ability to multitask and prioritize effectively.
• Keen attention to details, while keeping the big picture in mind
• Ability to work with no direct supervision.
• Ability to mentor, train, and educate other personnel
• BA/BS in Computer Science, Engineering, Math or related subject
• 5+ years of IAM experience
• 3+ years PAM and/or Secrets Management experience
• 3+ years cloud experience (e.g., Azure, AWS, G-Suite)
• Understanding of information security best practices around confidentiality, integrity, and availability
• Experience with Cloud Identity Management platforms (e.g., SailPoint, Saviynt, Okta)
• Experience with Cloud Privileged Access Management platforms (e.g., CyberArk Privilege Cloud, Delinea Secrets Server, Saviynt CPAM, Hashicorp Boundary)
• Experience with third-party Credential/Secrets Management solutions (e.g., CyberArk Conjur, Hashicorp Vault, AKeyless)
• Experience with Cloud native Secrets Management solutions (e.g., AWS Secrets Manager, Azure Key Vault, Google Secrets Manager)
• Experience with Access Federation and Multi-Factor Authentication
• Experience developing automation scripts using scripting languages such as PowerShell or Python
• Experience working with DevOps team to secure the CI/CD pipeline and tools such as Gitlab, Bitbucket, Jenkins, Etc.
• Expert in Privileged Access Management concepts, process, and controls
• Working knowledge of authentication and authorization capabilities for operating systems and applications as well as working knowledge of security protocols such as RADIUS, LDAP, Kerberos, SAML, etc.
• Strong organizational skills to excel in a complex and rapidly evolving environment. 

Extra Awesome

• Preferred experience with Saviynt IGA, Akeyless Secrets Management and Secure Remote Access, and Azure/EntraID Federation.
• Cloud and/or Security Certifications such as CISSP, CISM, Azure Security Engineer, AWS Security Specialist, etc.