Position: Senior Identity and Access Management Engineer
Company: UnameIT
Experience required: 5y
English level: upper

**What We Do**

As a tech-forward company, we are transforming the way drivers shop for auto parts to benefit today’s digital consumer. Leveraging our company-owned national distribution network, we bring the very best brands and manufacturers directly to consumer hands, cutting out unnecessary costs to provide quality parts at a discount. Through our simple, convenient, and mobile-intuitive website.

**Our Culture**

At the heart of everything we do is a collective drive to serve, succeed, and grow. To achieve this, we’ve focused on building a community that works together, inspires each other, and thrives in an environment where employees are empowered and valued. All the hard work of our entire team has resulted in back-to-back record-breaking quarters for Q1 and Q2 of 2020, as well as our inclusion in the Russell 2000® Index and the LABJ's top 100 Best Places to Work in Los Angeles list for 2020. Join us! 

**Summary of Role/Position**

We are currently seeking a Senior Identity and Access Management Engineer who would be responsible for identity and access management tasks related to end-user access, such as access additions, modifications, deletions, and deactivations from various systems. IAM Engineer will drive architectural reviews, threat models, develop corporate IAM adoption efforts requirements, and support corporate Identity and Access Management initiatives. In addition, this role will drive programs that improve access management infrastructure across the corporate environment and develop policies and procedures for the identity lifecycle. Key areas of focus will include Authentication & Authorization, Federation, Privileged Access Management, provisioning & governance of identity, and identity data.

**YOU WILL:** 

- Analyze current information technology environment to detect critical deficiencies and recommend solutions for improvement.
- Continually identify opportunities to drive efficiency, cost savings, and scale for IT while supporting the organization's growth.
- Provide expertise and understanding of PAM requirements across multiple lines of business and contribute to the overall PAM roadmap.
- Stage and test the new SSO integrations, legacy integrations enhancements, and reconfigurations.
- Function as a technical escalation point for the IT Operations organization and the greater business.
- Contribute to developing and maintaining an IAM strategy with a roadmap of key deliverables and timelines.
- Partner with Enterprise Security team to reinforce and bolster our security posture.
- Partner with compliance teams to support governance, risk, and compliance efforts across the IT organization.
- Manage IAM roles, groups, owners, permissions, mappings, configurations, and conditional access policies.    
- Have full administration and ownership of a certificate management platform.
- Design, Administration, and Support of Active Directory Services for both on-prem and cloud.
- Design, Administration, and Support of MFA.
- Leverage PowerShell to standardize and automate common tasks.
- Provide guidance for AD integration and administration to other IT groups from across the business.
- Proactively drive appropriate security measures to protect enterprise assets and end-users. 
- Develop and maintain accurate documentation. 
- Lead and deliver IT solutions as needed in the cybersecurity domain, partnering with key stakeholders.

**YOU MUST HAVE:**
- Bachelor's degree in computer science, computer engineering, or related field from an accredited institution of higher education.
- Over ten (10) years progressive experience in information technology.
- Five (5) years experience in Identity and Access Management.
- Five (5) years experience in Active Directory Services including ADFS/LDAP/SSO in a large-scale enterprise environment. Azure AD experience is a plus.
- Understanding of automation and scripting associated with server deployment and configuration.
- Strong technical understanding of the Microsoft Stack (Office 365, AD, DNS, Group Policy, Exchange, SQL, etc.), public cloud, storage, VMWare, Citrix, Veeam, and other enterprise technologies.
- Technical in depth understanding of OAuth, SAML, RADIUS and other authentication and authorization protocols.
- Ability to lead projects in partnership with business process owners on Identity and Access Management strategy, attribute and role-based access.
- Experience scaling and integrating directories (LDAP, AD) and defining data strategy to support IAM.
- Experience working with industry leading SSO providers.
- Knowledge of Operating System (OS) hardening. Preferred platforms include Windows (Client and Server), Linux and Hypervisors.
- Strong PowerShell scripting skills.
- Understanding of IT Cybersecurity and Compliance, especially SOX and PCI.
- Strong presentation and writing skills. 
- Be able to lead and take the initiative. 


At our company we understand and value diversity in our employees and are proud to be an Equal Opportunity Employer.  We hire the best talent regardless of sex, national origin, disability, or race.