Position: IAM Security Specialist
Company: Motion Software
Experience required: 3y
Category: Security
English level: intermediate
Published: 2021-07-01T00:00:00+03:00

**Client**
A global sports betting, gaming, and entertainment provider for over thirteen million customers worldwide.

**Responsibilities**
- Provides input to the IAM roadmap as it pertains to our current solution technologies (e.g. SailPoint), as well as future technologies, and align priorities to support the roadmap realization
- Drives IAM initiatives to improve our broader security posture, including integration of critical applications, demonstrated by metrics
- Provides hands-on support, as needed, to initiatives related to our IAM solution technologies
- Engages in continuous technology improvement, process improvement, and quality control
- Oversees access control governance procedures, including periodic access review routines
- Owns the relevant documentation and training required for IAM initiatives and routines
- Reports progress and system health through metrics and KPIs that are risk-driven and/or operational in nature
- Leverages data to drive decision making and advocates for security throughout the organization
- Promotes and delivers with an agile and CI/CD delivery mindset to achieve program objectives
- Addresses ticket queue in a timely fashion and follows appropriate change management procedures
- Understands risk-based approach, balancing business needs against potential risks
- Effectively communicates issues/risks, options, pros/cons, and recommendations to drive change and overcome obstacles
- Consults on regulatory compliance requirements, reporting and inquiries
- Provides support and consultation for security audits (PCI-DSS, ISO27001) and assists with formulating management responses and appropriate remediation activities
- Stays current on security trends and industry best practices, providing input and recommendations based on research

**Knowledge & Skills**
- Extensive knowledge of identity and access management (IAM) concepts, such as authentication, authorisation, account lifecycle (joiner, mover, leaver), password policies, MFA principles, RBAC/ABAC, least privilege, etc
- Knowledge of LDAP/Active Directory, and relevant IT architecture
- Familiarity with compliance organisations and standards (e.g. PCI-DSS, ISO27001, NIST, SOX etc.)
- Familiarity with scripting languages (e.g. PowerShell etc.) a plus
- Knowledge and understanding of APIs and familiarity with service-oriented architecture and web services integration (SOAP, WSDL, REST) a plus
- Knowledge of web technologies (XML, HTML, SPML/SOAP, etc.), PowerShell, SaaS applications, network operations (networks, security protocols and email [SMTP, POP3]) a plus 
- Knowledge of data encryption types and standards 
- Knowledge of ticketing and documentation systems (JIRA, Confluence)

**Experience**
- 3+ years of experience with identity management solutions (e.g., active directory), identity governance administration solutions (e.g. SailPoint), or privileged access management solutions (e.g. CyberArk)
- 3+ years of experience with deploying centralised authentication mechanisms, like SSO
- 3+ years of experience as a senior systems specialist/engineer
- 3+ years of experience with performing control routines and providing requested audit and attestation evidence

**Certification in one or more of the following areas is desired**
- Certified Information Security Professional (CISSP)
- Certified Cloud Security Professional (CCSP)
- Certified Information Systems Auditor (CISA)
- Certified Information Security Manager (CISM)
- Certified in Risk and Information Systems Control (CRISC)
- and/or Certified in Governance of Enterprise IT (CGEIT)

**What's in it for you**
GROWTH
- External & Internal Trainings - Courses
- Scholarships & Certifications - Workshops & Conferences
- Network of Experts

WELL-BEING
- Premium Health Insurance & Medical Assistance
- Gym Membership
- Recreational Facilities
- Adventure Sports and Sporting Equipment
- Weekly Team Activities
- Community Events & Regular Teambuildings and Travel

EQUIPMENT
- 24/7 Access to Fully-Equipped Offices
- Coworking
- Home Office Gear & Technical Equipment - Internet Connection & Office Supplies