Weekend Drive

**Job Information**:
Industry

**Technology**
***

Province

**Karnataka**
***

City

**Bangalore North**
***

Postal Code

**560001**
***

Country

**India**

Role: Identity and Access Management (Senior Systems Engineer)

Experience: 9-11 Years

Skillset: L3

**Common requirements**
- Working knowledge on Tools: OKTA, OIM, CyberArk, Active Directory, Workday, Mimecast, Fortigate firewall, Ivanti, OKTA MFA and Azure MFA, Fortinet VPN (RADIUS), Citrix (RADIUS), ForgeRock
- Extensive knowledge in areas:

- NIST CSF Framework
- Global workforce identity management supporting bulk users.
- Privileged access management (domains, servers, databases, etc.)
- Global customer identity management
- Consent & preference management for Users
- 3rd party identity management for vendors
- PKI management / 3rd party SSL certificates
- Audit compliance (NIS, GDPR, ICFR)
- Digital password vaulting solutions
- Experience with Privileged Identity Access Management Solutions and related technologies
- Routine housekeeping of AD and systems under support purview
- Identity and Access Management architecture experience
- Knowledge on how to design, develop, deploy and support IDM solutions for the IDM Group
- One-time password, Risk-based access and other Multi-Factor Authentication features of IAM strategies.
- Knowledge on Oracle Internet Directory/Oracle Virtual Directory, Sun Directory, Active Directory, Tivoli Directory, Novell Directory Server & CA Directory
- Working knowledge of IAM integration using REST, JAVA etc.
- Knowledge in web services, XML, SOAP and JMS.
- Experience with Database (Oracle, MSSQL, MySQL etc), Directories (LDAP, Active Directory), Design document, Test case development.
- Experience with Application Servers (WebLogic / WebSphere / Tomcat / Apache).
- Experience in integration of JDBC, Active Directory, Exchange, SAP, ERP etc
- Knowledge of identity and access management solutions and models (SSO, SAML, WS-Fed, provisioning, recertification, SCIM, OAuth, Kerberos).- Experience with Design document, Test case development.- Experience in the following areas: single sign-on, enterprise directory architecture and design, directory schema, namespace, replication topology, resource provisioning, role-based access Control, user lifecycle.
- Providing/presenting migration statistics, issues/resolution, and deliverables to leadership, detailing user, group, and physical device success percentages, tracking milestones for what had been migrated or was still in need of migration.
- Knowledge in web services, XML, SOAP and JMS.
- Manual or automated account on-boarding (on-board secrets or create groups)
- Experience in Business Systems Analysis, Remote infrastructure management
- Ability to support APIs and other interfaces with tools owned by various organizations
- One-time password, Risk-based access and other Multi-Factor Authentication features of IAM strategies.
- Generate and publish routine reports as per client requirements.
- Ability to translate security standard and business logic into product policies, workflows, configuration, and custom code development.
- Day to day steady state support of the in-scope Identity Provisioning tools
- Create and Maintain support documentation.
- Client facing and presentation skills.
- Knowledge on the Support life cycle.
- Excellent written, oral communication skills, credibility, interpersonal skills and ability to work with global counterparts.
- Strong leadership skills
- Training and product demos- Maintain asset inventory
- Conduct privileged account review
- Track privileged account clean up
- Collect and maintain requirements
- Accountable for Stakeholder analysis and maintenance
- Develop Use Cases

**CyberArk**:

- CyberArk version 10 or above. (CyberArk components like Vault, CPM, PSM, PSMP, PVWA, AAM, PTA)
- 3- 5 years of work experience supporting CyberArk PIM Suite/ Infrastructure
- Performing compliance checks on CyberArk for IT security safes and to Provide alerts and reports appropriately - Investigate, Provide RCA and resolve Incidents.
- CyberArk Certified Sentry
- Integrating various platforms with CyberArk, such as different LDAP providers, Windows servers, UNIX servers, Database and networking Devices.
- Creating and Managing Safes, Platforms and Owners.
- Central Policy Manager (CPM) policies management or redistribution.

**Azure AD**:

- Should manage Microsoft Identity Management products (Active Directory, Active Directory Federation Services, and Azure, AD Connect, Office 365).
- Managing Identity Access management of Azure Subscriptions, Azure AD, Azure AD Application Proxy, Azure AD Connect, Azure AD Pass Through Authentication
- Having Experience of Creating conditional Access policies Multifactor authentication (MFA), Resetting MFA and Resolving the MFA issues.
- Familiarity in the following areas: single sign-on, enterprise directory architecture and design, directory schema, namespace, replication topology, resource provisionin