USC/GC/GC-EAD
Must share LinkedIn URL along with photo ID
IAM Access & Authentication Architect
Remote- Client based in RI
Key Skills: IAM Authentication & Access design, large/ enterprise environment, leadership experience
Must Have - 12+ years of hands-on experience in Identity Governance & Administration area at the enterprise level.
- Must be an expert in Authentication & Access Management area and related technology
- Authentication space (12+ years) MUST:
- Multi-factor authentication (MFA) including password less MFA
- Security knowledge of various technology & protocols - FIDO, PKI, Mobile MFA, OTP, FIDO key, Biometric authentication, behavior & risk-based authentication
- Implementation experience with web, device (laptop, etc.), infrastructure, and API authentication use cases.
- Mobile security knowledge is a plus.
- Access Management space (12+ years):
- Identity Federation & Single Sign-On (SSO)
- implementing SAML, OpenID Connect (OIDC), and OAuth 2.0
- Security about session management
- Continuous access control
- Integration with cloud and on-premises systems including Azure AD, GCP, Salesforce, etc.
- Identity gateway (proxy) and similar implementation
- Privileged Access Management
- Privileged Access Management for admin and privileged accounts
- Just-in-time and time-based access control
- Access control solution for Linux, Windows servers, Kubernetes/docker, databases, Clouds and other PAM use cases.
- Other:
- REST API and JSON working experience
- LDAP and Active Directory integration experience
- Working knowledge of some of the IAM products: Examples Below.
- PingIdentity, Okta, HYPR, Axiad, ForgeRock, SiteMinder, TransmitSecurity, Azure AD, etc.
- Centrify/Delinea, BeyondTrust, CyberARK, etc.