Senior Security Engineer - Identity Access Management

Position: Senior Security Engineer - Identity Access Management

Overview:The Identity Security Engineer will be a key member of the Ecolab Information Security team, responsible for managing identity directory services, user access provisioning and de-provisioning, implementing and maintaining IAM technology and related infrastructure, Application Development Life Cycle (SDLC) security, auditing, identifying, and handling exceptions.

Minimum Qualifications:

Bachelors degree in computer science, information technology, or related discipline.

6-8 years of experience working in Identity and Access Management (IAM) solutions.

Key Responsibilities:

• Support & Maintenance of IAM Infrastructure:
• Oversee the implementation and ongoing maintenance of Identity and Access Management (IAM) technologies and related infrastructure like EntraID, AD (Active Directory), PAM (Privileged Account Management).
• Security & Auditing:
• Ensure compliance with SDLC security requirements and related best practices.
• Conduct regular audits and manage exceptions within IAM processes.
• Collaboration & Communication:
• Collaborate with technical staff, business teams, and senior management.
• Effectively communicate complex concepts to both technical and non-technical stakeholders.
• Proficient in working in a fast-paced, complex, dynamic, multicultural business environment

Key Technical Skills and Experience:

Must Have

• Active Directory (AD):
• Responsible for setting up, configuring, and managingAD, as well as handling domain controllers and replication between AD sites to ensure high availability.
• Privileged Access Management (PAM):
• Responsible for designing, implementing, and maintaining robustPAMsolutions to protect privileged accounts within our environment.
• Knowledge of Windows server systems.
• Knowledge of Linux-based systems.
• Knowledge of SQL Server from an account perspective.
• Group Policy Objects (GPOs):
• Knowledge of managingGPOsto enforce security settings, user configurations, and system policies across the organization.
• Cloud and Security:
• Basic knowledge of the Administration and management ofEntra ID.This includes user provisioning, access control, and integration with cloud applications, as well as managing authentication, authorization, and security within Microsoft's cloud-based services.
• Such as:
• Single Sign-On (SSO) technologies: SAML, OAuth2, OIDC
• Cloud only / federated/synced accounts
• Public Key Infrastructure (PKI):
• Managing internal and external certificates, particularly those fromEntrust and ADCSSystems. Our responsibilities include issuing, renewing, and revoking digital certificates, as well as authentication and signing.
• Microsoft Entra Connect
• Basic knowledge of the tools and processes ofEntra Connectin a managed environment

Nice to Have:

• Data & Automation:
• Proficient inPowerShellscripting orPython(automation)
• Ability to understand and writeRegEx
• Ability to execute queries usingSQLandElasticKibana
• Service Desk & Incident Management:
• ServiceNow knowledge, particularly around ticket management.

Certifications:

• Industry-specific certifications in Azure, including one or more of the following Microsoft exams:
• SC-300 / AZ-104 / AZ-500 / Password safe admin