IAM Access Gateway Engineer

Security Automation Engineer

Access gateway engineer uses technology to improve, streamline and automate information technology systems and services. The eBusiness Security Access Gateway team is seeking an automation engineer to join a team of security engineers to create and improve Infrastructure and Configuration as Code (IaC and CaC). The access gateway engineer will collaborate with the eBusiness engineering team to understand secure authentication, authorization, web gateway, and API services to reduce manual processes, build CI/CD pipelines, and reduce overall time to market.

Position

requirements:
An automation engineer is needed to assist with further development of automated deployments inclusive of IBM security products. This position would assist in design and developing the code required to build and maintain access management services. This will allow the enhancement of and development of stronger automation processes, including full CI/CD pipelines, around the various access gateway environments, leading to less manual execution of scripts. Further automation will allow administrators to focus on code rather than procedures.

Long term this will improve change management (cm) practices by ensuring all changes are captured in source control. This will enable automated rebuilds rehydrating environments and rapid recovery from ransomware or other critical incidents. The position will be responsible for improving existing processes and creating new automated health checks. Further efforts will reduce time spent by administrators doing manual tasks, reducing errors, integration with cm, integrate system monitoring for auto incident creation, self-healing based on environmental health, and streamlining work intake requests by integrating with service now. Future development efforts will enable "no touch deployment" to further reduce time to market. Other duties will include knowledge sharing and continuously seeking improvement opportunities.

This position requires advanced level technical knowledge and understanding of the installation, support, performance tuning and maintenance of IBM verify identity access (formerly known as IBM security verify access or isam). Provides collaborative or consultative work of areas of information security with varying complexity to provide support for design, implementation, production and activation of technology products related to IBM verify identity access, directs use of appropriate processes and procedures are effective, enforced and meet standards and requirements.

Coordinates, plans and executes solutions to meet information security needs of clients, work teams and/or internal or external organization management groups. May collaborate and/or coordinate with cross functional teams. This advanced level position is recognized as an advanced contributor and subject matter expert in field.

Knowledge: Advanced knowledge pertaining to concepts and principles in functional area. General knowledge of department/business lines, or system operations, policies, procedures and technologies. Communications: Excellent organizational and communication skills, creativity, attention to detail (compliance), and negotiation skills to interpret results, develop communications and recommend improvements. Able to present information within all settings in a credible, confident and influential manner.

Communicates in a concise, direct and purposeful way. Excellent customer service skills and demonstrated ability to interact with anticipated audiences in a courteous, service-oriented manner. Risk management: [the individual] is responsible for understanding and applying risk management discipline in decision making, and contributing to his or her functions risk management. Decision making: Works independently on broad assignments or under general directions as to scope or objectives.

Makes decisions within established or widely accepted standards. Achieves assigned/planned results by decisions and actions based on professional methods, training, business principles, and practical experience.

Preferred

requirements:
Must have hands on experience with IBM verify identity access (ivia) experience with modern authentication and authorization protocols including: oauth 2.0 open id connect (oidc) federation (saml 2.0) junctions lightweight directory access protocol (ldap) experience establishing identity providers and service providers experience with restful api's experience with javascript experience with python experience with git (lab or hub) ansible tower