Education:

• Bachelor’s degree in Information Technology or relevant field of required
• MCSE, MCIPT, Azure and/ or Google Certifications, VMWare VCP6-DCV

Work Experiences:

• 3+ years of experience in-depth IAM administration which includes research, design, installation, testing, configuration, implementation, daily use, troubleshooting, and maintenance of IAM tools, which include, but are not limited to Sailpoint. 
• Foundational knowledge of Windows, Linux/Unix, and iSeries (AS400) Operating systems
• Working knowledge of database, networking, virtualization, and server hardware concepts
• Experienced with CyberArk or similar Privileged Access Management platform
• Working knowledge of rogue accounts and role management processes
• Experience with application support and system trouble shooting preferred
• SAML and SSO integration expert, experience with open source and commercial SAML implementations (ADFS, Azure AD, Okta, SAML, Ping, OID, .etc.)
• Should be an expert in the areas of Identity and Access Management as well as Governance
• Experience with automating access control processes such as User Provisioning, Onboarding, Role-Based Access Control (RBAC), authorization models, Single Sign-On (SSO), LDAP, Active Directory
• Working experience on different types of Single-Sign-On (SSO), password reset, self-service, federated identity, multi-factor authentication (MFA), and IAM products and services, including Identity as a Service (IDaaS)
• Experience migrating disparate legacy IAM technologies and processes to modern architectures is preferred
• Experience with offshore teams preferred

Skills:

• Strong interpersonal, written, and verbal communication skills to interface effectively with individuals at various levels
• Thorough working knowledge of Windows Server 2003/2008/2012/ 2016, Unix
• Thorough working knowledge of Active Directory
• Subject matter expert level experience in one or more of the following: Web Access Management (WAM), Single Sign On (SSO) Federation (SAML and OIDC), Multi-Factor Authentication (MFA), LDAP Directories, Active Directory
• Experience in CyberArk setup and administration
• Experience in managing deployments of an IAM platform (i.e.: Oracle IdM, SailPoint IdentityIQ or Savyint)
• Experience with role mining, role-based access control and access certification with Oracle IdM, SailPoint IdentityIQ or Savyint
• Experience with scripting skills (Java, BeanShell/JavaScript, JSP/Servlets, SQLand/or PowerShell preferred)
• Profound understanding of web-based technologies including multi-tier applications and security standards (HTTP, TLS, REST/SOAP, Cookie Handling, SAML, OAUTH, OIDC, WS-Trust,…)
• Thorough working knowledge of and ability to, configure and resolved issues related to Microsoft Office 365.
• Ability to remain organized, pay attention to detail, and meet critical deadlines
• Analytical with strong problem-solving abilities and creative resolution skills
• Ability to work well under pressure while consistently meeting time sensitive deadlines

Responsibilities:

• Responsible for administration, configuration, and maintenance of Enterprise IAM tools
• Conduct periodic recertification activities for identity and access management processes
• Proactively monitor the customer experience, application performance and hosting infrastructure
• Actively participate in customizing, and integrating IAM solutions such as Azure Active Directory, SailPoint, CyberArk and PingFederate
• Partner with Department Leaders to support development of roles, applications, workflows and other configuration components
• Participate in root cause analysis and long term solutions to improve availability and performance of the application portfolio
• Participate in projects and provides cross-functional IT application support
• Ensure developed solutions are aligned with Enterprise Operations standards and procedures
• Maintain and administer test and pre-production environments
• Participate in high severity incident recovery efforts
• Manage IAM rule engine, leveraging automation and attributes for account lifecycle and role automation
• Identify and mitigate risk while adhering to corporate and department change control procedures
• Develop a thorough understanding of Academy’s policies, procedures and safety rules
• Duties may change; team members may be required to perform other duties as assigned

Physical Requirements & Attendance

• Acceptable level of hearing and vision to perform job duties
• Adhere to company work hours, policies, procedures, and rules governing professional staff behavior
• Regular attendance required