Description/Job Summary The value drivers for this role are as follows:
- Lifestyle Control Effectiveness
- Least Privilege and Access Risk Reduction
- Auditability and Regulatory Readiness
- Application Onboarding and Integration
- Operational Efficiency and User Experience
Duties and Responsibilities:Identity Lifecycle and Identity Governance Administration & Operations
- Act as the technical lead for the Microsoft Azure Cloud Center of Excellence (COE), providing hands on leadership for cloud solution design, implementation, and optimization.
- Provide solution architecture guidance for Azure IaaS and PaaS workloads, ensuring alignment with enterprise standards, security requirements, and business objectives.
- Lead the implementation and support of hybrid infrastructure solutions, integrating Azure cloud services with on premises data center environments.
- Serve as the primary technical escalation point for complex infrastructure issues related to Azure, on prem systems, and hybrid connectivity.
Application Roles, Entitlements and Access Governance
- Partner with business and application owners to define roles, entitlements, ownership, approval paths, risk attributes, and role-to-entitlement mappings.
- Support RBAC design, access-policy implementation, least-privilege analysis, separation-of-duties rules, access review campaigns, and exception governance.
- Validate that the right reviewers assess the right access based on risk and that decisions, evidence, remediation, and completion are documented.
- Support governance for privileged access, service accounts, application identities, APIs, automation identities, and other non-human identities.
- Maintain identity and entitlement catalogs, business-friendly access descriptions, application ownership records, and governance metadata.
Application Onboarding, Integration and Testing
- Coordinate IGA onboarding with application owners and technical SMEs across enterprise and modernized platforms.
- Gather and validate connector/API information, account schemas, entitlement data, test environments, service accounts, error handling, and deployment requirements.
- Support connectors and workflow integrations; validate account aggregation, provisioning, deprovisioning, reconciliation, logging, and failure handling.
- Build and execute test scenarios for lifecycle events, access requests, user access certifications, roles, SoD policies, negative cases, rollback, and go-live readiness.
- Produce application onboarding/configuration guides and support transition to operational teams.
Reporting, Compliance and Improvement
- Design and drive implementation of dashboards and metrics for lifecycle timeliness, request turnaround, certification completion, access removals, exceptions, reconciliation, SoD violations, and application onboarding.
- Support IAM-related audits, risk assessments, regulatory examinations, incident response, and evidence requests.
- Collaborate with FPI to align managed identity services, SLAs, documentation, control performance, and escalation paths with FCE expectations.
- Identify automation and process-improvement opportunities that reduce manual effort and access risk
Job Qualifications and Requirements:- This position requires a Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field required. Advanced degree or equivalent experience preferred.
- Minimum of 4 years of experience in IAM, IGA, cybersecurity, identity operations, application security, or IT governance, with hands-on responsibility for identity lifecycle, access governance, provisioning, user access certifications, or application onboarding.
- Security-related certifications such as CISSP, CCSP or equivalent are preferred.
- Security+, SSCP, CIAM, Microsoft identity credentials, or equivalent preferred.
- IGA platform certifications for SailPoint, Saviynt, Microsoft Entra ID Governance, or equivalent are preferred
- We offer hybrid work options after two weeks of employment with Farm Credit East. Hybrid work options are determined based on job role and balancing the needs of the customers, the team, and individual work performance. This will be reviewed based on manager discretion.
Compensation and Benefits:- Salary range: $85,000 - $105,000 commensurate with experience.
- Short Term Incentive to reward business results
- Retirement Contributions:
- 401(k) match up to 6% of salary; or for those unable to take full advantage of the 401(k) match, verified student loan payments may qualify for an employer match in your 401(k) up to 6% of salary
- Defined Contribution retirement plan funded at 2-9% of salary depending on years of service
- Time Off:
- 15-25 days of vacation leave per year, depending on years of service
- 12 days of holiday leave per year
- 7.5 days of sick leave in your first year, followed by 12 days of sick leave per year thereafter; unlimited rollover of unused sick leave year to year
- Paid Parental Leave: Up to 80 hours of paid leave for birthing, non-birthing, and adoptive parents
- Family Care Leave: Additional leave options available under FMLA and company policy
- Health and Insurance:
- Comprehensive medical, dental, and vision plans, including preventive care and wellness programs to support your overall health and well-being
- Health Savings Account
- Life insurance at 2x base pay
- Accidental Death and Dismemberment insurance at 2x base pay
- Long-term disability insurance at 2/3 base pay
- Additional Benefits:
- Tuition reimbursement
- Continuing education and training
- Employee Assistance Program offering a wide variety of tools and resources
- Benefits Eligibility:
- Eligibility Begins: First of the month following your hire date
- Eligible Employees: Full-time employees working 30+ hours per week; Part-Time employees working 20+ hours per week.
