Identity and Access Management Engineer

Company Description

Arηs is a fully independent group of companies specialized in managing complex IT projects and systems for large organisations, focusing on state-of-the-art software development, business intelligence and infrastructure services.

We are composed of 13 entities across 6 countries that are unified by the Arηs Group, with more than 1750 consultants.

This corporate structure enables us to respond quickly to market changes and customer requests, and to communicate and make decisions without layers of bureaucracy.

Our success can be attributed to the synergy among our nine complementary entities, combined with our methodologies, which are based on the Rational Unified Process (RUP) and the Scrum agile software development framework.

Established in 2016, the Greek entity Arηs Developments Hellas aims to extend Arηs Group activities dedicated to the European market providing high-quality services in Software Development, covering the entire application development lifecycle: starting with user requirements, business process redesign and specifications, to continue with development, testing and application maintenance.

Job Description

• Administration and monitoring of Identity and Access Management (IAM) System - Microsoft Identity Manager
• Providing 2nd line support to IAM, Identity Systems and Federation Services Identifying IAM risks and recommend measures to mitigate them.
• Handle all other duties as assigned by the client's Contract Manager. Taking part in standby duty (on-call rotation) for 24/7 support for IAM services.
• Collaborating closely with other teams in DOS Sector (infra, networks, systems etc.)
• Developing and implementing best practices for IAM services and processes.
• Creating and maintaining documentation for operational processes, procedures, and configurations.
• Supporting development teams across our growing development, UAT, and production environments in area of IAM services and processes.

Qualifications

Mandatory requirements:

• Degree in Computer Science or related field plus minimum 3 years of experience.
• Minimum 3 years experience as a Microsoft Identity Manager Engineer/Administrator.
• Minimum 3 years experience automating objects identity life cycle in an Active Directory Domain Services and Entra ID/Azure AD.
• Expertise with Microsoft Identity Manager Portal and Sync engine configuration, customization and troubleshooting.
• Works unassisted and guides junior staff.
• Writes specifications, concept documents, end user and technical documentation; communicates effectively with stakeholders on technical and user requirements matters. 
•  Possessing service-oriented attitude, well developed interpersonal skills, ability to work under pressure and on multiple tasks, sense of initiative and responsibility for the assigned areas of work, accuracy and attention to details.
• Good command of English, equal to B2 according to CERF. 

Desirable requirements:

• Bachelors in Computer Science or related field.
• Minimum 3 years experience with IAM technologies such as SSO, identity federation, multifactor authentication, role/policy-based access, virtual directories, privileged access management, etc.
• Minimum 3 years experience as Sailpoint Identitynow or Sailpoint IIQ Engineer.
• Solid understanding of key Identity & Access Management processes (e.g. joiners/movers/leavers, access request and approval workflows, user access recertification), concepts (e.g. RBAC, SoD) and best practices, with the ability to design and implement them.
• Strong scripting and automation skills, with proficiency in automating identity life cycle through powershell and custom connectors in MIM Sync Engine.
• Expertise with developing rules extensions, connected data source extensions, or password extensions for Microsoft Identity Manager Synchronization Service.
•  Familiarity with federated identity and web services security concepts such as SAML, WS-Federation, OpenID and Oauth.
• General knowledge of the .NET Framework, Microsoft Visual Basic and Visual C# programming tools.
• A valid certificate from one of three vendors - Microsoft, Sailpoint, Saviynt - confirming experience with Identity Governance & Administration solutions provided by these vendors.