Job Description:
General Function / Summary:
The Senior Identity & Access Management Engineer is responsible for Identity and Access Management (IAM) solutions including lifecycle of accounts, federation, single sign-on and multi-factor authentication, network access control, privileged account management, provisioning and deprovisioning of active directory account, user access reviews, certificate and key management & encryption standards.
Essential Duties:
Plan and implement security measures to protect the company’s computer systems, networks, and data.
Manage & onboard MFA and SSO solutions to prevent loss of sensitive data through identity theft.
Manage privileged account management and role-based access control solutions for various platforms including Windows, Linux, and serverless solutions in multiple environments including in-house, hybrid cloud, and X-as-a-Service resources.
Strong knowledge managing Azure Entra ID
Strong knowledge managing Microsoft NPS for policies and Radius configurations.
Perform audits of accounts to ensure they meet compliance standards of least privileged access.
Integrate application authentication through SSO.
Participate and assist with Managed Detection and Response (MDR) team members for incident response to protect corporate IT assets, including intellectual property, regulated data, and the company’s reputation.
Configure, troubleshoot, and maintain PAM and RBAC solutions.
Monitor systems for irregular behavior and set up preventive measures.
Remediate access risks if detected from penetration tests.
Recommend and coordinate the implementation of technical controls to support and enforce defined security policies.
Creating user group/user access metrics.
Strong experience using scripting languages like PowerShell, Python, Ruby or JavaScript with the ability to demonstrate knowledge.
Analyze information security hardware and software to ensure maximum performance and provide technical expertise for the administration of security tools.
Develop and maintain security processes and procedures.
Create procedure documentation and PowerPoint presentations.
Perform monthly, quarterly, yearly user access reviews.
Manage & Expand the AIM governance processes and implement process improvements.
Minimum Education and Experience Required:
Bachelor’s degree or equivalent experience
4+ years of experience administering cyber security solutions
3+ years of experience managing Active Directory on Prem
3+ years of experience managing Azure Entra ID including configuring and managing PIM and Just in Time
Strong experience configuring and managing Azure Governance
3+ years’ experience working performing Identity Access Management duties.
2+ years of experience using scripting languages like PowerShell, Python, Ruby or JavaScript.
Strong knowledge of managing Microsoft NPS Policies or equivalent solutions.
Strong knowledge with managing both internal PKI and external TLS certificates.
Experience managing certificate using Venafi Trust Protection Platform or similar tools
Understanding of NIST CFS & ISO27001/2 frameworks methodologies.
Experience configuring, operating, and maintaining security systems.
Strong knowledge of authentication solutions for SSO, MFA & Digital identities.
Familiar with networking technologies, network security, and network monitoring solutions.
Strong knowledge and experience with PAM and RBAC systems.
Knowledge of security protocols and principles.
Ability to handle multiple projects and tasks simultaneously and collaborate with all areas of the organization.
Excellent written and verbal communication skills.
Proficient in Microsoft O365 programs.
Ability and willingness to consistently live and embrace our core values of Accountable, Inclusive, Transparent, and Focused
Top Skills
What We Do
CNG Holdings Inc. (CNG) is headquartered in Cincinnati, Ohio, and is a respected leader in the financial services industry. Through professional partnerships, CNG provides a wide range of convenient and accessible financial products and services designed to improve customers’ financial situations, thereby filling a need and delivering value to our customers.
Our mission is to help and educate our customers while building and nurturing long-term relationships. We strive to make a difference in our customers’ lives and the communities we serve.
Our vision is to deliver innovative financial solutions that better fulfill our customers’ unique financial needs so that they can build a better future for themselves and their families.
CNG Holdings Inc. core values ultimately define how we treat our customers and each other. We are:
• Inclusive: We are committed to creating environments that make all people feel welcomed, supported and valued; giving people the respect that is due them; being human and recognizing the humanity in others.
• Accountable: We do what we say we’re going to do. We take ownership for the quality of our individual work but also take pride in what we deliver as a team. We operate with honesty and integrity.
• Transparent: Share information. Share mistakes. Share victories. Trust is built through transparency.
• Focused: Work with a sense of urgency on the critical few. Everyone is responsible to own their focus area, so we deliver on the collective results through flowless execution. We’re empowered to make decisions which benefit the health of the company.
We demonstrate our commitment to being customer-centric by placing our customer at the center of all our communications, not ourselves.
