Senior Information Security Analyst

Why you'll love this role

The IAM Specialist is responsible for the design, implementation, and maintenance of the organization's Identity and Access Management (IAM) systems and processes. This role plays a crucial part in ensuring that the right individuals have appropriate access to resources, while protecting sensitive data and systems from unauthorized access.

What you’ll do:

• Authentication and Authorization:
• Implement and maintain authentication mechanisms (e.g., multi-factor authentication, password policies).
• Configure and manage access control policies and rules.
• Monitor authentication logs for suspicious activity.
• Identity Governance:
• Assist in developing and enforcing IAM policies and procedures.
• Conduct regular access reviews and certifications.
• Ensure compliance with relevant regulations and standards (e.g., GDPR).
• Privileged Access Management (PAM):
• Use PAM solutions to monitor and control privileged access.
• Audit privileged activity and sessions.
• User Provisioning and Deprovisioning:
• Work with IT on automation of user provisioning and deprovisioning processes.
• Knowledge of onboarding and offboarding processes
• Single Sign-On (SSO):
• Knowledge of SSO solutions for seamless user access to multiple applications.
• Documentation and Training:
• Develop and maintain documentation for IAM processes and procedures.
• Provide training to end-users and other stakeholders on IAM policies and best practices.
• Security Monitoring and Incident Response:
• Monitor IAM systems for security events and incidents.
• Assist in investigating and responding to security breaches related to identity and access.

About you:

• Education: Bachelor's degree in Computer Science, Information Security, or a related field.
• Experience: 2-3 years of experience in IAM or a related field.
• Certifications: CISSP, CISM, or other relevant security certifications are a plus.
• Skills:
  • Strong understanding of IAM principles and technologies.
  • Strong understanding of Cloud Services & IAM controls
  • Strong understanding of IAM concepts, such as roles, policies, groups, and federation. Proficiency in AWS IAM services and features. Familiarity with scripting languages (e.g., Python, Bash).
  • Experience with common IAM solutions (e.g., Active Directory, Okta, Azure AD, AWS).
  • Proficiency in scripting or programming languages (e.g., PowerShell, Python) for automation.
  • Knowledge of security protocols (e.g., SAML, OAuth, OpenID Connect).
  • Understanding of relevant regulations and standards (e.g., GDPR, HIPAA).
  • Strong analytical and problem-solving skills.
  • Excellent communication and interpersonal skills.

Additional Skills (Preferred):

• Experience with other cloud platforms (e.g., Azure, GCP).
• Knowledge of infrastructure as code (IaC) tools (e.g., Terraform, CloudFormation).
• Experience with security information and event management (SIEM) systems.

Pursuant to the San Francisco Fair Chance Ordinance, Los Angeles Fair Chance Initiative for Hiring Ordinance, and any other state or local hiring regulations, we will consider for employment any qualified applicant, including those with arrest and conviction records, in a manner consistent with the applicable regulation.

Pursuant to the various pay transparency laws/acts, the base salary range is $100,000 to $120,000 plus opportunities for benefits (e.g., medical, dental), equity and discretionary bonuses. Compensation is dependent on geography and may vary.