Entergy Information Security Engineer III or Sr (Identity Mgmt Systems Support) in The Woodlands, Texas
Date: Sep 26, 2019
Location: The Woodlands, TX, US
Brief Position Description
The Identity Management Systems Specialist assists in delivering Identity & Access Management (IAM), access provisioning and authentication services for employees and vendors, Information Technology and Operational Technology, and with the capability to support cloud and on-premise platforms. The Specialist executes on policies to ensure critical applications, systems and data are protected from unauthorized access while managing the identities and access rights of people both inside and outside the organization.
Key responsibilities include:
Assist in executing on the strategy, roadmap and delivery plans for Identity and Access Management (IAM) Systems
Day-to-day operations of IAM systems to create a successful identify program
Assist with compliance activities to meet requirements of North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP) and Nuclear Regulatory Commission (NRC) Nuclear Cyber (10 CFR 73.54)
Assist with establishing user identity, provisioning and de-provisioning access, access level changes, federation, etc.
Assist with maintenance of IAM technology infrastructure, managing application and user-store integrations, directory capabilities, patching, upgrades, etc.
Support the Enterprise Active Directory (AD) environment, Lightweight Directory Access Protocol (LDAP) services, virtual directory services (VDS) multi-factor authentication (MFA), federation services, privileged account management (PAM) and password management
Support all system use of Role-Based Access Control (RBAC) for verifying and granting access to their resources
This position will be filled as an Info Sec Engineer III or Sr depending on experience.
Three to five years of information security and identity management experience in a corporate environment
Experience related to IAM skills/field: (i.e. provisioning and workflow, authentication and entitlements, role-based access controls (RBAC), data privacy, and IAM solutions)
Exposure to IAM federated roles and responsibilities within corporate environments
Exposure to federated identity and web services security concepts such as SAML, OAuth 2.0, OpenID Connect, OWIN and ID-WSF, WS-Federation, and WS-Security
Some experience with IAM technologies like Active Directory, LDAP, multi-factor authentication across different infrastructure topologies including external vendors
Some experience in supporting different topology models of IAM stack across cloud, on-prem, Multi-Data Centre with 100% availability of the service
Experience working with outsourced teams
Good organizational and time management skills
Experience working in partnership with colleagues (e.g. corporate security) throughout the IT organization, and in collaborative teams to achieve common goals
Minimum knowledge, skills, and abilities required of the position
Awareness of modern Identity Management protocols and standards, frameworks, federation technologies and solutions
Knowledge of AD & LDAP
Awareness of Windows, Linux, Sailpoint, Single sign-on (SSO) and other tools involved in IAM such as Sailpoint, Alert Enterprise Guardian, PING Federate, Active Directory, Radiant Logic Virtual Directory Services (VDS), BeyondTrust PowerBroker and ManageEngine Password Manager Pro
Some technical engineering and process management skills
Understanding of security operations, access management, intrusion detection, and physical security
Awareness of security ramifications of energy related regulations (SOX, HIPAA, NERC CIP, FERC, and NRC Nuclear Cyber (10 CFR 73.54)
Knowledge of security, risk, and control frameworks and standards such as ISO 27001 and 27002, SANS-CAG, NIST, FISMA, COBIT, COSO and ITIL
Good communication skills
Available to travel
Capable of meeting deadlines
Associate’s degree in computer science, cyber security or a related discipline or equivalent work experience.
Any certificates, licenses, etc., required for the position
ISACA certification, such as CISSP, CISM, CISA, CIAM is a plus
Relevant vendor credentials offered by companies such as Symantec, Microsoft, or Sailpoint is a plus
Primary Location: Texas-The Woodlands
Job Function :Information Technology
FLSA Status :Nonexempt
Relocation Option: No Relocation Offered
Union description/code :NON BARGAINING UNIT-NBU
Number of Openings :1
Req ID: 87555
Travel Percentage :Up to 25%
An Equal Opportunity Employer, Minority/Female/Disability/Vets. Please click here to view the full statement.
As a provider of essential services, Entergy expects its employees to be available to work additional hours, to work in alternate locations, and/or to perform additional duties in connection with storms, outages, emergencies, or other situations as deemed necessary by the company. Exempt employees may not be paid overtime associated with such duties.
Nearest Major Market: Houston
Job Segment: Information Security, Corporate Security, Engineer, Systems Engineer, Security, Technology, Engineering