Identity Governance and RBAC Engineer

SUMMARY:
-

POSITION INFO:

Job Details

Our Client

The Company Group Technology is responsible for the provision of a digitally enabled technology service as a group COE, drive business and transformation and provide group-wide digital and data architecture. We operate the various technology platforms and shared services, ensure Cyber and Information Security resilience, and act as technology governance and risk orchestrator for technology across Company.

What will you do?

This role is responsible for day to day operations and administration of Companies processes and technologies towards delivering the organization's Identity Governance and Role Based Access Platforms & Services. Develops and implements new solutions based on a wide variety of different technologies. Assists with investigations and resolution of security incidents. Provides analytical and technical support to team members and business areas. Develops technologies to automate security monitoring and creates security baseline documents and standards.

What will make you successful in this role?

• Support access attestation and recertification processes and deliverables as part of an autonomous service-focused team.
• Defines business cases as required.
• Administer, Implement and operate Identity Governance and Administration Platforms.
• Build, deploy and maintain access attestation / recertification platforms & integration.
• Implement and operate Identity and Role Based Access Platforms & Services
• Collaborate with Security Architecture as is applicable to IAM and Role Based Access platforms and services.
• Collaborate with stakeholders, including business leaders, project managers, developers and architects to understand requirements and constraints.
• Design and implement procedures and best practices in Identity Governance and Administration (IGA).
• Active engagement with technology partners to deliver and integrate Role Based Access solutions and Self-Service across platforms.
• Technical investigation as applicable to Identity and access Governance systems and processes.
• Logical Access Incident Management:
  • Escalate according to agreed procedures if risk is high. Risk management procedures
• Assist Architecture and Engineering with Identity and Access Process design and optimization.
• Project Interactions:
  • Provide Information security requirements (related to logical access administration and review) to project

Qualifications

• Grade 12
• IT related tertiary qualification
• Appropriate Certification (Microsoft Certified: Identity and Access Administrator Associate preferred, MCSA)

Experience and Knowledge

• A minimum of 2 to 5 years Logical Access & Microsoft Administration experience (scripting experience)
• Proven experience with user and access management on Windows systems (Microsoft Active Directory; Microsoft Entra ID / Azure AD)
• IBM RACF & IBM Mainframe experience
• IBM Tivoli Identity Manager experience preferred;
• Experience in logical access administration and information security principles (Security+ preferred).
• Appropriate Certification (Microsoft Certified: Identity and Access Administrator Associate preferred, MCSA)
• MS PowerShell Scripting experience (essential)
• In Depth Understanding of File Share and NTFS permissions including inheritance (with experience) including Logon scripts
• Good understanding of identity and access management principles (like ‘least privilege’ and segregation of duties)

Preferable

• Exchange / Office 365 Administration (On-Prem Exchange admin experience)
• Basic understanding of Cloud Identity and Access Management (AWS preferred, Azure)
• Proven experience in administration of Privileged Access Management accounts (PAM)
• Identity and access experience on any of the following: IBM Tivoli Identity Manager; Mainframe applications; J.D.Edwards
• Knowledge of JSON templates, PowerShell, CLI’s, Shell, Python.
• Active Directory and Exchange engineering knowledge will be an advantage