Principal I, Identity & Access Management Security (T)

Summary of Position:

The Identity & Access Management (IAM) Administrator is responsible for the support, direction and oversight into the IAM functions across the organization, including areas such as Federation, Privileged Access Management, Authentication & Authorization, Security and Provisioning Identity Data. The position reports to Identity and Access Service Delivery and will be responsible for documenting, designing and administering the IAM infrastructure. This position will provide support to security and develop appropriate audit controls and procedures to ensure the integrity of applications. This position will work closely with the project managers, Security and Compliance personnel, application developers and other administrators in creating functional, scalable and secure applications from design and development through implementation for business clients. This position is responsible for identifying, evaluating and participating in decision making around new and emerging technologies.

Key Requirements:

• Implement and maintain infrastructure for development / testing environment
• Help to drive architectural improvements and standardization for the infrastructure environments, including choice of networking infrastructure, hardware, monitoring software and associated application infrastructure (e.g. web servers, application servers, and database servers)
• Support enhance automated processes to release new solutions into the live environment
• Accountable to ensure adherence with Security and Compliance policies and procedures within Engineering service scope
• Identify, evaluate and participate in the design and engineering around new and emerging technologies.
• Serve as the subject matter expert for Saviynt Identity Governance, Okta for SSO/MFA and Thycotic Privilege Access Management tools and includes installation and configuration, performance tuning, backup and recovery methods in multiple computing environments.   
• Help to drive architectural improvements and standardization for the infrastructure environments, including choice of networking infrastructure, hardware, monitoring software and associated application infrastructure (e.g. web servers, application servers, and database servers)
• Support the overall direction to  the IAM functions across the organization, including areas such as Federation, Privileged Access Management, Authentication & Authorization, Security and Provisioning Identity Data. Responsible for documenting, designing and administering the IAM infrastructure.
• Provide support to security and develop appropriate audit controls and procedures to ensure the integrity of applications.
• Work closely with the project managers, Security and Compliance personnel, application developers and other administrators in creating functional, scalable and secure applications from design and development through implementation for business clients.

Key Requirements/Minimum Qualifications:

·       Education: Bachelor’s degree or equivalent years of applicable experience

o   Preferred certification - Okta Administration Certification, CIAM, CISSP, CISM 

·       Experience: 5 plus years of applicable experience

o   Identity Governance and Administration – 5 years of direct experience at an engineering or architectural level.  Prefer experience in Saviynt at an Architect or Developer level with 2 years supporting, designing and creating complex workflows.

• Privilege Access Management – 3 years of engineering or architectural design level
• Federated Identity principles –3 years of engineering or architectural design level around Federation (OAuth 2.0, SAML 2.0, Single Sign On (SSO), Multifactor Authentication (MFA), Service Provider, SP, IdP, understanding AWS and Azure Cloud integrations)

Preferred Skill:

• Identity Governance and Administration – direct experience at an engineering or architectural level.  Prefer experience in Saviynt at an Administrator or engineering level supporting, designing and creating complex workflows.
• Privilege Access Management – Administrator or engineering design level
•  Federated Identity principles –Administrator or engineering or design level around Federation (OAuth 2.0, SAML 2.0, Single Sign On (SSO), Multifactor Authentication (MFA), Service Provider, SP, IdP, understanding AWS and Azure Cloud integrations)

Work hours: 1 PM to 10 PM IST

Relocation assistance: Yes

Employment Scams: Alcon is aware of employment scams which make false use of our company name or leader’s names to defraud job seekers. Alcon does not offer any positions without interview and never asks candidates for money. All our current job openings are displayed here on the Careers section of our website, where you can search for open positions and apply directly.

If you have encountered a job posting or been approached with a job offer that you suspect may be fraudulent, we strongly recommend you do not respond, send money or personal information, and check our website for current job openings.

ATTENTION: Current Alcon Employee/Contingent Worker

If you are currently an active employee/contingent worker at Alcon, please click the appropriate link below to apply on the Internal Career site.

Find Jobs for Employees

Find Jobs for Contingent Worker

Alcon is an Equal Opportunity Employer and takes pride in maintaining a diverse environment. We do not discriminate in recruitment, hiring, training, promotion or other employment practices for reasons of race, color, religion, gender, national origin, age, sexual orientation, gender identity, marital status, disability, or any other reason.