IAM Engineer at DotModus

Scope:

DotModus, industry-specific, scalable cloud solutions and Premier Google Partner, are looking for an IAM Engineer. The IAM Engineer is responsible for implementing (installing) an IAM software package, configuring the IAM tool in the IT landscape, configuring connectors to a source (HRM) and target systems (AD, applications, Cloud systems) and developing drivers, portals and other software components.

Responsibilities:

• Work with the Lead Architect and Identity & Access Management (IAM) domain engineers to formulate solutions in line with business goals and security principles.
• Define, document and implement Attribute-Based Access Control (ABAC) solutions in the Global Data Platform and other DAN services as required. 
• Define, document and implement ABAC policy lifecycle (Deploy, Manage, Audit, Deprecate).
• Provide hands-on support during RfP’s and PoCs that DAN conducts for IAM and ABAC solutions and tooling.
• Take IAM/ABAC solution ownership from inception to delivery.
• Work with DAN Agile practices (definition of ready, the definition of done, user stories, acceptance criteria, etc.) to ensure consistent documentation and tracking/ownership of work.
• Contribute to security engineering IAM/ABAC patterns to be applied across multiple cloud providers and technologies.
• Supporting Security Architects in taking designs through the appropriate governance and sign-off.
• Act as a Subject Matter Expert (SME) for security engineering IAM and ABAC related topics and issues.
• Contributing to Security Engineering Threat Models as the IAM SME.

Candidate Profile:

• Experience in testing, modeling, scripting and deploying Attribute-Based Access Control Services (PingID, Forgerock, Axiomatics, SymphonicSoft, PlainID, and NexLabs).
• Experience protecting Web/Cloud Applications via Identity & Access Management (IAM) and Attribute-Based Access Control (ABAC) policies and processes.
• Exposure to IAM and ABAC security domains – Attributes, Identities, Credentials, Policies and Audit, Logging and Monitoring. 
• Demonstrable experience developing re-usable security patterns, providing advice and guidance for ABAC attribute deployments in the form of consultancy to other DAN Teams.
• Experience delivering projects using one or more cloud providers e.g. AWS, Azure or GCP.
• Desirable - DevOps toolchain integration experience – setting up code repositories to pull infrastructure and service builds.