Key Facts

Remote From:

Full time

English

Hard Skills

Privileged Access Management Authentication Protocols Identity And Access Management Active Directory Identity And Access Management Software As A Service (SaaS) Workday (Software) Thymeleaf Amazon Web Services Role-Based Access Control (RBAC) +31 more

Other Skills

•
Communication
•
Analytical Skills
•
Teamwork

Roles & Responsibilities

7-12 years of hands-on experience in Identity and Access Management (IAM) security architecture and implementation
Bachelor's or Master's degree in technology or related field; IAM and security certifications such as CISSP, CISM preferred
Expert knowledge of IAM, Privileged Access Management (PAM), Identity Governance and Administration (IGA) technologies
Experience designing and implementing IAM solutions across cloud environments (Azure, AWS, Google Cloud) with SSO, federation, MFA, cloud identities, and proficiency with IAM tooling (SailPoint, Thycotic, Okta, Microsoft) and standards such as SAML/OIDC/OAuth, LDAP/AD/ADFS, and RBAC

Requirements:

Design, implement and oversee centralized IAM architecture for cloud and on-premises environments, including SSO, MFA, identity lifecycle management, and access governance
Collaborate with Development, Architecture, Security, Engineering and Operations to deliver enterprise IAM programs and develop security strategies and architecture vision for cloud IAM
Manage IAM tools, connectors, RBAC policies, roles and permissions; integrate applications with centralized IDPs and maintain logs and incident troubleshooting
Perform discovery audits, environment health checks, and governance tasks; coordinate with offshore teams and vendors for remediation strategies

Arla Foods

About Arla Foods

We are more than 21,000 colleagues across 30 countries and 7,999 dairy farmer-owners in Denmark, Sweden, United Kingdom, Germany, Belgium, Luxembourg, and the Netherlands. We aim to create the future of dairy, to bring healthy and sustainable dairy products to people across the world, and to lead the transition towards sustainable dairy farming and production. We work continuously on the farms, at the dairies, and in our administration to reduce our carbon footprint and environmental impact. We are committed to champion good food habits and inspire a healthy life. We collaborate with NGOs and public stakeholders to develop viable dairy sectors in our emerging markets and to ensure access to affordable dairy nutrients. And we take our responsibility, our relationships, and our role in society seriously. Through these actions, we support a stronger planet and enable stronger people. We work together with our customers, scientists, suppliers, NGO’s, and other stakeholders who help us develop our business. Our consumers will benefit from our innovative approach and quality focus through our well-known brands Arla®, Lurpak®, Castello®, and Puck®, which are sold in more than 120 countries. • Revenue 2023: 13.7 billion EUR • Cooperative farmer owners 2022: 7,999 • Milk volume 2022: 13.9bn kilogram

Company type: XLarge

Founded: 2018

Company size: 10001

Website LinkedIn See all jobs →

Job description

Job Description

Experience: 7 to 12 Years

Work Type: Work From Home

Employment Type: Full Time

The Identity and Access Management (IAM) Security Architect will be responsible for supporting the.
planning, design, development and deployment of centralized identity and access management (IAM).
PAM & identity governance & administration (IGA) solutions for R1. This is a hands-on role focused on.
the security architecture in the IAM space supporting cloud services. This role supports the planning.
design, and delivery of the enterprise-level IAM program in the areas of access management, privileged.
access management, SSO, federation and cloud technologies. This role will work with teams such as.
Development, Architecture, Security, Engineering and Operations to come up with optimized IAM.
solutions. This is a technical position which will support the development of security strategies and architecture vision specifically setting the direction for IAM as it relates to cloud.

Roles and Responsibilities

Provide knowledge and act as a subject matter expert on key principles of (IAM) with an in-depth.
knowledge in the areas of authentication and authorization systems, identity lifecycle.
management, and identity governance.
Generate solutions and policies in support of the Identity Lifecycle Management and Identity.
Governance, PAM, MFA for the company and consumers.
Design and Implement IAM solution and tools to manage R1s expanding cloud identities and
SaaS application footprints (experience implementing technologies such as SailPoint, Thycotic,
Okta, Microsoft etc.).
Provide infrastructure and solutions that provide optimal and secure SSO and MFA experiences.
to employees, contractors, and consumers.
Work with application owners to integrate application security and application roles with
centralized IAM IDPs.
Manage and maintain IAM tools and own identity access and governance related changes.
Develop and deploy custom connectors for IAM tools, if needed.
Work with multiple teams within R1 to develop, maintain and administer RBAC policies, roles and
permissions.
Perform tasks such as collecting logs, analyzing failure conditions, troubleshooting
issues/incidents.
Responsible for performing discovery audits and environment health checks, and present findings
and remediation strategies.
Work with Offshore teams, stakeholders, Vendors for IAM governance tasks and activities.

Skills and Experience:

Identity and Access Management hands-on experience
Expert knowledge of IAM, PAM & IGA technologies and knowledge of cloud identities
In-depth understanding of modern authentication solutions using SAML/OAuth/OIDC.
In depth knowledge of Directory services such as LDAP, Microsoft Active Directory, ADFS.
Experience architecting IAM solutions within Microsoft Azure, Amazon Web Services (AWS),
Google Cloud and, preferably, other cloud providers.
Experience working with cloud security and governance tools, cloud access security brokers
(CASBs), and server virtualization technologies.
Federation concepts and technologies particularly with solutions from ADFS and Okta
Strong experience with Directories, SSO, Federation, Delegated administration, API gateways,
SOA services.
Strong understanding of cloud computing architecture, technical design and implementations,
including Infrastructure as a Service (IaaS), Platform as a Service (PaaS) and Software as a Service
(SaaS) delivery models.
Able to integrate with cloud based IAM vendors.
Familiarity with Workday and ITIL and ITSM processes and ServiceNow tool.
Good understanding of CI and Dev Ops concepts.
This role will be required to work in flexible shift timings supporting US business hours.

Education:

Bachelors/Masters degree in technology and related fields.
IAM and Security related certifications preferable.
CISSP, CISM, and/or International Information System Security Certification Consortium, Certification is a plus.