JobRialto
Cloud Infrastructure - Specialist I
JobRialto, Dallas, Texas, United States, 75215
Job Summary:
•Seeking a skilled professional with extensive experience in Identity Governance and Privileged Access Management.
•The ideal candidate will have a strong background in SailPoint, CyberArk, and cloud security.
Key Responsibilities:
•Design and implement SailPoint Identity Now or IIQ and access management solutions.
•Work with Application Teams to identify, aggregate, and correlate Application/System User Accounts to Identity Cubes within SailPoint.
•Develop and configure SailPoint modules (e.g., audit, compliance, lifecycle, service account).
•Design, develop, test, and troubleshoot custom system/application connectors within SailPoint Identity Now.
•Provide product expertise in IIQ, CyberArk, Microsoft Active Directory, relational databases (Oracle/SQL Server/MySQL/DB2), Java, Bean Shell, REST API, and web services.
•Troubleshoot and resolve technical issues related to the SailPoint platform.
•Conduct regular audits and reviews to ensure compliance with security policies and procedures.
•Develop and maintain documentation for processes, procedures, and system configurations.
•Mentor and train junior team members on SailPoint best practices and technologies.
Required Qualifications:
•Minimum of 10+ years of experience in IAM.
•7+ years of experience in SailPoint.
•5+ years of experience in CyberArk.
•Experience integrating SailPoint Identity Now, CyberArk, Azure AD, ServiceNow, and API development for SailPoint functions.
•Proficiency with REST web services, SAML 2.0, SailPoint Identity Now, OAuth, WS-Security, and other authentication/authorization protocols.
•Excellent communication skills and extensive experience working with clients and partners.
•Expert-level experience with IAM protocols such as SCIM, web services, WS-Fed, SAML, OpenID Connect, and OAuth.
Preferred Qualifications:
•Good understanding of IAM concepts.
•Experience authoring policy as code (OPA/Cedar).
•Experience implementing K8 RBAC controls.
•Knowledge of security concepts (with zero-trust design principles as a plus).
•Hands-on experience designing and implementing information security on public cloud.
•Hands-on experience with automation and development.
•Ability to work independently and collaboratively.
Certifications:
•Relevant certifications in IAM or cloud security are a plus.
Onsite Requirement:
•No
•Number of days onsite: 3
•Office Address: 3560 Dallas Pkwy, Frisco, TX 75034, United States
Expectations from this role:
•Resolve complex trouble tickets spanning different technologies and fine-tune infrastructure for optimum performance.
•Mentor new team members in understanding customer infrastructure and processes.
•Perform ticket data analysis for incident reduction.
•Perform capacity planning based on increased demand.
•Perform root cause analysis to find corrective and preventive actions after major incidents and escalations.
•Work on problem tickets to find permanent solutions for repeated issues.
•Review and approve rollout and rollback plans for change implementation.
•Identify opportunities for continued service improvement and delivery excellence.
Typical Performance Measures:
•SLA adherence.
•Time-bound resolution of elevated tickets (OLA).
•Manage ticket backlog timelines (OLA).
•Adhere to defined processes - number of NCs in internal/external audits.
•Number of KB articles created.
•Number of incidents and change tickets handled.
•Number of elevated tickets resolved.
•Number of successful change tickets.
•Percentage completion of all mandatory training requirements.
Performance Areas:
•Resolution: Understand priority and severity based on ITIL practice, resolve trouble tickets within agreed resolution SLA.
•Troubleshooting: Perform logical/analytical troubleshooting, convert new steps to KB articles, and work on problem tickets to identify permanent solutions.
•Escalation/Elevation: Escalate within the organization/customer peer in case of resolution delay, adhere to OLA, and work on elevated tickets from L1.
•Tickets Backlog/Resolution: Follow up on tickets based on agreed timelines, manage ticket backlogs/last activity as per defined process, resolve incidents and SRs within agreed timelines, and execute change tickets for infrastructure.
•Installation: Install and configure tools, software, and patches.
•Runbook/KB: Update KB with new findings and document troubleshooting steps as knowledge base.
•Collaboration: Collaborate with different towers of delivery for ticket resolution, actively participate in team/organization-wide initiatives, and coordinate with Client ISMS teams for resolving connectivity-related issues.
•Stakeholder Management: Lead customer and vendor calls, organize meetings with different stakeholders, and take ownership of function's internal communications and related change management.
•Strategic: Define the strategy on data management, policy management, and data retention management, support the definition of the IT strategy for the function's relevant scope, and ensure the strategy is tracked, benchmarked, and updated.
•Process Adherence: Thorough understanding of organization and customer-defined processes, suggest process improvements and CSI ideas, and adhere to organization's policies and business conduct.
•Process/Efficiency Improvement: Proactively identify opportunities to increase service levels and mitigate issues in service delivery, take accountability for overall productivity efforts, and coordinate function-specific tasks.
•Process Implementation: Coordinate and monitor IT process implementation within the function.
•Compliance: Support information governance activities and audit preparations, act as a function SPOC for IT audits in local sites, and work closely with ISRM.
•Training: Complete all mandatory training requirements on time, provide on-floor training and one-to-one mentorship for new joiners, and complete certification of respective career paths.
•Performance Management: Update FAST Goals in NorthStar, track, report, and seek continuous feedback from peers and manager, set goals for team members and mentees, and assist new team members in understanding the customer environment and day-to-day operations.
Skill Examples:
•Good communication skills (written, verbal, and email etiquette) to interact with different teams and customers.
•Modify/create runbooks based on suggested changes from juniors or newly identified steps.
•Ability to work on an elevated server ticket and solve.
Networking:
•Troubleshooting skills in static and dynamic routing protocols.
•Capability of running netflow analyzers in different product lines.
Server:
•Skills in installing and configuring Active Directory, DNS, DHCP, DFS, IIS, patch management.
•Excellent troubleshooting skills in various technologies like AD replication, DNS issues, etc.
•Skills in managing high availability solutions like failover clustering, VMware clustering, etc.
Storage and Backup:
•Ability to give recommendations to customers, perform storage and backup enhancements, and perform change management.
•Skilled in core storage and backup technologies.
Education:
Bachelors Degree
•Seeking a skilled professional with extensive experience in Identity Governance and Privileged Access Management.
•The ideal candidate will have a strong background in SailPoint, CyberArk, and cloud security.
Key Responsibilities:
•Design and implement SailPoint Identity Now or IIQ and access management solutions.
•Work with Application Teams to identify, aggregate, and correlate Application/System User Accounts to Identity Cubes within SailPoint.
•Develop and configure SailPoint modules (e.g., audit, compliance, lifecycle, service account).
•Design, develop, test, and troubleshoot custom system/application connectors within SailPoint Identity Now.
•Provide product expertise in IIQ, CyberArk, Microsoft Active Directory, relational databases (Oracle/SQL Server/MySQL/DB2), Java, Bean Shell, REST API, and web services.
•Troubleshoot and resolve technical issues related to the SailPoint platform.
•Conduct regular audits and reviews to ensure compliance with security policies and procedures.
•Develop and maintain documentation for processes, procedures, and system configurations.
•Mentor and train junior team members on SailPoint best practices and technologies.
Required Qualifications:
•Minimum of 10+ years of experience in IAM.
•7+ years of experience in SailPoint.
•5+ years of experience in CyberArk.
•Experience integrating SailPoint Identity Now, CyberArk, Azure AD, ServiceNow, and API development for SailPoint functions.
•Proficiency with REST web services, SAML 2.0, SailPoint Identity Now, OAuth, WS-Security, and other authentication/authorization protocols.
•Excellent communication skills and extensive experience working with clients and partners.
•Expert-level experience with IAM protocols such as SCIM, web services, WS-Fed, SAML, OpenID Connect, and OAuth.
Preferred Qualifications:
•Good understanding of IAM concepts.
•Experience authoring policy as code (OPA/Cedar).
•Experience implementing K8 RBAC controls.
•Knowledge of security concepts (with zero-trust design principles as a plus).
•Hands-on experience designing and implementing information security on public cloud.
•Hands-on experience with automation and development.
•Ability to work independently and collaboratively.
Certifications:
•Relevant certifications in IAM or cloud security are a plus.
Onsite Requirement:
•No
•Number of days onsite: 3
•Office Address: 3560 Dallas Pkwy, Frisco, TX 75034, United States
Expectations from this role:
•Resolve complex trouble tickets spanning different technologies and fine-tune infrastructure for optimum performance.
•Mentor new team members in understanding customer infrastructure and processes.
•Perform ticket data analysis for incident reduction.
•Perform capacity planning based on increased demand.
•Perform root cause analysis to find corrective and preventive actions after major incidents and escalations.
•Work on problem tickets to find permanent solutions for repeated issues.
•Review and approve rollout and rollback plans for change implementation.
•Identify opportunities for continued service improvement and delivery excellence.
Typical Performance Measures:
•SLA adherence.
•Time-bound resolution of elevated tickets (OLA).
•Manage ticket backlog timelines (OLA).
•Adhere to defined processes - number of NCs in internal/external audits.
•Number of KB articles created.
•Number of incidents and change tickets handled.
•Number of elevated tickets resolved.
•Number of successful change tickets.
•Percentage completion of all mandatory training requirements.
Performance Areas:
•Resolution: Understand priority and severity based on ITIL practice, resolve trouble tickets within agreed resolution SLA.
•Troubleshooting: Perform logical/analytical troubleshooting, convert new steps to KB articles, and work on problem tickets to identify permanent solutions.
•Escalation/Elevation: Escalate within the organization/customer peer in case of resolution delay, adhere to OLA, and work on elevated tickets from L1.
•Tickets Backlog/Resolution: Follow up on tickets based on agreed timelines, manage ticket backlogs/last activity as per defined process, resolve incidents and SRs within agreed timelines, and execute change tickets for infrastructure.
•Installation: Install and configure tools, software, and patches.
•Runbook/KB: Update KB with new findings and document troubleshooting steps as knowledge base.
•Collaboration: Collaborate with different towers of delivery for ticket resolution, actively participate in team/organization-wide initiatives, and coordinate with Client ISMS teams for resolving connectivity-related issues.
•Stakeholder Management: Lead customer and vendor calls, organize meetings with different stakeholders, and take ownership of function's internal communications and related change management.
•Strategic: Define the strategy on data management, policy management, and data retention management, support the definition of the IT strategy for the function's relevant scope, and ensure the strategy is tracked, benchmarked, and updated.
•Process Adherence: Thorough understanding of organization and customer-defined processes, suggest process improvements and CSI ideas, and adhere to organization's policies and business conduct.
•Process/Efficiency Improvement: Proactively identify opportunities to increase service levels and mitigate issues in service delivery, take accountability for overall productivity efforts, and coordinate function-specific tasks.
•Process Implementation: Coordinate and monitor IT process implementation within the function.
•Compliance: Support information governance activities and audit preparations, act as a function SPOC for IT audits in local sites, and work closely with ISRM.
•Training: Complete all mandatory training requirements on time, provide on-floor training and one-to-one mentorship for new joiners, and complete certification of respective career paths.
•Performance Management: Update FAST Goals in NorthStar, track, report, and seek continuous feedback from peers and manager, set goals for team members and mentees, and assist new team members in understanding the customer environment and day-to-day operations.
Skill Examples:
•Good communication skills (written, verbal, and email etiquette) to interact with different teams and customers.
•Modify/create runbooks based on suggested changes from juniors or newly identified steps.
•Ability to work on an elevated server ticket and solve.
Networking:
•Troubleshooting skills in static and dynamic routing protocols.
•Capability of running netflow analyzers in different product lines.
Server:
•Skills in installing and configuring Active Directory, DNS, DHCP, DFS, IIS, patch management.
•Excellent troubleshooting skills in various technologies like AD replication, DNS issues, etc.
•Skills in managing high availability solutions like failover clustering, VMware clustering, etc.
Storage and Backup:
•Ability to give recommendations to customers, perform storage and backup enhancements, and perform change management.
•Skilled in core storage and backup technologies.
Education:
Bachelors Degree