IAM Senior Engineer in Constanţa

IAM solutions (advanced) SQL (advanced) LDAP (advanced) Powershell (advanced) Linux (advanced) Bash (advanced) Windows (advanced) AWS (advanced) Azure (advanced) SSO (advanced) About the vacancyNortal is looking for an experienced IAM Senior Engineer for long term and full-time employment!About our clientOur client, TUI, is a global business with over 70 000 people on board, great history and challenging plans for building a digital future. TUI is the largest leisure, travel and tourism company globally, and it owns travel agencies, hotels, airlines, cruise ships and retail shops.About the projectThe IAM product team is part of the Colleague Compute domain and has a strong link with the Security Domain. The team is a multi-disciplinary team of experts across Architecture, Engineering, DevOps and Agile Delivery providing services across the group ex. UK, Ireland, Sweden, Norway, Denmark, Finland, Germany, Belgium and The Netherlands.The IAM product team has as goal to deliver IAM as a product. This means that all functions/services within IAM can be received with just a click on button. The business and development teams do not need to worry about IAM tasks and just focus on their delivery. Being able to plugin IAM as a product will reduce their burden and increase IAM security for TUI as a group.MissionDesigning, implementing, integrating, and managing Identity Directory Providers / Stores and identity servicesIntegrate and manage applications in cloud federationIdentify, analyze and resolve system design weaknesses. Troubleshoot and manage the resolution of issues related identities, systems, access, accounts, authentication, authorization, entitlements, and permissions. Determine and recommend the most appropriate response to identified more complex problems, issues and/or defects by assessing impact and prioritizationEnsure the maintenance and monitor IAM systems. Troubleshoot, support and resolve system incidents, problems and changes, as requiredImplement and monitor the Key Performance Indicators for the Access Management ServiceDesign reusable strategies, decisions, service components, libraries and frameworks to support enterprise-level IAM servicesProvide level 2 and level 3 support for clients and coordinate as needed with the technology vendorsProduce IAM technical documentation such IAM detailed design, configuration guides etc.Support on business development (bids) including defining scope of work and interacting with clients and the vendors as required during the proposal development as a part of project and developer teamsImplementing technologies to centrally integrate identity systems across the organization and ensure audit and privacy complianceStreamlining and improving customer experiencesImplementing access controls to applications and maintaining and updating roles in the directoryManaging access and permissions where necessary and implementing automated solutionsCollaborating with key engineering stakeholders to help tackle challenges within the IAM spaceParticipate in the IAM strategy definition and evolutionConduct IAM assessments and identify gaps between the AS-IS situation and the envisioned future state for the organizationContribute to various long-term projects to consolidate the IAM tools and the overall security environmentCoach other members of the organization on the best practices that should be followed in identity and access managementRequirementsHigher education in computer science/technical fieldMinimum of 5 years' experience as IAM engineerComprehensive knowledge and experience with authentication standards and technologiesExtensive hands-on knowledge of identity and access management best practices, procedures, and software solutionsExtensive knowledge and experience with identity and access management technology, such as single sign-on (SSO), two-factor authentication, Conditional Access, privileged access management, etc. in Azure and AWSExperience with Windows, Linux, scripting (Bash, Powershell, or Perl), LDAP, SQL, and web servicesExperience in one of IAM solutions such as: CyberArk, Oracle, ForgeRock, Radius, RSA, PKI, SailPoint, Thycotic, BeyondTrust, Ping IdentityExperience of working with O365 and AWS security capabilities (e.g. Guard Duty…)Upper-intermediate or higher level of spoken and written English