Architecture/Systems Design Senior Analyst

ABM is currently seeking a highly motivated and experienced Sr. Engineer, Identity & Access Management (IAM). The

IAM position directly reports to the Director, Systems Engineer & Operations. The Identity and Access Engineer (IAE) will

play a vital role in safeguarding ABM's digital assets by ensuring that only authorized individuals have access to the right

resources. They will work closely cross-functional with InfoSec and CoreTech engineers, administrators, and architects

to implement and maintain IAM solutions, including user provisioning, authentication, and access control systems.

ABM (NYSE: ABM) is one of the world's largest providers of integrated facility, engineering, and infrastructure solutions. Every day, our over 100,000 team members deliver essential services that make spaces cleaner, safer, and efficient, enhancing the overall occupant experience.

ABM serves a wide range of market sectors including commercial real estate, aviation, education, mission critical, and manufacturing and distribution. With over $8 billion in annual revenue and a blue-chip client base, ABM delivers innovative technologies and sustainable solutions that enhance facilities and empower clients to achieve their goals. Committed to creating smarter, more connected spaces, ABM is investing in the future to meet evolving challenges and build a healthier, thriving world. ABM: Driving possibility, together.

ABM is an Equal Employment Opportunity (EEO) employer that does not discriminate on the basis of any trait or characteristic protected by applicable federal, state, or local law, including disability and protected veteran status. ABM is committed to working with and providing reasonable accommodation to individuals with disabilities. If you have a disability and need assistance in completing the employment application, please call 888-328-8606. We will provide you with assistance and make a determination on your request for reasonable accommodation on a case-by-case basis.

ABM participates in the U.S. Department of Homeland Security E-Verify program. E-Verify is an internet-based system used to electronically confirm employment eligibility.

ABM is a military-friendly company proudly employing thousands of men and women who have served in the U.S. military. With ABM, you'll have access to a world-class training program and ample opportunities to use the skills you developed while serving our country. Whether you're looking for a frontline or professional position, you can find post-military career opportunities across ABM.

ABM directs all applicants to apply at www.abm.com/careers. ABM does not accept unsolicited resumes or submissions outside of this portal. Applicants should submit their application by clicking Apply Now.

For more information, visit www.abm.com

Required Qualifications:

• A bachelor''s degree in computer science, information technology, or a related field is preferred.
• Knowledge of authentication methods, directory services, and access control systems.
• Strong oral, and written communication skills
• Customer Facing Exposure is a must.
• Strong working knowledge of PAM solutions, including implementation and maintenance
• Delinea
• CyberArk
• Strong problem-solving skills and attention to detail.
• Strong project management skills and the ability to work in a team environment.
• An eagerness to learn and stay updated on the latest developments in IAM and cybersecurity.
• Good understanding of LDAP concepts and working experience with at least a few of the

following technologies:

• Azure Active Directory, SSO, MFA
• Active Directory (on-prem)
• Should have the ability to understand customer scenarios and requirements (may include

integration situations) and be capable of suggesting solutions.

• Should have good knowledge of current IDM, strong Authentication, and PKI (Public Key

Infrastructure) technologies and products.

• Certifications in any of the IAM products would be an added advantage

Preferred Qualifications:

• One or more of the following certifications in area of specialty are preferred. Examples include

CompTIA, CISSP, CSSLP, CISA, CISM, GIAC certs, ITIL, CFE, CNP, CEH

• ISIM support

Responsibilities:

Specific job duties or deliverables that the position requires which will also measure performance:

1. IAM System Design and Implementation Management:

• Assist in the creation, modification, and deletion of user accounts and access privileges in various

systems and applications.

• Conduct regular reviews and audits of user accounts to ensure compliance with security policies.

2. Privileged Access Management:

• Provide direct configuration and maintenance of PAM solutions such as Delinea, password vaulting,

service account compliance, and related policies.

• Assist directly in migration and implementation of PAM solutions.

3. Authentication and Authorization:

• Help in the configuration and maintenance of authentication methods such as single sign-on (SSO),

multi-factor authentication (MFA), and password policies.

• Collaborate in the definition and management of role-based access control (RBAC) policies.

4.Provisioning and De-provisioning:

• Assist in automating user provisioning and de-provisioning processes to improve efficiency and

security.

• Ensure that employees have access to the appropriate resources during their employment lifecycle.

5. Access Policy Management:

• Create and enforce access control policies and security standards in alignment with regulatory

requirements.

• Monitor and review access policies and make adjustments as necessary.

6. Access Governance:

• Participate in access reviews and certification processes to minimize access rights and permissions

that are no longer required.

• Work on IAM reporting and analytics to identify and mitigate risks.

7. Security Policy and Compliance:

• Follow security policies and industry standards to maintain a secure IAM environment.
• Collaborate with senior engineers to ensure compliance with regulations and standards (e.g., GDPR,

HIPAA, NIST).

8. Troubleshooting and Support:

• Assist in resolving IAM-related incidents and provide support for end-users who encounter access

issues.

• Collaborate with the IT Service Desk and other relevant teams to resolve access problems.

9. Collaboration and Documentation:

• Collaborate with cross-functional teams, including IT, security, and compliance teams, to understand

business requirements.

• Maintain comprehensive documentation of IAM processes, policies, and configurations.

10. Training:

• Provide guidance and knowledge transfer to junior IAM staff and end-users on best practices in

access management.

Responsibilities:

Specific job duties or deliverables that the position requires which will also measure performance:

1. IAM System Design and Implementation Management:

• Assist in the creation, modification, and deletion of user accounts and access privileges in various

systems and applications.

• Conduct regular reviews and audits of user accounts to ensure compliance with security policies.

2. Privileged Access Management:

• Provide direct configuration and maintenance of PAM solutions such as Delinea, password vaulting,

service account compliance, and related policies.

• Assist directly in migration and implementation of PAM solutions.

3. Authentication and Authorization:

• Help in the configuration and maintenance of authentication methods such as single sign-on (SSO),

multi-factor authentication (MFA), and password policies.

• Collaborate in the definition and management of role-based access control (RBAC) policies.

4.Provisioning and De-provisioning:

• Assist in automating user provisioning and de-provisioning processes to improve efficiency and

security.

• Ensure that employees have access to the appropriate resources during their employment lifecycle.

5. Access Policy Management:

• Create and enforce access control policies and security standards in alignment with regulatory

requirements.

• Monitor and review access policies and make adjustments as necessary.

6. Access Governance:

• Participate in access reviews and certification processes to minimize access rights and permissions

that are no longer required.

• Work on IAM reporting and analytics to identify and mitigate risks.

7. Security Policy and Compliance:

• Follow security policies and industry standards to maintain a secure IAM environment.
• Collaborate with senior engineers to ensure compliance with regulations and standards (e.g., GDPR,

HIPAA, NIST).

8. Troubleshooting and Support:

• Assist in resolving IAM-related incidents and provide support for end-users who encounter access

issues.

• Collaborate with the IT Service Desk and other relevant teams to resolve access problems.

9. Collaboration and Documentation:

• Collaborate with cross-functional teams, including IT, security, and compliance teams, to understand

business requirements.

• Maintain comprehensive documentation of IAM processes, policies, and configurations.

10. Training:

• Provide guidance and knowledge transfer to junior IAM staff and end-users on best practices in

access management.