Sr. IAM Analyst
Macy's Inc. - Johns Creek, Georgia
At Macy’s, we’re moving fast—we’re at top speed to become America’s premiere omnichannel retailer. Macy’s technology hub, Macy’s Systems and Technology (MST) strives to set the pace by providing seamless and compelling shopping experiences for our Macy’s and Bloomingdale’s customers. MST is creating innovative technology solutions to support these experiences and define the future of retailing.
The IT and Information Security Group is looking for team members to work on some of the latest and most advanced security tools and devices, including next generation firewalls, proxy servers, Security Incident and Event Monitoring systems (SIEM), and intrusion detection. The focus of the team is to understand advance cyber threats and build mitigation strategies, monitor active threat landscape, and ensure the enterprise is protected.
Macy’s Systems & Technology is seeking a Sr. Identity & Access Management Analyst. We are looking for an individual with strong system administration and enterprise IAM experience to join a dynamic and fun team to support our Privileged Account Management solution (CyberArk). The successful candidate needs a broad technical background, and should be a well-organized, systematic problem-solver with a proven experience in user account and access management. The candidate should have working knowledge of system security as it pertains to industry best practices and security policy implementations at an enterprise level. The individual should also have a strong Windows, Linux, and Active Directory experience. The candidate will be responsible for providing effective provisioning, installation/configuration and maintenance of systems hardware, software, and its related infrastructure.
Key Accountabilities:
Development and ongoing maintenance of documents outlining operational and functional activities of the Identity and Access Management team including configurations of IAM solution and help with Standard Operating Procedures relevant to the creations of permissions, roles and required approvals for provisioning access to applications and to privileged accounts.
Additional responsibilities include:
- Provide support in the design and implementation of CyberArk
- Troubleshoot issues in CyberArk related to Vaults, CPM, PVWA, PSM, AIM, Central Credential Provider, DR Vaults, Backups, Replication
- Integration of CyberArk with Active Directory (LDAP), RSA SecureID, and SIEM solutions
- Work with application teams and developers on the best practices for configuring Application Identity Management (AIM) within code and scripts.
- Provide support in the day to day activities related to CyberArk:
- Safe Creation
- Policy Creation
- Platform Management
- Account Management – adds/deletes/updates/permissions
- Access Management
- Upgrades
- Work with OS platform teams (Windows, Linux, Unix, Mainframe) on how to best leverage CyberArk to promote least privilege across their environments
- Work with Middleware teams (JBoss, WebLogic, WebSphere, IIS) on how to best leverage CyberArk to manage application credentials.
- Work with Database teams (Oracle, SQL Server, DB2, Teradata, Hadoop) on how to best leverage CyberArk to promote least privilege across their environments
- Must have scripting experience (PowerShell preferred) to assist in the automation and monitoring of day to day activities.
- This position will require in-depth knowledge of both the Macy's and Bloomingdale's businesses and their processes, along with a strong technical background in order to make timely and effective decisions. The sensitive nature of the area that this position will be responsible for makes it imperative that the appropriate candidate has good decisive judgment paired with a solid understanding of potential business impact when the team is researching a security event or incident.
- Design, deploy and implement internal Privileged Identity Management and Identity & Access Management Tools
- Develop and maintain operational framework for Privileged Account Management
- Provide expertise in workflow, policy and external integration with IAM tool
- Acts as an escalation point for the team and helps remove barriers that prevent IAM policies and processes from moving forward
- Java & REST Development with the IAM Tool Framework
- Consistently demonstrates regular, dependable attendance & punctuality
Skills Summary:
- CyberArk Training or Certification preferred
- Bachelor's degree preferred and 5-7 years of related work experience or an equivalent combination of education and experience.
- Hands on experience administering OS platforms – Windows, Linux, and Unix
- Active Directory domain admin or high-level Linux admin experience preferred
- 4/5 years’ experience managing a Privileged Access Management tool, preferably CyberArk
- Excellent written and verbal communication skills. Ability to explain technical concepts to technical or non-technical personnel.
- Ability to read, write and interpret business and technical documents.
- Basic math functions such as addition, subtraction, multiplication, division and analytical skills.
- Must be able to work independently with minimal supervision.
- Ability to work a flexible schedule based on department and company needs.
- This position involves regular ambulating, sitting, hearing, and talking. May occasionally involve stooping, kneeling, or crouching. May involve close vision, color vision, depth perception, and focus adjustment. Involves use of hands and fingers for typing on keyboard and using a mouse. May be a need to move or lift items under 10 pounds.
- Design, deploy and implement internal Privileged Identity Management and Identity & Access Management Tools
- Develop and maintain operational framework for Privileged Account Management
- Provide expertise in workflow, policy and external integration with IAM tool
- Acts as an escalation point for the team and helps remove barriers that prevent IAM policies and processes from moving forward
- Java & REST Development with the IAM Tool Framework
- Consistently demonstrates regular, dependable attendance & punctuality
- Strong leadership profile and 4/5 years hands on experience with implementing and supporting Identity and Access Management and Governance software and solutions, such as SailPoint, Hitachi, EMC, Oracle, Ping and CyberArk (highly preferred).
Macy's Systems & Technology (MST) is the information technology division of Macy's Inc. Macy's Inc. is the nation's largest operator of department stores with over 800 department store locations in 46 states. In addition, we operate major catalog and internet operations for Bloomingdale's and Macy's. Macy's Systems & Technology is headquartered in Johns Creek, a suburban setting northeast of Atlanta, Georgia.
We offer competitive salaries, comprehensive benefits, employee fitness center and a merchandise discount.
Our headquarters in Johns Creek, GA—in suburban Atlanta—offers outstanding neighborhoods and top ranked schools, and is part of a thriving business and technology sector found in Atlanta's North Fulton County.
Macy's is an equal opportunity employer, committed to a diverse and inclusive work environment.
Posted: 30+ days ago
About Macy's Inc.
Macy's, Inc., with corporate offices in Cincinnati and New York, is one of the nation's premier retailers, with fiscal 2015 sales of $27.079 billion. The company operates about 870 stores in 45 states, the District of Columbia, Guam and Puerto Rico unde... more
