Identity & Access Managment Administrator

at Group O in Milan, Illinois, United States

Job Description

The Identity & Access Management Administrator reports to the Director, Information Security and is responsible for access governance for Group O systems. The Identity & Access Management Administrator works with members of Information Security (InfoSec), Information Technology (IT) and business leaders to provide account provisioning, user privileged requests and supplier access requests.

Primary Tasks:

• Create, configure, and manage users
• Create, configure, and manage groups.
• Manage user Office 365 licenses.
• Create and manage external collaboration settings in Azure Active Directory.
• Manage external user accounts.
• Configure and manage identity providers (external applications, SAML/WS-federation).
• Plan, implement and manage corporate Multi-Factor Authentication (MFA) policies.
• Manage MFA settings for users.
• Plan, implement and manage conditional access policy controls and assignments.
• Implement and manage the Group O user risk policy.
• Implement and manage sign-in risk policies.
• Implement and manage MFA registration policy.
• Monitor, investigate, remediate and report elevated risky users.
• Manage application consent settings.
• Monitor and audit access to integration enterprise applications.
• Implement application user provisioning.
• Work with the IT team and other business leaders to document, develop and manage 3rd party application identities.
• Review, manage and audit permission escalation requests.
• Review, manage and audit privileged accounts.
• Review, manage and audit supplier account requests.

Secondary Tasks:

• Work with the Infosec and Quality teams on identity and access management compliance reports and evidence collection.
• Work with the Infosec team to develop, implement and manage a role-based access control model.
• Assist the Computer Incident Response Team (CIRT) with investigations.

Education:

• Associates degree in IT discipline or equivalent job experience

Training/Certifications:

• Microsoft certified: Identity and Access Administrator (must be willing to obtain in the first year of employment)
  
  

  PI238639013

  
  
  Group O is an Equal Opportunity Employer and does not discriminate against any applicants for employment based on their race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, physical or mental disability, genetic information, veteran status, uniformed service member status, or any other status protected by law.