Lead Analyst - Identity and Access Management

at Eaton Corporation in Chicago, Illinois, United States

Job Description

Eaton’s IT team is currently seeking a Lead Analyst – Identity and Access Management to join team. This position will be based at any Eaton facility in the U.S. The position is eligible for hybrid work setup.

The expected annual salary range for this role is $91,500 – $134,200 a year.

Please note the salary information shown above is a general guideline only. Salaries are based upon candidate skills, experience, and qualifications, as well as market and business considerations.

Colorado Residents: In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.

The application window for this position is anticipated to close on August 9, 2024.

What you’ll do:

Job summary

Deliver, maintain, and update technology and platform solutions in Eaton’s Identity and Access Management space that addresses business and technical requirements, leveraging standard principles and patterns. Focused on delivering, maintaining, and updating Identity and Access Management systems with a targeted focus on the CyberArk, Saviynt and Okta platform.

Job responsibilities

1. Provides subject matter expertise to and lead platform and system design, development, and implementation

2. Works with resources across functions to deliver technology and platform solutions to meet customer requirements, providing solution options and highlighting operational or security risks

3. Tunes and configures technologies and platforms to meet customer and operational requirements

4. Coordinates and regularly updates technology, platform, and documentation to ensure operational health and security

5. Monitors technology and platform to ensure required performance, availability, and capacity. Identifies gaps in monitoring and potential impact on service delivery.

6. Continuously seeks to more efficiently manage and utilize technology and platform

7. Follows industry, organization, and ITIL best practices to maximize quality and efficiency"

Qualifications:

Required (Basic) Qualifications:

- Bachelor’s Degree from an accredited institution.

- Minimum 5 years of Cybersecurity experience

- Legally authorized to work in the U.S. without company sponsorship now or in the future.

- No relocation benefit is being offered for this position. Only candidates within a 50-mile radius any Eaton facility in the United States will be considered. Active-Duty Military Service member candidates are exempt from the geographical area limitation.

- This position requires use of information or access to hardware which is subject to the International Traffic in Arms Regulations (ITAR). All applicants must be U.S. persons within the meaning of ITAR. ITAR defines a U.S. person as a U.S. Citizen, U.S. Permanent Resident (i.e. ‘Green Card Holder’), Political Asylee, or Refugee

Preferred Qualifications:

- Experience in Identity and Access Management solutions and technologies. Must be proficient in cloud access management tools and have experience with CyberArk, IGA solutions (Saviynt), and Okta tools.

- Experience architecting privileged access management solutions using Saviynt CPAM (preferred), CyberArk, or other industry-leading PAM solutions.

- Cloud Development (Azure, AWS, GCP)

- Experience with on-prem migrations to cloud-hosted (Focus on EPM)

- Non-human identity governance best practices

- CyberArk Privileged Threat Analytics experience

- Managing database credentials (Oracle & MS SQL)

Position Criteria:

- Must be able to demonstrate a firm understanding of the concepts of password vaulting, privileged session management, secrets management, and DevSecOps

- Privileged Access Management best practices

- Active Directory administration and familiarity with domain/forest topology.

- Configuring and managing the Okta CIAM platform, such as setting up policies, integrations, workflows, and reports.

- Okta SSO, MFA, device trust, UD, profile mastering, application assignment, expression language, admin roles and permissions

- Implementing and troubleshooting SAML and OIDC/Oath integrations

- Active Directory administration and integration, including an understanding of group nesting, multi-domain forests, universal groups

- Integration to Identity Governance solutions (OIM, SailPoint, etc.)

- Identity Governance topics like identity lifecycle, role-based access, ABAC, certification, access request workflows, SoD, audit

We are committed to ensuring equal employment opportunities for all job applicants and employees. Employment decisions are based upon job-related reasons regardless of an applicant’s race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, marital status, genetic information, protected veteran status, or any other status protected by law.

Eaton considers qualified applicants regardless of criminal histories, consistent with local laws. To request a disability-related reasonable accommodation to assist you in your job search, application or interview process, please call us at 1-800-836-6345 to discuss your specific need. Only accommodation requests will be accepted by this phone number.

We know that good benefit programs are important to employees and their families. Eaton provides various Health and Welfare benefits as well as Retirement benefits, and several programs that provide for paid and unpaid time away from work. Click here (https://www.eaton.com/content/dam/eaton/company/careers/US%20Benefits%20updated%2010.24.22.pdf) for more detail: Eaton Benefits Overview. Please note that specific programs and options available to an employee may depend on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements.