Information Security Analyst - IV
Boston, MA

Job Description

Long term contract

Information Security Analyst

Client :Financial

A large financial firm is looking for a Security Analyst with expereince in IAM Directory Services.The incumbent will be working in a mission critical security team at Client System. The Directory Services team is part of a national organization supporting all Client Banks, providing IAM security services to Client System (FRS). This position is responsible for deploying authentication, authorization and identity management solutions for critical applications for Client.

Responsibilities: Principal Responsibilities

? Provide design, configuration, implementation, and/or management of IAM systems such as Active Directory and other LDAP services, identity correlation systems, and single-sign on technologies and solutions to Client System (FRS) while in compliance with service level agreements, system standards and industry best practices.

? Plan and implement directory service infrastructure changes. This may entail some or all of the following: requirements gathering, consulting, research, design, execution, security and operational configuration, patching, scripting/automation, documentation, testing and/or knowledge transfer.

? Provide second level assistance, critical thinking and oversight to resolve issues and implementations. ? Collaborate with subject matter experts across IT departments to participate in security release planning efforts or provide consultation on integrating applications with Identity service infrastructure.

? Can provide a depth of expertise in one or more of the department's major technical Identity services or products, or can provide significant expertise across many products or services.

? After hours and weekend work may be required in order to perform tasks and maintenance that cannot be done during business hours. Minimum Qualifications ? Knowledge and experience normally acquired through, or equivalent to, the completion of a Bachelor's degree, preferably in an IT field, and a minimum of 3-5 years of job related experience.

? Proficient in one or more of the following technologies and concepts: Active Directory, LDAP, Virtual Directory technologies, Federated Identity Management/Security Token Services, network and directory security, Privileged Access Management services. ? Knowledge or experience supporting or integrating cloud solutions such as SaaS, IaaS, PaaS, IDaaS.

? Ability to work with little supervision and manage multiple complex tasks. ? Knowledge of authentication standards (SAML, OAUTH, OpenID Connect, LDAP, Kerberos, etc.)

? Must have experience maintaining, upgrading, deploying, securing and/or designing authentication and authorization solutions such as Active Directory, LDAP, security token services and/or other identity infrastructure in enterprise level environments ? Must possess the ability to work as a team member with globally distributed and cross-functional teams

. ? Must have strong written and verbal communication skills. ? Must be able to support periodic off hours or weekend work to support project activities during scheduled change windows

. Additional Qualifications ? Scripting skills in Python, Java, PowerShell and/or MS .NET Framework are strongly desired but not required. ? Strong security background with knowledge and experience in managing, designing or implementing security infrastructure or projects is desired but not required

. ? Experience using and supporting tools for managing and troubleshooting authentication services/directories such as monitoring tools, network traffic and application logging/diagnostics, etc. is a plus ?

Experience managing and/or deploying identity and access compliance, reporting and governance tools and solutions is a plus. Security and Information Technology Certifications (e.g.: AWS, Microsoft, CISSP, CCSP, etc.) is a plus.