security
Posted Jan 21Senior Security Engineer
at Qualys
Pune, IndiaOn-site
Responsibilities
- Responsibilities: Design and Implement IAM Infrastructure: Architect and build IAM infrastructure components, including identity management systems, directory services, authentication mechanisms, and access control mechanisms.
- Architect, design, and implement cloud-based IAM solutions, considering the unique challenges and opportunities presented by cloud environments.
- Develop secure IAM frameworks and workflows, ensuring scalability, reliability, and high availability of IAM infrastructure.
- Collaborate with system architects and network engineers to integrate IAM solutions into existing infrastructure.
- Implement role-based access control (RBAC) frameworks and access control models to grant appropriate access privileges to users based on their roles and responsibilities.
- Implement automated identity provisioning and deprovisioning processes, ensuring efficient onboarding and offboarding of users in cloud environments.
- Monitor and audit user access rights, regularly reviewing and revoking unnecessary or excessive privileges.
- Identity Federation and Single Sign-On (SSO): Design and implement identity federation solutions, enabling secure and seamless authentication and authorization across systems and applications.
- Develop and configure Single Sign-On (SSO) solutions using industry-standard protocols such as SAML, OAuth, and OpenID Connect.
- Integrate identity federation and SSO with external service providers and cloud-based applications.
- Develop and enforce cloud identity governance processes, including user lifecycle management, access certifications, and access review workflows.
- Conduct regular assessments and audits of cloud IAM infrastructure to identify and address security vulnerabilities, gaps in compliance, and deviations from established policies.
- Collaborate with stakeholders to ensure that IAM infrastructure aligns with compliance
- IAM Infrastructure Maintenance: Monitor the performance, availability, and security of IAM infrastructure components, proactively identifying and resolving any issues or vulnerabilities.
- Conduct regular maintenance activities, including software updates, patches, and system upgrades, to ensure the integrity and reliability of IAM infrastructure.
- Implement backup and disaster recovery mechanisms for IAM infrastructure components.
- Implement fine-grained access controls based on user roles, job responsibilities, and data sensitivity, balancing security
- Monitor and enforce access control policies, regularly reviewing access permissions to identify and remediate any unauthorized access or potential security risks.
- Implement adaptive authentication mechanisms that dynamically adjust authentication
- Collaborate with HR, IT, and other relevant departments to ensure efficient and secure onboarding, role changes, and offboarding of employees, contractors, and external partners.
- Implement self-service capabilities for users to manage their identities, passwords, and access requests, reducing administrative overhead and improving user satisfaction.
- Collaborate with DevOps teams to integrate IAM processes into CI/CD pipelines, ensuring secure and efficient deployment of cloud infrastructure.
- Monitor and log access control decisions, privilege changes, and administrative activities for auditing and compliance purposes.
- Enable logging and monitoring of cloud IAM services to track changes, detect security incidents, and support forensic investigations.
- Correlate IAM logs with other security logs to identify anomalies, detect insider threats, and investigate security incidents.
- Collaborate with vendors on solution implementations, upgrades, and issue resolution, ensuring alignment with business
Requirements
- Qualifications: Bachelor's degree in Computer Science, Information Security, or a related field.
- Relevant certifications such as CISSP, CISA, or IAM-specific certifications (e.g., CIAM, CIPP) are highly desirable.
- In-depth knowledge of IAM concepts, frameworks, and best practices, including user provisioning, access management, authentication mechanisms, and identity federation.
- Familiarity with IAM tools and technologies, such as identity management systems, directory services, multi-factor authentication (MFA) solutions, and identity governance and administration (IGA) platforms.
- Understanding of cloud-based IAM solutions and integration with cloud platforms (e.g., Azure AD, AWS IAM).
- Experience with IAM governance processes, access certification, access review workflows, and risk-based authentication.
- Strong problem-solving and analytical skills, with the ability to assess complex IAM requirements, identify gaps, and propose effective solutions.
Additional details
- Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! Overview: We are seeking a highly skilled and experienced Senior Security Engineer to join our team.
- You will work closely with cross-functional teams to ensure the effectiveness of security measures and help establish and enforce security policies and procedures.
- User Provisioning and Access Control: Develop and manage user provisioning processes, including account creation, modification, and deprovisioning, ensuring compliance with access policies and procedures.
- Security Policies and Procedures: Assist in the development and enforcement of IAM security policies, standards, and procedures.
- Stay up-to-date with industry trends, emerging threats, and best practices related to IAM infrastructure security.
- Multi-Factor Authentication (MFA) and Adaptive Authentication: Design and deploy multi-factor authentication (MFA) solutions to enhance the security of user authentication processes.
- requirements based on user behavior, risk levels, and contextual factors.
- Evaluate and select appropriate MFA methods (such as SMS, email, tokens, biometrics) based on the organization's risk profile and user experience considerations.
- Identity Lifecycle Management: Develop and maintain identity lifecycle management processes, including user provisioning, user attribute management, password management, and account termination procedures.
- Monitoring: Capture and analyze user activity logs to detect suspicious behavior, such as unauthorized access attempts or privilege escalations.