IT Lead, Identity and Access Management

Summary

Corning Information Security is looking for an experienced professional combining both a highly analytical skillset and a desire for professional growth across Corning’s Identity and Access Management solutions. This position will be responsible for a broad range of identity related tasks including platform engineering, supplying technical leadership to Identity projects, driving operational and automation enhancements, and identify reporting improvements among other key activities.

Key Responsibilities

• Monitor and evaluate existing security platforms Microsoft Cloud Services, Microsoft Identity Manager, and Privilege Access Management capabilities to ensure compliance with industry best practices and alignment with corporate standards and policies.
• Research, evaluate, and lead deployment of new capabilities, technical controls, and key operational processes to support IT Security and security governance strategies.
• Review and maintain security standards and policies in accordance with corporate policy and security standards. (e.g. NIST; ISO/IEC; CMMC)
• Monitor industry trends pertaining to Identity and Privilege Access Management and determine gaps and areas for improvement.  Work directly with security partners and leaders to suggest improvement opportunities and reduce corporate risk.
• Review existing access management processes and recommend automation opportunities to reduce manual effort and increase efficiency.
• Work with HR teams and responsible operational teams to audit and ensure account provisioning and deactivation user identities is completed as documented in our corporate standards.
• Assist with the implementation and maintenance of all IAM processes and their lifecycle.
• Develop and implement reporting and remediation strategies pertaining to identified vulnerabilities and/or misconfigurations identified across the enterprise identity landscape.
• Participate in cross-collaboration with cross-functional teams including Infrastructure, Network, Security Operations, and End-User groups to communicate and align to security policies as required.
• Monitor system logs and work to ensure that all security platforms are integrated with SIEM along with other security team members.
• Assist in the development of security architecture, policies, standards, and procedures.
• Support Information Security Staff to measure effectiveness of Managed Service Providers relating to security compliance of all identity solutions and recommend improvement opportunities.

Travel: Minimal as required

Experiences/Education - Required

• Bachelor’s degree in Computer Science or related technical degree required.
• Minimum of 5 years Information Security experience with tangible delivery of work product related to the design and administration of security technologies with focus on Microsoft Identity.
• Experience with industry standard SSO technologies and protocols (OAuth, FIDO, SCIM, LDAP, SAML)
• Experience around Identity and Authentication solutions such as, Microsoft Identity Manager, Active Directory, Entra (Azure) Active Directory, and CyberArk Identity products.
• Advanced knowledge of Microsoft Active Directory Services.
• Strong working knowledge of deployments and integration of IAM solutions within the cloud (Entra).
• Experience with security regulations and audits ISO/NIST/CMMC
• Strong command of network technologies and architectures (LAN/WAN/Network/and Data Center among others.
• Excellent technical knowledge of mainstream operating systems (Microsoft Windows and Linux) and a wide range of security technologies such as Identity and Access Management (IAM) Platforms, Privilege Access Management (PAM) Solutions, and SIEM.

Experiences/Education - Desired

The selected candidate should have the ability to:

• function independently, exhibit strong problem-solving skills, skillfully manage time and business priorities, and deliver work at a steady and predictable pace to achieve the commitments and strategy of the Information Security Portfolio.
• Certifications desired but not limited to: MCSE; CISSP, CISA; Security+
• Ability to utilize various programming or scripting languages such as JavaScript, HTML and PowerShell.
• Demonstrable work experience with deploying role-based access controls (RBAC) and use of Entra access packages.