Identity and Access Management Architect

Company: Whole Foods Market
Location: Seattle
Posted on: February 17, 2020

Job Description:

Responsible for the design and hands-on implementation of identify management solutions that meet business requirements, goals, and objectives and, at the same time, encompass the full range of technologies employed by WFM servers, networks, systems, and data management processes. Provides identity, access, provisioning, and authentication services for Team Members, vendors, and other WFM system / network users.Responsibilities:

• Establishes architecture and strategies to securely manage the identity lifecycle including user authentication and authorization for on premise and cloud solutions.
• Developing solutions using a cloud first approach within Amazon Web Services (AWS)
• Leads scoping, architecture, and design of IAM systems
• Drives an entitlement management and review program across Payment Card Industry (PCI-DSS), Sarbanes-Oxley (SOX), and other critical business applications.
• Establish Privilege Access Management program and implement controls across all lines of business
• Develops IAM roadmaps over a multi-year horizon, and drives adoption throughout the enterprise
• Evaluates IAM integration requirements for business solutions and standards ensuring adherence to IAM standards and information security policies
• Lead security projects from initial conception through design, testing and implementation
• Provide IAM subject matter expertise for business and technical project teams ensuring the recommended solution and architecture meets requirements
• Evaluate vendor solutions to ensure they meet technology and cloud standards, as well as all applicable architecture considerations
• Create and maintain as-is and to-be architecture artifacts
• Be self-directed, provide detailed estimates and work breakdown of typical activities leveraging an agile framework
• Take part in an after-hours on-call support rotation and implement solutions, patching and deployment activities after hours as needed
• Defines and leads in the design of programs that support and align with cloud-based online service strategies and engineering requirements for evolving security services, mechanisms, and safeguards
• Develops metrics that demonstrate the current risk state, indicators of progress, and IAM business alignment
• Engages with development teams during operational security reviews and provides leadership and security design guidance
• Monitors technology and security developments and ensures the company---s security framework follows industry best practices
• Advanced understanding of standard identity management tools, technologies, and processes
• Plays a key and influential role working with others, in groups, in cross-functional settings and with diverse stakeholders internally and externallyQualifications:
  • 7+ years designing and managing Identity Governance and Administration (IGA) solutions
  • 5+ years designing solutions to leverage an enterprise identity provider
  • 2+ years experience with Amazon Web Services (AWS) including management of IAM roles and automation of infrastructure deployment across multiple AWS accounts
  • 2+ years experience with Privilege Access Management solutions
  • Experience leading large security access system upgrades/projects using the Scaled Agile Framework (SAFe)
  • Advanced understanding of IAM solutions and related technologies including Azure AD, Microsoft Identity Manager (MIM), Kerberos, LDAP, claims, group and role mapping, PKI, PIM, DNS, DHCP and GPO implementations
  • Proven expertise designing and implementing solutions leveraging OAuth, OpenID Connect, SAML, WS Fed, and MFA
  • B.S. Degree in Computer Science or related IT work experience in a global information technology environment
  • MSCE and CISSP (preferred)At Whole Foods Market, we provide a fair and equal employment opportunity for all Team Members and candidates regardless of race, color, religion, national origin, gender, pregnancy, sexual orientation, gender identity/expression, age, marital status, disability, or any other legally protected characteristic. Whole Foods Market hires and promotes individuals solely based on qualifications for the position to be filled and business needs.

Keywords: Whole Foods Market, Seattle , Identity and Access Management Architect, Executive , Seattle, Washington