Apply on Employer Site

Gallagher · 1 week ago

IAM Security Architect - Temp to Hire

United States

Full-time

Remote

Mid Level

$106K/yr - $206K/yr

3+ years exp

Gallagher is a global leader in insurance, risk management and consulting services. The IAM Security Architect will serve as a key technical resource in the Global Cyber and Information Security organization, responsible for defining identity and access management standards and ensuring secure identity access practices across the organization.

ConsultingFinancial ServicesInsuranceManagement ConsultingRisk Management

No H1B

U.S. Citizen Only

Hiring Manager

Nayana Jodigatte Chinnappa

Responsibilities

Define and create Identity Access Management architectural standards, models, design patterns and technical specification documents

Assess, monitor and recommend improvements to global identity solutions to ensure and improve upon state of the art secure identity access and user identity repository protocols, tighten access management controls and balance costs associated with enabling secure customer and internal identity access

Work closely with the security engineering team and assist in securely configuring patterns to enable zero trust and consistent verification across the global AJG domain product landscape

Oversee and consult with project teams in business units to ensure adherence to security design patterns, protocols, best practices, authorizations and SLAs for identity and access procedures

Designs and collaborates on solutions that balance business requirements with identity management security requirements ensuring the business process aligns to the recommended security services

Proactively identifies technical and architectural risks of identity management services or solutions maintaining or managing users, commenting and/or providing safer identity management alternatives and presenting them for approval

Participate in security technology evaluations, proof of concept testing and provide in-depth identity management analysis of the proposed solution including enhanced recommendations for PAM services

Collaborate and partner with key GCIS IAM stakeholders to ensure alignment with the overall intended identity access management strategy, controls and design

Partner with architects and engineers within infrastructure, network, application and business teams to ensure that identity solutions (custom or SaaS, internal or customer) are developed and managed as per GCIS policies and standards

Assist security compliance partners with risk mitigation and governance activities associated to identity and access management

Primary role is to support building identity access management architectural/solution designs and standard services supporting SaaS and custom applications

Periodically provide security architecture reviews of identity access patterns and configurations of proposed identity access management solutions

Participate on an IAM governance board providing reviews and recommendations for future state IAM, CIAM and Central Authorization services and standards

Qualification

IAM architecture standardsIdentity access management toolsCybersecurity experienceSecurity standards frameworksEnterprise architecture frameworksIdentity security risk managementFlexibleResilientCommunication skillsProblem-solving skillsSelf-starter

Required

Bachelor's degree in Computer Science or related field

Minimum 3+ years of cybersecurity experience

Minimum 1+ years of experience reviewing detailed solution architectures utilizing identity access management solutions and providing feedback to the application and infrastructure teams

Experience with reviewing identity access management services, methodologies and patterns for custom and SaaS solutions

1+ years of experience working with at least one IAM standard toolset (PING, ForgeRock, OKTA)

Strong knowledge of complex identity and access offerings involving MFA, biometrics, workflows, custom services and processes for user support on prem and in the cloud

Hands on experience working with IAM licenses and ability to negotiate with identity service providers to procure the most cost effective support for AJG

Demonstrated working experience in a regulated and globally distributed environment with various identity security risk accessibility points (on prem, laptop, mobile)

Knowledge and experience in enterprise architecture frameworks such as; TOGAF

Knowledge and experience implementing security standards frameworks (NIST - CSF, ISO 27001, CSA CCM, PCI-DSS, GDPR)