[Hiring] Security Analyst - Identity and Access Management @Crowell & Moring

Role Description

The Security Analyst specializes in Identity and Access Management (IAM) technologies and applications including Single Sign-On (SSO), federation, permissions, authorizations, and identity management. The Security Analyst maintains the Firm’s IAM platform and related systems and works with Security Services management and others in the Firm to ensure the right people have appropriate access to data and applications at the right time. The Security Analyst is responsible for keeping up-to-date with current identity technologies, threats, vulnerabilities, and automation and participates in projects implementing, upgrading, and modifying identity systems.

Job Responsibilities

• Manage the IAM system including Enterprise Applications, federations, certificates, Identity Provider (IdP).
• Maintain and validate the Firm’s Multifactor Authentication (MFA) systems.
• Integrate external applications with the Firm’s identity system using OAUTH, SAML, OpenID or other appropriate technology.
• Coordinate with Human Resources, Finance, and others to automate as much as possible the Join/Move/Leave process for employee, Partner, and third-party identities.
• Maintain and manage the Firm’s sources of Identity, including Active Directory, Microsoft Entra ID, and Active Directory Federation Systems (AD FS).
• Manage federation and replication technologies such as Entra ID Connect.
• Maintain the Firm’s Public Key Infrastructure (PKI) systems including certificate templates, issuance policies, automation, security, and revocation.
• Complete special projects and other duties as assigned.

Qualifications

• Knowledge of Identity technologies and systems including Security Assertion Markup Language (SAML), Single Sign On (SSO), and related technologies such as OAUTH, OpenID.
• Understanding of directory and authentication technologies such as Active Directory (AD), lightweight directory access protocol (LDAP), Kerberos, RADIUS, and Public Key Infrastructure (PKI).
• Understanding of Microsoft identity products such as Entra ID, Conditional Access, Defender for Identity, and Enterprise Applications.
• Understanding of multifactor technologies and platforms, including NIST 800-63 R4 approved methods.
• Ability to work overtime as needed.

Requirements

• The position requires a Bachelor’s Degree, preferably in Computer Science/MIS or equivalent certification from an accredited technical training school. Four years of progressive experience may substitute for education.
• Microsoft SC-300 or related Identity and Access, Azure, or Entra certifications. CISSP or GIAC certifications are a plus.
• The position requires a minimum of four (4) years of increasingly responsible, directly related experience during which knowledge, skills and abilities applicable to the position were demonstrated.

Benefits

• Healthcare, vision, dental, retirement, and all-purpose leave.
• Progressive options such as backup childcare, wellness programs, cultural events, and social activities.
• A positive, friendly culture that rewards hard work and success, while recognizing the importance of family and community service.