Review Full Job Posting *& Compensation Here
This position must be within a reasonable driving distance to a Branch, Consumer Operations, or Professional Office Building with the primary location being for Birmingham, Alabama; Nashville, Tennessee; Atlanta, Georgia; Charlotte, North Carolina. There may be consideration for Dallas Texas; Denver Colorado; Houston Texas; Orlando Florida; Salt Lake City Utah; Tampa Florida.
At Regions, this role will function as an Identity & Access Management (IAM) Active Directory Engineer and will oversee the administration of Microsoft Active Directory Domain Services as well as several other critical identity systems, such as Microsoft Entra ID (Azure Active Directory), AWS Identity Center, and Okta. The engineer will have responsibilities several areas, such as production support and availability, problem identification and solution development, capacity and disaster recovery planning, implementation of new identity configurations, technology refresh and deployments.
Primary Responsibilities
- Designs, develops, tests, implements, and integrates Identity and Access Management (IAM) systems and solutions
- Ensures that solutions protect information resources against unauthorized use, inappropriate degrees of access, disclosure, damage and/or loss
- Analyzes and maintains data to ensure projects deliver on time
- Ensures the maintenance, patching, operating, and monitoring of IAM systems
- Supports and resolves system incidents, problems and changes
- Designs and implements reusable strategies, decisions, service components, libraries and frameworks to support enterprise-level IAM services
- Onboards new applications and creates custom workflows, rules, and reports based on business requirements
- Creates and analyzes documentation of process, guidelines, standards, technical specifications, as well as drawing network & system architecture diagrams
- Leverages bash scripting to maintain the night processing script
- Meets and encourages project teams to communicate project status, development issues/roadblocks, and requirements feasibility
Requirements
- Bachelor's degree and six (6) years of experience in a related field
Preferences
- Advanced understanding of UNIX security, as it relates to user access and provisioning
- Experience with Agile methodology and SDLC concepts/tools (Git, Atlassian stack)
- Experience with Linux/Unix, Windows, scripting (with programming languages such as Bash, PowerShell, or Perl), SQL, LDAP, and web services
- Experience with one or more programming languages such as Java, C#, C/C++, Python, or JavaScript
- Experience with role-based access controls and configuring automated provisioning and deprovisioning
- Experience with SailPoint (version 7.0 or later) or another IGA/IAM platform
- Recognized security industry certifications (CISSP, CIAM, etc.)
- Technical experience in systems integration or software engineering of identity and access management (IAM) solutions (such as BeyondTrust, CyberArk, AWS, Duo, OIM, Ping Identity, RadiantLogic, SailPoint, Okta, Active Directory, RACF)
Additional Job Detail:
Primary Responsibilities
- Production support and availability for on-premises Microsoft Active Directory environment, Entra ID (Azure AD), AWS Identity Center, Okta and other identity solutions
- Solution, Plan and Implement new products as needed for the ongoing support and development of Regions IAM
- Provide consultative and implementation support for identity-related issues for applications migrating to cloud solutions
- Implement SAML/OIDC/OAUTH solutions for applications implementing Single Sign On/Multi-Factor Authentication solutions
- Develop and implement automation via Powershell, Terraform and other methods to enhance efficiency & effectiveness of Regions IAM
- Participate in 24x7 on-call support rotation
Preferences
- 7+ years experience supporting Microsoft Active Directory & related technologies (Domain Controller support, DNS, DHCP, NPS, etc.)
- 3+ years experience supporting and/or using AWS Identity Center, Microsoft Entra ID (Azure Active Directory), Okta enterprise environments, and Powershell
- Microsoft, AWS or Okta certification is preferred
