Cloud Identity And Access Management

Summary

Join the NATO Communications and Information Agency (NCI Agency) as a Cloud Identity and Access Management Support specialist! This remote position contributes to NATO's IT modernization by leveraging public cloud technologies (Microsoft Azure, M365, Amazon AWS). You will design, implement, and manage IAM solutions using Microsoft Entra ID and AWS, automate account management, and ensure compliance. The role requires expertise in Entra ID, AWS IAM, PowerShell scripting, and strong analytical and problem-solving skills. This is a crucial role in maintaining a secure and efficient IAM environment, supporting both internal and external collaborators. The position offers the opportunity to work remotely within a NATO country and be part of a dynamic team.

Requirements

• In-depth knowledge of Microsoft Entra ID (Azure Active Directory) and Amazon AWS identity and access management services
• Proficiency in PowerShell scripting and automation tools (e.g., Azure Automation, Microsoft Graph API)
• Experience with IAM solutions and tools, including role-based access control (RBAC), multi-factor authentication (MFA), and conditional access policies
• Expertise in Azure AD Privileged Identity Management (PIM) and privileged access control
• Strong analytical skills to assess and improve IAM processes and workflows
• Ability to troubleshoot complex IAM issues and implement effective solutions
• Understanding of security best practices and compliance requirements related to identity and access management
• Experience conducting audits and ensuring adherence to regulatory standards
• Excellent communication skills to effectively collaborate with IT teams, stakeholders, and end-users
• Ability to document processes clearly and provide training on IAM tools and practices
• Strong organizational skills to manage multiple tasks and priorities effectively
• Attention to detail in managing user accounts, groups, and access controls
• Ability to work effectively as part of a team and share knowledge and resources
• Willingness to collaborate with colleagues to solve complex issues
• Full proficiency in the English language
• The candidate must have the nationality of one of the NATO nations
• The candidate must possess a NATO SECRET Security Clearance or national equivalent

Responsibilities

• Design, implement, and manage identity and access management solutions using Microsoft Entra ID (Azure AD) and Amazon AWS
• Ensure seamless integration with internal and external applications and systems
• Develop and deploy PowerShell scripts and Azure Automation workflows to automate user account and group management tasks
• Implement self-service capabilities for account and group management to improve efficiency
• Oversee the entire account lifecycle management process, from user onboarding to offboarding
• Provision new accounts and assign appropriate access rights based on role requirements
• Regularly review and update user roles and permissions to reflect changes in job functions and organizational structure
• Deprovision accounts promptly when users leave the organization or change roles, ensuring removal of access rights
• Implement role-based access control (RBAC) to manage permissions based on job roles
• Conduct periodic access reviews and certifications to ensure compliance with organizational policies
• Implement and manage Azure AD Privileged Identity Management (PIM) to control, monitor, and audit privileged access to resources
• Configure PIM to enforce just-in-time (JIT) access, approval workflows, and access reviews for privileged roles
• Implement security best practices and ensure compliance with relevant standards and regulations
• Conduct regular audits and reviews of access controls and permissions
• Provide support for IAM-related issues, including troubleshooting user access problems and resolving authentication issues
• Act as an escalation point for complex IAM issues
• Maintain comprehensive documentation for IAM processes, configurations, and workflows
• Provide training and support to IT staff and end-users on IAM best practices and tools
• Monitor the performance and effectiveness of IAM systems and processes
• Identify opportunities for improvement and implement optimizations to enhance security and efficiency
• Collaborate with IT security, compliance, and other relevant teams to ensure cohesive IAM strategies
• Communicate effectively with stakeholders to understand IAM requirements and address concerns
• Manage external collaboration and sharing settings in Azure AD to facilitate secure access for partners and external users
• Implement and manage B2B (Business to Business) collaboration settings and policies through Entra ID
• Integrate and manage identity and access management for B2B scenarios, ensuring seamless and secure interactions with external partners
• Integrate and manage IAM processes with Amazon AWS, ensuring secure access and interoperability between Azure AD and AWS
• Implement and manage federated identities and single sign-on (SSO) between Azure AD and AWS environments
• Monitor and optimize IAM configurations to ensure compliance and security across multi-cloud environments
• Develop and implement automation scripts using PowerShell to streamline routine support tasks such as software installations, updates, and system checks
• Utilize Power Automate to create workflows that automate repetitive tasks and improve service efficiency
• Identify opportunities to enhance efficiency through automation and proactively implement solutions
• Communicate effectively with users to understand their issues and provide clear instructions
• Collaborate with IT teams to resolve issues and improve service delivery
• Participate in daily status update meetings, activity planning and other meetings as instructed, via electronic means using Conference Call capabilities, according to the Operation Managers / Team Leaders instructions
• Report the outcome of his/her work during the sprint, first verbally during the retrospective meeting and then in written within three (3) days after the sprint’s end date

Preferred Qualifications

• French language proficiency is of advantage
• The candidate has strong customer relationship skills, including negotiating complex and sensitive situations under pressure

Benefits

Remote work