IAM Engineer

Job Description

Job Description

Skills Needed

Ping Access, Ping Federate and Site Minder.

Business Requirements

n
• Architect a solution where all the bank's web applications can be accessed by logging in from a single login screen.
n
• The user experience should be that users will be authenticated one time and be able to access all the applications under the same web session.
n
• These web applications should be accessible by authenticating both employee accounts and member accounts
n
• The solution should provide for members and/or employees the ability to make requests for new access or changes access to bank services.
n
• The solution should provide for members and/or employees the ability self-service password reset.
n
• The solution should support Multi-Factor Authentication (MFA) for both employee and member accounts.
n

Technical Requirements

n
• Establish the capability to federate employee identities with Azure to allow employees to access Azure/Office 365 assets from both inside and outside of our network.
n
• Identify a solution that will allow for multiple Identity Providers (IdP) and Identity stores. These identity stores will primarily leverage Microsoft Active Directory and/or Azure Active Directory.
n
• In the future, some application services may be provided through Azure. The identity architecture should be able to accommodate this future need.
n

This engagement will:

n
• Outline the options available to using Azure, Ping Access and Ping Federate and discuss pros and cons with our architects
n
• Document a technical architecture the proposed solution in coordination with our architects
n
• Assist in performing a POC that includes configuring a development environment that integrates with Azure AD, a on premise instance of Active Directory and test instances of the existing applications.
n
• Assist in developing a conversion plan that will include migration of accounts and applications from the existing infrastructure to the future state architecture.
n