IAM Operations Lead (IT)
Company Sony Pictures
Location Culver City, CA
Preferred GIAC Certifications SSAP, GSLC, GSTRT
Travel 10%
Salary $105,000-$140,000
URL https://www.sonypicturesjobs.com/job/culver-city/iam-operations-lead/22978/65049062624
Contact Name Anonymous
Contact Email donotemail/at/sans.edu
Expires 2024-07-11

Job Description

Sony Pictures Entertainment (SPE) is looking for an IAM Operations Lead to support our enterprise Identity management program (IDM) in our Culver City, CA headquarters. Within IT, the position reports to the Executive Director, Corporate IT and will be accountable for all technology aspects of software service management so that the product meets business and technology requirements and is delivered on-time/on-budget. 

The position is focused on Identity Governance and Compliance using SailPoint IIQ, and knowledge of LDAP directories. The individual must have at least 5+ years of experience with SailPoint, OKTA or other IAM technologies. This role will be responsible for supporting daily operations as well as contribute to long term strategy / architecture. The addition of this role will complement SPE’s relationship with its managed services vendor, resolve an imbalance with regard the dependency/risk of technical ownership, and focus on delivering value in three areas:

Improving the management of incident queues and accountability of managed services support
Ensuring that escalations are immediately handled without compromising incident SLAs or our enhancement stream
Enable internal discovery for both code and process improvements related to data and solution footprint

Incidents: Supporting all L3 Service Now INCs and requests. Service Now INCs represent the predictable and essential workload of the Operations stream, and includes but is not limited to the following request types:
Queue Management
Bulk Updates
PAM Account Support
User Account Repair/Correction
Access Certifications: Staging, launching, managing, and performing all close-out activities (SOX and non-SOX) associated with access certification campaigns.
Production Debug: Debugging production issues pertaining to the operational current-state. This includes but is not limited to, troubleshooting defects for root cause analysis, discovery of design flaws, missed requirements, and coding defects.
Recurring System Maintenance: Performing actions specific to recurring system maintenance, including but not limited to:
Performance check for IDM Systems
Verify file-based authoritative sources
Workday scan monitoring
Monthly custom reports (e.g. Blackbaud CSRConnect/YourCause, EINS/Swing/GHD Monthly Update Process)
Password Rotations: Ensuring all IDM systems and IDM service account passwords are rotated and in compliance with the appropriate password policy.
Ad Hoc Requests: Responding to ad-hoc demands generated via escalation from stakeholders.
Key outputs include:

Documenting SLA, KPI and other technical KT documents
Project / task delivery
Problem Management & Root cause analysis
Contribute to assessment reports / position and recommendation documents on technology evaluations
Enterprise Standards documentation; usage guidelines; reference architectures

5+ years of experience in architecting, designing, and implementing identity management strategies and solutions with at least 5 years of experience with SailPoint IIQ in following areas:
User life cycle management processes (on-premise and cloud), RBAC, certifications
Integration of IGA tools with ServiceNow, Workday, physical access systems, O365, CyberArk
Strong experience with developing and troubleshooting web services especially REST and SCIM
Familiarity with agile methodology. We use Jira for sprint planning and issue tracking
Ability to look at both the “big picture” as well as technical details.
Experience leading business requirements gathering, and solution design
Experience with Access management, SSO, & federation tools like SiteMinder, Ping Access, Forgerock
Some experience with ldap directory architecture including directory schema, namespace and replication topology and virtual directory products such as Openldap, ODSEE, Radiant Logic
IDaaS tools such as Okta, Ping, Azure
Experience with AD, Azure AD, O365, ADFS and its integration with IGA tools
Some experience with modern protocols and frameworks such as SAML, WS-federation, OIDC, OAUTH, and jwt
Familiarity with RPA / BOTS in the context of Identity self-service processes
Familiarity with On-premise and cloud PAM tools such as CyberArk, Beyondtrust, etc.
Familiarity with public and private cloud services integration with IGA tools
Familiarity with MFA
Some experience with JBOSS, Tomcat, weblogic, apache, nginx
Some experience with common relational databases and nosql / document databases
Some experience with CICD / DevOps tools such as Jenkins and source control such as Git and Nexus. Other automation / devops / CICD experience is desirable but not required.  

Excellent team player with a positive attitude.
Must be able to collaborate cross-functionally and globally with team members, both internal and external to Sony Pictures Entertainment
Strong customer service orientation, personal commitment and accountability to deliver a best-in-class quality of service
Experience in managing service partners focused on delivery of business value
Strong written and verbal communication skills
Be flexible to adapt to business changes during digital transformation efforts at SPE
Some experience in resource and project management
Must be able to multi task and manage the time between operational and architecture tasks
The anticipated base salary for this position is $105,000-$140,000. This role may also qualify for annual incentive and/or comprehensive benefits. The actual base salary offered will depend on a variety of factors, including without limitation, the qualifications of the individual applicant for the position, years of relevant experience, level of education attained, certifications or other professional licenses held, and if applicable, the location of the position.

Sony Pictures Entertainment is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, age, sexual orientation, gender identity, or other protected characteristics.

To request an accommodation for purposes of participating in the hiring process, you may contact us at SPE_Accommodation_Assistance@spe.sony.com.