IT - Identity and Access Management Specialist

TITLE: IDENTITY AND ACCESS MANAGEMENT SPECIALIST            

STATUS: NON - EXEMPT

DEPARTMENT: IT - SUPPORT          

REPORTS TO: SUP – HELP DESK SUPPORT            

DATE: 10/2020

JOB CODE: 10045

PAY GRADE: 14H

PAY SCALE: $28.50 - $31.00 HOURLY                     

GENERAL DESCRIPTION:

This position is primarily responsible for understanding the access and identity management functions of the credit union and data governance using best practices. Provides support by configuring, manipulating, and enforcing role-based access controls for all incoming, exiting and departing users to the Credit Union. 

Perform audits to maintain security policies outlined by corporate policies. Provides support to business areas regarding access management and permissions. The incumbent will be the key player in ensuring access is provided in a timely and accurate manner following the Credit Union policies and procedures.  

TASKS, DUTIES, FUNCTIONS:

1. Onboarding and off boarding of all users by provisioning and deprovisioning access within all necessary applications. 
2. Provide operational support and act as a technical resource for the Active Directory infrastructure as well as various system, including incident, change, and problem management. 
3. Account lifecycle management, governance, and administration from inception to termination for all users. Managing access privileges of people both inside and outside the organization. 
4. Engage business leaders for approvals to update new roles and procedures using “least privileged” access methodology. 
5. Efficiently providing the right person, the right system access at the right time. 
6. Working with users to resolve issues conflicts with systems and services. 
7. Help users understand and apply identity security concepts, processes, and technologies. 
8. Interact with key client management to gather information, resolve problems and make recommendations for improvements. 
9. Help balance security needs and employee experience to craft seamless authentication and identity management experiences. 
10. Manage the day-to-day operations of IAM systems by monitoring system performance, configuration, maintenance and repair. 
11. Maintain best practices for implementing new technologies and decommissioning legacy systems..
12. Troubleshoot complex technical issues. 
13. Work to ensure audit tasks related to Identity Management are completed, with the participation of appropriate partners and in line with corporate policies. 
14. Communicate and/or prepare information for audit by extracting and presenting key metrics for reporting and analysis. 
15. Solve and manage the resolution of issues related to identities, systems, access, accounts, authentication, authorization, entitlements, and permissions. 
16. Create and populate additional fields within Active Directory and other systems. 
17. Modify and populate existing fields within Active Directory and other systems. 
18. Participate in project planning sessions. 
19. Perform user testing. 
20. A clear understanding of role-based access control and chooses the most appropriate option to maintain a "least privilege" level of access for all users. 
21. Deploying modern access management options, such as single sign-on (SSO), federated identities, multi-factor authentication (MFA) and privileged account management.
22. Maintain a thorough understanding of state and federal laws and regulations related to credit union compliance including bank secrecy and anti-money laundering laws appropriate to the position.

PHYSICAL SKILLS, ABILITIES, AND EXERTION UTILIZED IN THE PERFORMANCE OF THESE TASKS:

1. Effective oral and written communication skills required to interpret, resolve, and document networking problems. 
2. Strong organizational and time management skills; ability to articulate system methodologies and concepts; communicate effectively in providing technical guidance and expertise to other staff 
3. Strong inter-personal skills and service focus. 
4. Must possess sufficient manual dexterity to skillfully operate applicable computer hardware, a variety of hand tools and standard office equipment. 
5. Occasionally required to change work hours including working on weekends to accomplish tasks. 
6. Occasionally required to work long hours to accomplish tasks. 
7. Participate in on-call rotation, and as such, work out of standard business hours will occasionally be required. 

ORGANIZATIONAL CONTACTS & RELATIONSHIPS:

1. INTERNAL:  All levels of staff and management 
2. EXTERNAL:  Vendors

QUALIFICATIONS:

1. EDUCATION: Minimum two-year degree in Information Technology or Management Information Systems (MIS). Bachelor’s degree in Information Technology and Management Information Systems (MIS) or related field preferred. Equivalent work experience may be considered in lieu of a degree. 
2. EXPERIENCE: One (1) or more years’ experience with Systems Administration and Applications including Active Directory and AZURE AD. 
3. KNOWLEDGE/SKILLS:

• A strong understanding of user entitlement reviews, end to end provisioning processes and user lifecycle management. 
• Knowledge of least privilege methodology, role- based access control, security regulations, support which includes ticket management, customer services, permissions and groups. 
• Troubleshooting skills with networking and computer systems, can multitask, work in a fast- paced environment while providing excellent user experience. 
• Prior experience with information security best practices is a plus. 
• Advanced analytical problem-solving skills, including the ability to analyze datasets and present in a format that facilitates senior management decision making. 
• Proven ability to work independently and in a multi-tasking environment. 
• Strong communications skills & facilitation experience across all levels. 
• Strong sense of ethics, integrity, and professionalism. 
• Demonstrate Golden 1 core values.

PHYSICAL REQUIREMENTS:

1. • Prolonged sitting throughout the workday with occasional mobility required.
   • Corrected vision within the normal range.
   • Hearing within normal range.  A device to enhance hearing will be provided if needed.
   • Occasional movements throughout the department daily to interact with staff, accomplish tasks, etc.

LICENSES/CERTIFICATIONS:

None

#LI-Remote

THIS JOB DESCRIPTION IN NO WAY STATES OR IMPLIES THAT THESE ARE THE ONLY DUTIES TO BE PERFORMED BY THIS EMPLOYEE.   HE OR SHE WILL BE REQUIRED TO FOLLOW OTHER INSTRUCTIONS AND TO PERFORM OTHER DUTIES REQUESTED BY HIS OR HER SUPERVISOR THAT ARE WITHIN HIS / HER KNOWLEDGE, SKILL AND ABILITY AS WELL AS HIS / HER MENTAL AND PHYSICAL ABILITIES.

REV. 4.9.2025