Staff Cybersecurity IAM Engineer

Do you enjoy creating innovative solutions?

Would you like to take ownership of Identity and Access Management Strategy?

Join our cutting-edge Security team

We operate at the heart of the digital transformation of our business. Our team is responsible for the cyber-security architecture and data protection for our global organization. We focus on ensuring the security and improvement of our Identity and Access Management tools and policies across the business.

Partner with the best

As part of the Baker Hughes Cybersecurity Identity & Access Management team, this individual will contribute to the definition and implementation of the next generation of Identity & Access Management tools and policies across Baker Hughes. This individual will integrate with new and existing initiatives across Baker Hughes to drive the Cybersecurity requirements and policies from design through implementation.

As a Staff Cybersecurity IAM Engineer, you will be responsible for:

Designing, implementing, enhancing, and support on-prem and on cloud implementation of Radiant Logic VDS.

Acting as a technical expert on initiatives involving directory services with an emphasis on virtual directory services.

Supporting leadership strategy by engineering and providing architectural input in IAM domains, including user lifecycle management, provisioning/de-provisioning, and access certification.

Leading and influence technical direction for large-scale, highly complex technical initiatives and/or projects requiring integration of cross-functional systems.

Coordinating and support major and minor incident response.

Researching, implement, and scale innovative solutions.

Working with management to define and operationalize Cybersecurity strategy & policies for Identity & Access Management.

Identifying and drive the mitigation of existing risks in the Identity & Access management space

Developing automation to manage corporate and customer-facing identity applications.

Collaborating with Cybersecurity Architects and Engineers to implement new solutions.

Responsibilities include rotational, 24/7 on call support.

Fuel your passion

To be successful in this role you will:

• Bachelor's Degree in Computer Science or “STEM” Majors (Science, Technology, Engineering and Math). A minimum 9 years of relevant professional experience.
• 3+ years of experience on implementing and supporting Radiant Logic Virtual Directory Services (VDS) platform.
• 9+ years of LDAP (Lightweight Directory Access Protocol), Active Directory, other IAM Application, PKI, and DNS experience
• Experience in IAM integration of AD, webservices, and LDAP based application connectors.
• Advanced understanding of permission delegation and least-privileged principle.
• Advanced knowledge of user account provisioning and lifecycle best practices.
• Troubleshooting IAM products and integrated application issues such as applications connectivity, Password Sync and so on.
• Use Radiant Logic solution to virtualize, correlate and aggregate user identities from different identity silos into a single source of identities.
• In-depth understanding of Windows Servers, its Cluster, monitoring and maintaining them.
• Experience in working and supporting large organization with 70,000 LDAP users.
• Well-informed with VDS infrastructure governance best practices, user incident/Request, KPI, and KRI
• Knowledge of Microsoft SQL server and other RDBMS platforms and PowerShell scripting.
• Experience with cybersecurity frameworks (i.e., NIST, CSA CCM)
• Knowledge of identity data flows, security roles, certification/attestation, entitlement management, and access governance
• Experience with directory services, active directory, azure ad, relational database schema, LDAP schema