IT Security - Identity Access Management (IAM) - Senior (Baltimore) - 00HRM

ITEC - IT Security -- Identity Access Management (IAM) Senior Description Ernst & Young's Information Technology Enablement Center (ITEC) supports our national Information Technology (IT) advisory practices by providing resources in specific applications and technologies to support the sales, delivery and management of large, complex initiatives for our clients. The IT Security organization within ITEC supports our area offices. Within our IT Security Practice - Identity Access Management (IAM) services our client's in aligning their security management strategy with the business goals by managing who has access to which resources and services, as well as enforcing business, privacy and security policies. Supported by our strategic alliances with third party vendors, including Computer Associates, our experienced professionals can provide the full range of related services including: strategy, assessment, testing, and implementation of IAM solutions. IT Security is currently seeking a Senior in our Identity Access Management Group. Responsibilities Managing projects, including developing project plans, defining project goals and objectives, specifying tasks and how goals will be achieved, what resources are needed, and associating budgets and timelines for completion Defining technical and business requirements for identity and access management solutions Defining business processes and policies related to controlling access to systems and applications Developing identity and access management strategies, architectures and implementation plans Implementing identity and access management technology solutions Position requires 40-50% travel Qualifications To qualify, candidates must have: a bachelor's degree and approximately 2 years of related work experience; or a graduate degree and approximately 1-2 years of related work experience preferred 3+ yrs of technical architecture experience integrating identity and access management software into clients' infrastructure and applications strong understanding of regulatory requirements and compliance issues related to identity and access management experience in one or more of the following areas: User provisioning Enterprise directory architecture and design Role Based Access Control Entitlement review and certification Entitlement management Single sign on Identity federation Privileged access management experience developing IAM strategies, architectures and implementation plans experience implementing and integrating products such as: Oracle Identity Manager Sun Identity Manager IBM Tivoli Identity Manager VAAU RBACx Aveksa Compliance Manager Securent Entitlement Management Solution Symark PowerBroker, PowerPassword, PowerKeeper prior Big 4, advisory or system integrator experience a plus Additional Knowledge and Skills Desired: experience with at least one of the following development environments/languages: J2EE, Java,JavaScript, .NET or C# working knowledge of MS IIS, Apache and Tomcat, WebLogic, or JBoss application servers working knowledge of one or more directories such as Active Directory, IBM Directory Server, SunONE directory Server or Novell e-Directory working knowledge of operating systems such as Microsoft Windows, Unix, and OS/400 working knowledge of mainframe security packages such as TopSecret, ACF2 and RACF working knowledge of ERP systems such as PeopleSoft and SAP working knowledge of virtual directories such as Radiant Logic and Oracle Virtual Directory working knowledge of relational database management systems such as Oracle, Sybase, and MS SQL Server wystems administration experience familiarity with identity and access management related concepts and standards such as SPML, SAML, WS-Federation, WS-Security, and XACML ability to identify and resolve complex issues and develop innovative solutions (advisory skills) for the client's business and technology goals demonstrated ability to contribute to the development of client deliverables and technical content knowledge of general security concepts and methods such as vulnerability assessments, privacy assessments, intrusion detection, incident response, security policy creation, enterprise security strategies, architectures and governance MD-Baltimore