IT Security Specialist

IT Security Specialist

Non-Union Position
IS Security & Analytics Staff 1;
Portland, Oregon (US-OR)

Hybrid schedule available for Oregon & Washington residents.
Regular FT
Posting # 5446

At NW Natural, we offer more than rewarding career opportunities and a vibrant, inclusive work culture. We invite you to join us in providing safe and reliable utility services and renewable energy to better the lives of the communities we serve. Our vision is to be the leader in service excellence, innovation and environmental stewardship for our customers, while building on our strengths as a trusted energy provider and environmental leader for our industry.

In addition to environmental stewardship, we're also deeply committed to Diversity, Equity, and Inclusion at NW Natural. Our DEI Council started 21 years ago, and today we continue to foster a culture where all employees can experience a sense of belonging, shared purpose and possibility.

You’ll be a member of the Security Operations Team and collaborate with our teams on projects and operational work, as part of our security program. Your responsibilities will include people, processes, and technology. You will understand security in the context of business priorities/constraints. This is a key role in a technology organization maturing its processes and modernizing its Identity and Access Management (IAM) technology.

This position will be based at our office in downtown Portland.

Design

• Define IAM security requirements for the implementation of new applications and projects.
• Provide analytical and technical guidance to the team and recommend and take action to direct the analysis and solutions required.
• Contribute to the overall architecture of our identity and access management standards.

Implement

• Automate IAM processes to reduce manual effort.
• Work with managed service providers and peers to ensure new systems are onboarded into IAM tools successfully.
• Escalate and work closely with product vendors to support the technical environment.

Operate

• Provide IAM administration as well as maintenance of user access roles including reviewing changes in the production environments and coordinating with the key stakeholders from IT, business delivery teams, and third-party vendors.
• Monitor IAM activities to proactively identify both operational issues and security incidents; identify and resolve issues with IAM tools.
• Drive towards identity standards and processes; provide guidance on application IAM best practices.

Support

• Update IAM workflows in line with information security principles in response to business requirements.
• Ensure product/content updates occur successfully.
• Create and update IAM documentation (e.g., policies, standards, processes, etc.).
• Develop and report on key performance indicators to show the effectiveness of the identity governance administration (IGA) program.

Security Consulting

• Collaborate on projects to ensure that identity security issues are addressed throughout the project lifecycle.
• Review system designs and identify areas for security improvements.
• Provide ad hoc consulting on tactical identity security topics.

• Minimum three years of identity management or information security experience.
• Bachelor's degree or equivalent additional work experience.
• Advanced understanding of Identity Management, Identity Governance and Authentication/Authorization integration, PIV, SSO (e.g., Active Directory, ADFS, SAML, LDAP, MFA, OAuth 2.0, OIDC, etc.).
• Experience with secure code development practices.
• Experience with the Java/Beanshell, Python, and Power Shell programming languages.
• Familiarity with developing web-based APIs, HTTP-RPC, and REST.
• ITIL Foundations certified or successful completion within 90 days of starting.

• A solid understanding of IAM and security priorities and concepts.
• Technical knowledge of identity and access management technologies, mainstream operating systems, and complex applications.

• You'll interact with NW Natural's personnel at various levels and across business units to understand business…