IAM Engineer – Access Management

Your Opportunity At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together. We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s). In Schwab Cybersecurity Services (SCS), Office of CISO, we provide platforms, services, and security operations capabilities which enable the firm to produce successful client and shareholder outcomes securely and safely.

Securing our IT assets, data, and access to applications is the core of who we are and what we do. We ensure only the appropriate entities have access to IT resources and that we adhere to best practices and standards to ensure a safe and compliant environment is maintained. Identity and Access Management has an opening for a Sr. Staff, Identity and Access Management, to deliver and manage large, complex Identity and Access Management programs in the areas of Provisioning/De-provisioning, Directory, Highly Privileged Accounts, Access Governance, Single Sign On, Analytics, API Management and certifications.

The individual will ensure adherence to policy and provide leadership to the implementation of leading-edge technology to position the organization for success — improving efficiency, increasing security posture, and supporting growth of the firm’s Identity and Access Management (IAM) Program.

• IAM engineering experience in Implementing identity products such as HYPR and Ping Suite of products – Passwordless, Ping Federation (SSO,MFA),  (HYPR Affim), Strong Authentication
• Technical experience in programming and scripting languages such as Python, Java script is preferred
• IAM senior person to drive the solution architecture, engage with business on strategic initiatives, provide a strategic solution to critical business needs, provide technical oversight to engineering
• Build the technical current and target state documents
• Facilitate technical discussions internal stakeholders to meet target state objectives
• Review polices standards, guidelines and procedures for IAM
• Work closely with IAM Engineering to deliver the proposed solutions and provide strategic technical direction across the team
• Work closely with peer groups to achieve Organizational objectives
• Work closely with IAM Engineering for technical document delivery, technical support and hands on technical work
• Oversee adherence to applicable Security Controls, Policies and Standards; partner with business owners and technology groups to synchronize plans to remediate gaps

• Bachelor’s degree or equivalent experience
• 8 + years’ experience in Information Security field, Information Technology field
• IAM engineering experience in Implementing identity products such as HYPR and Ping Suite of products – Passwordless, Ping Federation (SSO,MFA),  (HYPR Affim), Strong Authentication
• Focused on Access Management and more specifically SSO/MFA tools
• Experience using Splunk queries
• 5-7 years’ experience in Java, J2EE, Perl Scripts or any other programing language
• Direct experience working within IGA / Access Management / Authentication/ Authorization technology
• Ability to effectively communicate with technical and non-technical audiences, both oral and written skills are required
• Experience in gathering requirements, documenting and assessing information for implementing information security policies and standards is required
• Strong interpersonal, analytical, problem-solving, influencing, prioritization, decision-making and conflict resolution skills
• Strong initiative; self-starter; self-directed; ability to multi-task
• Experience working with Leadership, Project Manager, Agile methodologies and handling multiple top priorities task
• Bachelor’s degree in Computer Science or a related field plus CISSP, CISM, or equivalent certification is preferred

Charles Schwab