Senior security engineer, iamapply for the senior security engineer, iam role at bic.for over 75 years, bic has been creating ingeniously simple and joyful products that are a part of every heart and home.
as a member of our team, you will help reignite a beloved brand as we continue to reimagine everyday essentials in sustainable and responsible ways.
our "roll up your sleeves and get the job done" approach creates an environment where self-starters, problem solvers and innovative thinkers thrive.
it's a colorful world – make your mark by joining the bic team today.responsibilitiescollaborate with global, cross-functional teams and third parties to configure, test and deploy iga and pam solutions, develop lifecycle events, connect hr systems and applications, identify and vault privileged accounts, and perform other engineering duties as assigned.assist the implementation team with building, testing and deploying sailpoint isc to support hire-to-retire lifecycle events for provisioning/deprovisioning, birthright access, rbac and access recertifications; configure and maintain rules, workflows, certifications, roles, and provisioning policies.assist with building, testing and deploying cyberark, including design, configuration and enforcement of pam policies and best practices to secure privileged credentials through vaulting, password rotation and session recording.work with application teams and stakeholders to integrate business-critical systems with sailpoint, assisting with data normalization and cleanup, documenting requirements and designing flows for lifecycle events.conduct inventory assessments and environment scans to identify privileged accounts, engage with account owners to vault accounts, maintain compliance standards for rotating account passwords, troubleshoot connection issues and design solutions to expand the pam program through maturity.support day-to-day operations of sailpoint and cyberark: monitor system performance, troubleshoot issues, support patches and upgrades, build custom reports and dashboards, refine and improve existing lifecycle events, and gather requirements for new lifecycle events to support business outcomes and expand the pam account inventory.execute on the identity roadmap to mature both programs, engaging with business customers to solicit feedback and architect solutions to promote process efficiency while closing risks associated with inappropriate or inconsistent access.typical challengesiam: initial connectors to applications, associated data cleanup, troubleshooting failed provisioning or deprovisioning tasks, maintaining system integrity and lifecycle event processing; gathering requirements for new systems and incorporating them with existing lifecycle events; change management to ensure understanding of the iga system's role in the hire-to-retire process and collaborating with hr for success factors roadmap; working with servicenow team to design and update forms to support request/approval/fulfillment processes.pam: initial application implementation and data cleanup; defining and identifying accounts and users; putting accounts under cyberark control with rotation and checkout processes.qualificationsminimum 4 years of direct experience with sailpoint (preferably isc), including lce configurations and working with various application definition types, user access review campaign configuration, rbac and birthright provisioning flows.extensive knowledge of identity best practices, familiarity with hcm systems (success factors/workday) and servicenow.experience with pam solutions (preferably cyberark) is a plus; understanding of privileged account lifecycle and least-privilege enforcement.experience with powershell scripting.self-starter with an innovation mindset.customer service mindset.ability to influence and cooperate with a non-technical audience.agility is a must.equal opportunity statementbic is an equal opportunity employer.
we strongly commit to hiring people with different backgrounds and experiences to help us build better products, make better decisions, and better serve our customers.
we do not discriminate based on race, religion, color, national origin, gender, sexual orientation, veteran status, disability status, or similar characteristics.
all employment is decided based on qualifications, merit and business need.
#j-*-ljbffr