Identity and Access Management Architect

Overview of the Identity and Access Management Architect Role at Finning

As an Identity and Access Management Architect at Finning, you will be pivotal in designing and implementing robust IAM systems. This includes critical areas such as identity governance, account provisioning, single sign-on, multi-factor authentication, conditional access, and privileged account management. You will work closely with other Architecture teams, business stakeholders, and engineering teams to define, evaluate, and continuously update policies, standards, and solutions, ensuring alignment with Finning's global objectives.

This role demands technical leadership, driving continuous improvement, and the creation and maintenance of the IAM technology roadmap. You will engage with industry experts to integrate best practices, develop complex IAM components, meticulously document solutions, and provide essential training to operational teams.

Key Responsibilities and Accountabilities

Your major job functions will include initiating and participating in technology projects, overseeing or consulting on business projects, and coordinating with the IAM team on roadmap development, solution design, implementation, and operational planning. You will collaborate with operations teams for contract management, monitoring, and optimization, and evaluate technology industry trends to assess their impact on user experience. Additionally, you will manage projects when dedicated Project Managers are not assigned, lead design sessions with both Finning personnel and external parties, and provide support during major incidents.

Accountabilities include the design of service offerings and standard configurations, ensuring alignment of Finning's global end-to-end design and solution selection for Identity and Access Management with long-term IAM objectives. You will be responsible for keeping all relevant Architecture and Infrastructure documentation up to date and accurate, providing Tier 3.5 escalation support for your area of responsibility, and recommending technology to meet business and technical objectives. Identifying deficiencies in current designs and planned changes, along with recommending solutions for improvement, are also key, as is assisting with technology governance activities.

What Finning Offers You

• A great environment with a hybrid work opportunity.
• Significant career advancement and training opportunities.
• Pension and employee stock purchase plans with company contributions.
• Extensive health benefits including group medical and dental, and short-term and long-term disability.
• An annual bonus as part of the total compensation package.
• A competitive salary range between $110,000 and $125,000 annually.

Qualifications and Experience

To succeed in this role, you should possess professional certifications or equivalent experience from relevant vendors. A minimum of 5 years of experience in an enterprise environment, with at least 3 years specifically in architecture solutions within an enterprise organization, is required. You will need business analysis experience, working directly with stakeholders to understand requirements. Broad knowledge of Desktop and mobile operating systems (Windows, MacOS, iOS, Android) is essential, along with a strong background in producing high-quality documentation and solution artifacts.

Demonstrated experience in designing and successfully delivering solutions, including supporting proposals, Statements of Work (SoW's), high-level designs, RFP responses, roadmaps, and strategies, is crucial. Expertise with IAM, PAM, and IGA solutions and frameworks leveraging technologies like EntraID, Active Directory, Sailpoint IdentityIQ, and Delinea Secret Server is a must. A solid understanding of cloud architectures and strategy (public, private, and hybrid) and demonstrated architecture and solution implementation success in a global enterprise environment will round out your qualifications.

Key Skills/Competency

• Identity and Access Management (IAM)
• Identity Governance
• Privileged Access Management (PAM)
• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• Cloud Security
• Enterprise Architecture
• Solution Design
• Microsoft Entra ID (Azure AD)
• SailPoint IdentityIQ