Identity Architect

Job Description

Overview

Discovery operates on a worldwide basis to produce & acquire content from thousands of global partners, schedule hundreds of linear TV & online channels, and distribute content to hundreds of affiliates including cable TV, free-to-air broadcast, and online video providers such as Amazon and iTunes.

The Role

We are looking for a dynamic self starter individual to join our Identity and Access Management team. As an Identity Architect, this position will require deep and broad expertise in IAM systems and industry best practices and trends, and will assist with overall strategic architectural direction with IAM in Discovery. The individual will perform a key role in identification, analysis, evaluation, and adoption of IAM services and processes across the enterprise. The Identity Architect will also collaborate actively with Discovery's Infosec team, Cybersecurity architects, application owners, and business owners to ensure the right IAM solutions are successfully designed, developed, deployed, and operated end-to-end from conception through production. In addition, the Identity Architect will be involved with evangelizing IAM best practices, education, development of technical architecture and standards documents.

Responsibilities
• Quickly becomes Discovery's subject matter expert on security models of new and emerging IAM technologies to accurately assess current architecture and solution deployments, and be able to understand current and future requirements to then design and architect modern and efficient solutions for the next generation of IAM solutions at Discovery
• Responsible for IAM reference architecture and IAM technology standards documents based on industry trends and best practices and take ownership of creating and maintaining IAM technical standard documents specifying solutions for evolving access requirements
• Drives IAM strategy and roadmap while collaborating closely Infosec, IAM managed service provider, other technology leads and business and application leads to ensure that IAM security and strategy is properly embedded in their technology architecture
• Maintains oversight of the design and implementation of IAM systems to ensure appropriate and effective security controls are included
• Provides subject matter expertise and has ''deep'' experience in enterprise IAM (Identity and Access Management), including but not limited to federated SSO (single sign on), MFA (multi-factor authentication) user LCM (Lifecycle management) and provisioning, and Identity Governance and Administration (IGA)
• Demonstrates strong presentation skills one-on-one, with small and large groups, and possesses strong analytical, leadership & communication skills including negotiation, conflict resolution, grace under pressure and the ability to manage upwards and across.
• Partners with enterprise, functional architects and actively participates in strategy and future implementation discussions and assessments of available technologies to evolve and modernize the IAM environments with latest technology trends
• Able to work under minimal supervision with extensive latitude for independent judgment, is professional, self-starting, self-organizing.
• Performs other duties as required

Qualifications
• Minimum of 10 year's experience in the IT industry, with 8+ years of business and/or systems analysis
• Bachelor's degree in Information Systems, Computer Science, Business Administration, or equivalent degree/work experience.
• Strong proficiencies in MS Visio (or similar software), PowerPoint, Word, Excel and general design and project management disciplines.
• 3+ years of hands on experience in architecting, managing and deployment of IAM systems including hands on experience with IAM products and technologies such as SailPoint, Saviynt, CyberArk, Beyond Trust, CA Identity Manager, One Identity, Okta, Ping, Centrify, Aveksa
• Excellent understanding of the full IAM lifecycle including End user Provisioning Systems for Joiners-Movers-Leavers, authentication, authorization, AD groups, and privileged access for systems and applications
• Experience in implementing Single-Sign-On (SSO)and federation standards such as SAML and OpenID Connect, Multi-Factor Authentication (MFA), and Privileged Access Management for applications
• Ability to quickly learn and adapt to complex environments in large global media company to implement practical, robust IAM solutions
• Solid expertise in software development principles and design patterns
• CISSP or other related Security certifications
• Should be flexible to work on new technologies within the IAM domain.
• SaaS deployment experience required - detailed knowledge of products such as Okta, GSuite, VPN, Office 365, and SailPoint is beneficial.
• Must have the legal right to work in the United States

Jobcode: Reference SBJ-g3ojex-18-116-36-192-42 in your application.