Senior IAM Engineer

Helping careers take flight. Reshaping an industry. Enable your career to be Made on Duck Creek.

WHO WE ARE

Duck Creek Technologies is the intelligent solutions provider defining the future of the property and casualty (P&C) and general insurance industry. We are the platform upon which modern insurance systems are built, enabling the industry to capitalize on the power of the cloud to run agile, intelligent, and evergreen operations. Our modern SaaS solutions help insurers set a new standard and revolutionize how consumers interact with insurance companies.

Authenticity, purpose, and transparency are core to Duck Creek, and we believe insurance should be there for individuals and businesses when, where, and how they need it most. Our market-leading solutions are available on a standalone basis or as a full suite, and all are available via Duck Creek OnDemand. With more than 1,000 successful implementations to date, Duck Creek removes the IT burden for insurers so they can focus on the business of insurance. 

We have a flock of more than 1,800 employees across the globe and are proud to be a Flexible-First employer. We empower our employees with the choice to work from an office, from home, or on a hybrid schedule. Our flexible-first environment fosters productivity, inclusion, collaboration, and ensures a consistent employee experience regardless of location. 

If working in a fast-paced, rapidly evolving company that is transforming one of the world’s oldest and largest industries sounds exciting, let us know. We are excited you are considering Duck Creek as a future employer and hope you decide to join “The Flock”! 

To learn more about us, visit www.duckcreek.com and follow us on our social channels for the latest information – LinkedIn and Twitter. 

WHAT YOU’LL DO

The Senior Identity and Access Management (IAM) Engineer is responsible for developing and supporting the evolution and automation of the Identity and Access Management (IAM) program, by leveraging key technologies and IAM best practices. This role reports to Head of Identity and Access Management and plays a pivotal role in the success of the Duck Creek Information Security Strategy

• Design, develop, test, implement, and integrate Identity and Access Management (IAM) systems and solutions for workforce and customers

• Ensure that solutions protect information resources against unauthorized use, inappropriate degrees of access, disclosure, damage and/or loss. Identify, analyze and resolve system design weaknesses

• Provide post implementation support and regular system maintenance and support which will periodically require evening, weekend, and on-call support

• Design, implement and maintain core cyber IAM security capabilities, technologies, and systems.

• Hands-on experience with Azure Active Directory, Microsoft Azure B2C

• Experience with IAM in both Cloud- and Hybrid-model environments

• Understanding of Cloud Security frameworks and responsibilities

• Experience with Identity Governance and Administration (IGA) and Privileged Access Management (PAM) tools (Okta, Sailpoint, Ping Identity, Saviynt, CyberArk, Delinea etc.)

• Troubleshoot, identify, and resolve technical identity and access management related issues

• Improve identity and access management solutions and systems for protection against evolving threats and efficiency

• Coach other members of the organization on the best practices that should be followed in identity and access management

• Stay up-to-date on current IAM threats and industry solutions

• Works with Enterprise architecture, security architecture, project managers and infrastructure SME’s to ensure that all aspects of the identity security solution architecture are defined, elaborated and tested

• Develop technical IAM solutions during the solutions delivery life-cycle, while engaging service owners, architects, project managers, global infrastructure teams and IT teams, and key IAM product vendors

• Defines technical component solutions that take into account the enterprise architecture strategies, current state environment and constraints

• Maintains system documentation and protocols to ensure that additions and modifications are thoroughly documented upon implementation

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

WHAT YOU’VE DONE

QUALIFICATIONS/REQUIREMENTS

Education and Work Experience:

• Bachelor’s degree or Master’s degree in Information Security, Computer Science or related degree;

• Relevant information security or IAM certifications is a plus

• Total Relevant Work Experience: Minimum 6+ Years

• Demonstrate extensive understanding of IAM concepts such as directory services, SSO, federation, MFA, provisioning, access re-certification, role-based access control (RBAC) and separation of duties (SOD)

• Identity management / Identity governance and administration (IGA) technologies

• Web Access Management (WAM) technologies

• Hands-on working experience with Microsoft Azure, Azure B2C, O-365 and Cloud Infrastructures

• Experience or familiarity with information security frameworks and standards such as ISO 27001, NIST CSF, and SOC2

• 5+ years of hands-on experience with an IAM governance platform such as SailPoint, Okta, Ping Identity, CyberArk, Delinea, Savyint etc., in an enterprise environment for both workforce and customers

• 5+ years of experience with administration and configuring SSO, MFA, Automation, Provisioning, de-Provisioning

• 4+ years of experience with scripting languages such as Python, Powershell, JSON etc

• Prior experience implementing an IGA tool and integration with an HRIS system

• Expert understanding of SCIM protocol and API integrations

• Understanding of Software Development Lifecycle (SDLC)

• Candidate must be able to drive identity management strategically across the firm as a critical security pillar aligning where possible with America's Division Identity practices

• Must have ability to on-board third party and cloud applications using various federation protocols using the IGA platform as well as outside of the IGA platform

• Must be able to incorporate various critical third-party applications onto the platform for entitlement reviews as well as for user provisioning and de-provisioning

Other Requirements:

• Travel: 0-10

• Work Authorization: Legally authorized to work in the country of the job location.

WHAT WE STAND FOR

Our global company celebrates & leverages the differences each employee brings to the table. Our success is a direct result of an inclusive culture where opportunities to learn from one another occur regardless of title, seniority, or background. This collaborative and team-oriented approach is at the core of how we operate and continuously improve our products, services, and systems. As such, Duck Creek is committed to providing equal opportunity to all employees and applicants – to recruit, hire, train, and reward employees for their individual abilities, achievements, and experience without regard to race, color, gender, religion, sexual orientation, age, national origin, disability, marital, military, or any other protected status. 

We strive to be an example to the world of inclusion, diversity, and equity in all things – where employees are free to be their authentic selves in the workplace and in the communities in which we live. We believe in leading by example and are proud of the diversity of our team and our shared commitment to our Core Values: We Prioritize Respect; We Listen; We Care; We Add Value; and We Lead.

To learn more about our inclusive company culture, values, DE&I initiatives, and people, please visit: https://www.duckcreek.com/life-at-duck-creek/

Please let us know if you encounter accessibility barriers with our web content by sending an email to [email protected].

Duck Creek Technologies does not accept, nor will we pay a fee for any hires resulting from unsolicited headhunter or agency resumes.

#LI-Remote

#LI-DP1