Job
Description
Job_Description":" IAM Security Consultant The IAM Engineer is responsible for being the working on the design, installation, integrations, and deployment of experienced KMS Integration Specialist to design, deploy, and manage a Key Management System (KMS) utilizing Thales CipherTrust Manager (CTM). This role will focus on integrating Thales CTM with Microsoft Active Directory (MSAD), PKI (Public Key Infrastructure), implementing a tenant domain concept, and leveraging KMIP (Key Management Interoperability Protocol) and DARE (Data at Rest Encryption). The Engineer should have knowledge of products and modules (i.e., MFA, SSO, UD, LM, API AM, Microservices etc.). The IAM Engineer is responsible to collaborate with Customer/partners both internal and external on a CIAM solution; working with the teams on implementation and support of the Identity and Access management solution; supporting on implementation of the Identity Governance solution (IGA); creating Cloud based profiles for PING accounts, and supporting microservice account syncing; architecture associate Artifacts, including best practice, playbook; contributing to support repeatable processes for Access Management using PING and Okta; The Engineer should have good understanding of Hashicorp vault configuration and deployment. Secret management, LDAP and MS IAM integration, Auditing and logging, CI/CD integration Skill Requirements: Deploy and configure Thales CipherTrust Manager (CTM) for centralized key management. Ensure proper integration of CTM with various security systems, including MSAD, PKI, and encryption solutions. Design and implement a tenant domain concept for multi-tenant key management environments, ensuring logical separation and secure access control. Set up and manage KMIP-based key management solutions for interoperable key management across multiple platforms and technologies. Configure KMIP clients to communicate securely with the Thales CTM and external encryption devices. Implement Data at Rest Encryption (DARE) using Thales CTM to protect sensitive data stored on various platforms. Strong experience with Thales CipherTrust Manager (CTM) Expertise in Microsoft, Access Gateway, Single Sign-On, Adaptive MFA, Universal directory, Advanced Server Access, API Access Management, Secure authentication, access management systems, Identity as a Service (IDaaS), WS-Federation, OAuth, OpenID Connect 5+ yearsexperience in software development, implementing, integrating, and supporting Microsoft cloud technologies In-depth knowledge of key management protocols, including KMIP and DARE, and hands-on experience configuring and managing them. Good understanding of Cryptography, Encryption. Hands on experience in Data security and data classification Hands on experience in implementing and managing HSM Hands on experience in application integration with HSM and KMS ","
