Identity Security Specialist

At Edwards Lifesciences, our mission is to develop groundbreaking technologies that genuinely impact patients' lives.

This role supports our patient-focused mission by developing and enhancing technological solutions for Identity and Access Management (IAM).

The IAM Architect will contribute to security design, implementation, operation, and maintenance of IAM services and related technologies.

Ideal candidates possess broad and deep technical knowledge in Information Security and IAM practice.

This is a highly collaborative role, working closely with multiple cross-functional teams.

Key Responsibilities:

• Providing guidance for enterprise-level security initiatives, system integration, and tools within the IAM domain.
• Serving as the technical lead for enterprise-class IAM security initiatives.
• Developing security design patterns and architectural models that ensure repeatable, consistent architecture for IAM capabilities and related technologies.
• Establishing information security best practices and architectural models to ensure compliance with enterprise-wide security policies and standards in the IAM space.
• Acting as a business liaison and advisor to multiple business units.
• Leading operations and maintenance of key cybersecurity capabilities and services across multiple technologies.
• Staying informed on the evolving cybersecurity threat landscape to drive innovative solutions that enhance Edwards' security posture.
• Resolving complex issues through root cause analysis, followed by the development and implementation of strategic solutions.
• Translating complex security concepts into business-friendly language to facilitate stakeholder understanding and alignment.

Requirements:

• Bachelor's Degree in related field.
• 6 years of previous related experience in IAM domain with solid performance in an architect role working with cross-functional teams.
• Expertise in security concepts for identity and access management.

Preferred Qualifications:

• Experience in designing and implementing secure Active Directory and Entra ID solutions.
• Knowledge of Active Directory authentication features (Kerberos, NTLM, LDAP).
• Experience with Active Directory security best practices (e.g. Privileged Access Management, credential theft mitigations, tiering model design).
• Knowledge of common attack vectors and methods such as pass the hash, pass the ticket, ransomware, kerberoasting.
• Experience of Active Directory capabilities (FSMO roles, schema management, trusts, replication, and Group Policy), Active Directory troubleshooting experience (AD replication, service health checks, advanced troubleshooting).
• Working knowledge of IAM services of any public cloud providers (Azure, AWS, GCP), is a plus.
• Understanding of modern IAM solutions (e.g. MFA, Authentication strengths, conditional access policies, PIM, External Identity, Entra ID Application Proxy, SSO, Application integrations)
• Understanding of identity providers using SAML, OAuth, or OpenID Connect.
• Experience in IAM engineering, building and maintaining security controls.
• Experience implementing industry good practices (e.g., NIST, ISO2700x, SANS) preferred.
• Experience and/or understanding of at least 3 cyber security domains (e.g., platform security, application security, network security, infrastructure, cloud security, data security and identity and access management).
• Working knowledge with threat modeling (STRIDE), preferred.
• Certificationsin related discipline (e.g., CEH, CISM, CISSP), preferred.
• Proficient analytical and problem-solving abilities to identify and mitigate potential identity security risks.
• Substantial knowledge and understanding of cybersecurity principles
• Experience drafting technical documentation.
• Excellent verbal and written communication skills and customer focused skills
• Ability to interact professionally with all organizational levels and proactively escalate issues to appropriate levels of management in the organization
• Ability to manage competing priorities in a fast-paced environment
• Strict attention to detail.
• Good organization and time management skills
• Ability to partner and facilitate security operations, incident response and forensic analysis when required.

What We Offer:

• A dynamic and collaborative work environment.
• The opportunity to work with cutting-edge technologies and make a meaningful impact on patients' lives.
• A competitive salary and benefits package.