Lead Identity Management Engineer (IAM)

The Group You’ll Be A Part Of

The Information Security department is dedicated to securing Lam through best-in-class security practices. Together, we support users globally with data, information, and systems to achieve their business objectives.

The Impact You’ll Make

Responsible for leading the IAM technical delivery of Identity solutions. Enable the workforce with a method of providing application and business services with a least-privilege access model. Working cross-functionally with HR and GIS teams to deliver end-to-end identify management services. Drive solutions based on business needs in support of major project initiatives related to Lam's Digital Transformation program. Provide IAM development leadership with peers and managed service providers.  Support the development of multi-year roadmaps and capabilities and communicate broadly where appropriate.  Be a key member of the IAM Service Management team.

What You’ll Do

The IAM Engineer role will consist of the following components:

1. Ability to customize Saviynt including custom connectors, workflows, role mining, etc.

2. Where required, take legacy text-file or SQL-based connectors and refactor them into API driven connectors.

3. Active Directory and Entra ID services knowledge and experience

4. Basic network and infrastructure troubleshooting (ports, firewalls, etc,)

Primary Duties and Responsibilities: 

• Develop connectors to downstream applications using out-of-box connectors or custom RESTful API connectors.
• ·Create custom logic and workflows in Saviynt to meet business requirements 
• ·Work cross-functionally with other GIS technical resources to orchestrate end-to-end solutions
• ·Customer analytics and reports in Saviynt for operations and governance of system solutions. 
• ·Must be able to test APIs with Postman or similar tools. 
• ·Lead meetings with stakeholders and company IAM Program Team members. 
• ·Translate functional requirements into technical solutions.

Who We’re Looking For

·IAM Experience:

• Engineers should have experience developing IAM connectors.
• Saviynt experience is preferred but similar experience is acceptable provided the candidate can learn the Saviynt APIs required
• Extensive experience in refactoring text-file based connectors and SQL-based connectors to modern API-based connectors
• Custom job and multilevel workflow development
• Extensive experience performing ETL routines as required as part of IAM data pipelines
• Familiar with concepts such as role mining, separations of duty, role attestation, RBAC, and ABAC

 ·API Experience:

• Must be experienced in general RESTful API implementation
• Must be comfortable looking at publicly available APIs and implementing an API gateway to secure API calls
• Must be able to document all work for knowledge transfer
• Must be able to take high level functional requirements and translate them to code as required
• Must be able to comfortably communicate with internal stakeholders verbally.

Preferred Qualifications

 Skills and Qualifications: 

• ·Experience deploying and managing Identity Management platforms for large global enterprises·
• Programming experience in one or more programing languages (Java, Node, etc.)
• Experience with relational databases to write SQL views and SQL queries.
• Understand how to independently read and develop against publicly available APIs
• ·Experience with Kafka or other event driven platforms is desirable
• Experience integration platforms like Snaplogic, SAP CPI, etc. is desirable
• ·Excellent Communication skills and ability to work on their own or within a team. 
• ·Excellent collaboration, prioritization, problem-solving and decision-making skills. 
• ·Ability to meet deadlines in a highly dynamic environment
• ·Demonstrated mastery of documentation software (e.g., roadmaps, technical documentation, and diagrams). 
• Experience developing within an Agile framework and using tools such as Azure DevOps

 Education and Work Experience: 

• ·A four-year undergraduate degree in Computer Science, Computer Engineering, Information Systems or demonstrated work experience. 
• ·6+ years' experience as and IAM developer/administrator through implementing enterprise identity management, access management and security solutions. (E.g. Saviynt, SailPoint, CA, IBM, BMC, Sun, Oracle, ForgeRock, etc.) in corporate environments. 

Our Commitment

We believe it is important for every person to feel valued, included, and empowered to achieve their full potential. By bringing unique individuals and viewpoints together, we achieve extraordinary results.

Lam Research ("Lam" or the "Company") is an equal opportunity employer. Lam is committed to and reaffirms support of equal opportunity in employment and non-discrimination in employment policies, practices and procedures on the basis of race, religious creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex (including pregnancy, childbirth and related medical conditions), gender, gender identity, gender expression, age, sexual orientation, or military and veteran status or any other category protected by applicable federal, state, or local laws. It is the Company's intention to comply with all applicable laws and regulations. Company policy prohibits unlawful discrimination against applicants or employees.

Lam offers a variety of work location models based on the needs of each role. Our hybrid roles combine the benefits of on-site collaboration with colleagues and the flexibility to work remotely and fall into two categories – On-site Flex and Virtual Flex. ‘On-site Flex’ you’ll work 3+ days per week on-site at a Lam or customer/supplier location, with the opportunity to work remotely for the balance of the week. ‘Virtual Flex’ you’ll work 1-2 days per week on-site at a Lam or customer/supplier location, and remotely the rest of the time.

IND123 #LI-BM1 #LI-Hybrid