The Role:

You’ll be a member of the Security Operations Team and collaborate with our teams on projects and operational work, as part of our security program. Your responsibilities will include people, process, and technology. You will understand security in the context of business priorities/constraints. This is a key role in a technology organization maturing its processes and modernizing its Identity and Access Management (IAM) technology. This position will be based at our office in downtown Portland.  

IT&S Cultural Pillars 

Our Core Values are in everything we do, we expect everyone to embody the Information Technology & Services department’s four cultural pillars…
 
Accountability & Integrity 
We hold ourselves to a high standard and follow through on our commitments.  Our transparency, and ability to deliver on our promises make us a trusted and respected business partner.

Customer Focus 
We understand our customers’ needs and advocate for them.  Our relationship with our customers ensures the technical needs of the business are met.

Growth & Learning 
We embrace new technology and skills to better meet the company’s needs.  Our passion for new technology keeps us ahead of future opportunities for the business.

Respect 
We relate with inclusion, kindness, curiosity, and humility.  Respect for differences leads to innovation and collaboration.

Day to Day:

Identity Management

• Design
• Define IAM security requirements for the implementation of new applications and projects.
• Provide analytical and technical guidance to the team and recommend and take action to direct the analysis and solutions required.
• Contribute to and define the overall architecture of our identity and access management standards.

Implement

• Automate IAM processes to reduce manual effort.
• Work with managed service providers and peers to ensure new systems are onboarded into IAM tools successfully.
• Escalate and work closely with product vendors to support the technical environment.

Operate

• Provide IAM administration as well as maintenance of user access roles including reviewing changes in the production environments and coordinating with the key stakeholders from IT, business delivery teams, and third-party vendors. 
• Monitor IAM activities to proactively identify both operational issues and security incidents; identify and resolve issues with IAM tools. 
• Drive towards identity standards and processes; provide guidance on application IAM best practices.

Support

• Update IAM workflows in line with information security principles in response to business requirements.
• Ensure product/content updates occur successfully.
• Create and update IAM documentation (e.g., policies, standards, processes, etc.).
• Develop and report on key performance indicators to show the effectiveness of the identity governance administration (IGA) program.

Security Consulting

• Collaborate on projects to ensure that security issues are addressed throughout the project lifecycle.
• Review system designs and identify areas for security improvements.
• Provide ad hoc consulting on tactical security topics.

Incident Response

• Respond to security incidents including leading the response for smaller incidents.
• While the security monitoring and incident response responsibilities mean that there is an afterhours component to this role, typically it is less than one hour per week.

Come on your first day with:

Educational Qualifications

• Minimum three years identity management or information security experience. Additional years of experience and demonstrated knowledge/complexity of assignments/experience required for level 3.  
• Bachelor's degree or equivalent additional work experience.
• Advanced understanding Identity Management, Identity Governance and Authentication/Authorization integration, PIV, SSO (e.g., Active Directory, ADFS, SAML, LDAP, MFA, OAuth 2.0, OIDC, etc.).
• Experience with secure code development practices.
• Experience with the Java/Beanshell and Python programming languages.
• Familiarity with developing web-based APIs, HTTP-RPC, and REST.
• ITIL Foundations certified or successful completion within 90 days of starting.

Technical Competency 

• A solid understanding of security priorities and concepts  
• Technical knowledge of identity and access management technologies, mainstream operating systems, complex applications, and security information and event management solutions. 

Occupational Personality 

• You’ll interact with NW Natural's personnel at various levels and across business units to understand business imperatives. Deep technical skills paired with collaboration will be key to your success, as will your ability to communicate security concepts and situations to audiences with varying levels of familiarity with these concepts. 
• Leadership abilities with the capability to direct other technical staff on security initiatives and guide team members. You’ll get to work with minimal supervision. Strong analytical skills to analyze security requirements and relate them to appropriate security controls. 
• Your ability to manage expectations appropriately will help and build long-term relationships. 
• You’ll remain current with industry trends and evolving threats.