IAM Security Engineer

Tampa Electric Company is seeking an IAM Security Engineer to support and enhance identity and access management systems across its enterprise environment. The role focuses on IAM governance, privileged access management, authentication, SSO, access controls, incident response, regulatory compliance, and collaboration with technical and business stakeholders, with responsibilities varying by level within the IAM Security Technologist progression.

What you'll do:

• Oversight of the development and implementation of a strategic roadmap for Identity and Access Management (IAM) including Governance and Administration (IGA), Privileged Access Management (PAM), authentication, SSO, directory services, and access governance. Collaborate closely with teams including Cyber Security, Human Resources, Technology, Architecture and Lines of Business (LoBs) to create efficient and user-friendly IAM solutions. (30%)
• Leading efforts in designing,implementing, and maintaining access governance processes, including Joiner/Mover/Leaver workflows, access requests, RBAC, access certifications/reviews, application onboarding, and least-privilege controls. Support enterprise IGA capabilities, including Saviynt, and integrations with business applications and directories. (20%)
• Leading Privileged Access Management (PAM) capabilities, including privileged account onboarding, credential management, access controls, and privileged access remediation with emphasis on platforms such as CyberArk. (10%)
• Deploy, manage, and enhance SSO and authentication solutions, including integrations with enterprise applications, Microsoft Entra ID/Active Directory, and other identity platforms to provide secure and seamless authentication. (10%)
• Lead and support the implementation and management of authentication and access control mechanisms, including multi-factor authentication, conditional access, and identity security controls. (10%)
• Monitor, troubleshoot, and respond to identity and access-related incidents and technical issues. Support remediation of unauthorized access, excessive privileges, identity lifecycle failures, and other IAMN control issues. (10%)
• Effectively collaborate with both technical and non-technical business owners, application teams, implementation partners, and managed service providers. Identify opportunities to improve IAM automation, integraions, processes and toolsets, and provide hands-on technical support for activities outside standard managed service scope. (10%)
• Serve as the Subject Matter Expert (SME) for audit, compliance, and regulatory efforts related to IAM, SOX and PII through investigating, documenting, and reporting findings to management (10%)

What they're looking for:

• Bachelor's Degree in Computer Science, Information Systems or other technology-related field from an accredited college or university. An associate's degree with an additional 2 years of required experience may be considered in lieu of a bachelor's degree. A high school diploma and an additional 4 years of required experience may be considered in lieu of a bachelor's degree
• At least one (1) year of experience in IAM or related security engineering experience
• Understanding of Identity and Access Management concepts, including RBAC, least privilege, entitlement management, and access controls
• Knowledge of identity lifecycle management, including Joiner/Mover/Leaver processes, onboarding, offboarding, access changes, and automated provisioning/deprovisioning
• Knowledge of Identity Governance and Administration capabilities, including access requests, certifications/access reviews, role management, application onboarding, and governance processes
• Understanding of Privileged Access Management concepts, including privileged account onboarding, credential management, access controls, and privileged access governance
• Experience or working knowledge of enterprise IAM technologies such as Saviynt, CyberArk, Microsoft Entra ID, Active Directory, SSO, and MFA
• Understanding of connectors, REST APIs, scripts, and automation used to integrate IAM platforms with applications, directories, HR systems, and other enterprise technologies
• Ability to troubleshoot identity, authentication, provisioning, access, and integration-related issues
• Knowledge of designing and implementing IAM solutions aligned with business requirements, security standards, and enterprise architecture
• Understanding of access reviews, segregation of duties, excessive access, privileged access, and least-privilege principles
• Ability to analyze IAM security issues and support remediation of access-related risks and control deficiencies

Benefits:

• 401k Savings plan with company matching
• Pension plan
• Paid time off
• Paid holiday time
• Medical, Prescription Drug, and Dental Coverage
• Tuition Assistance Program
• Employee Assistance Program
• Wellness Programs
• On-site Fitness Centers
• Bonus Plan