Identity & Access Management Analyst (IAM), Progression

Title: Identity & Access Management Analyst (IAM), Progression Company: Tampa Electric Company Location: Bearss Operations Center State and City: Florida - LUTZ Shift: M-F 4 / Days in Office / 1 Day Remote TITLE: Identity & Access Analyst (IAM), Progression PERFORMANCE COACH: Sr. Manager, Cyber Protection COMPANY: Tampa Electric DEPARTMENT: Cyber Security Operations Center Please note that this position can be hired within any level of the job family progression, based on Education and years of experience (progression). POSITION CONCEPT The IT Security Administration Analyst is responsible for ensuring the integrity of the company’s information assets. Responsibilities focus on the establishment, maintenance, and removal of user, system, functional, and shared accounts for all IT systems. Analysis of security access requests and their safeguard against accidental or unauthorized modification, destruction, or disclosure is of the utmost importance. Integral to the position is ensuring that all critical cyber assets are secure, while maintaining and enforcing regulations regarding Sarbanes-Oxley (SOX), FERC, NERC, and PCI. Enforcement of corporate information security standards; segregation of access to cyber assets and network resources as regulations dictate; documentation and updates to security access processes; and maintaining Security Access Administration metrics are key responsibilities for this position. FOCUS AREAS • Identity & Access Management (IAM) • User provisioning and deprovisioning • Active Directory and enterprise application security administration • Access governance and RBAC • SOX, NERC CIP, and PCI compliance support ASSOCIATE SECURITY ADMINISTRATION ANALYST (Level 1) Reviews security access controls to all enterprise systems with a good understanding of security access management. Maintains and enforces regulatory compliance. Works under direct supervision. PRIMARY DUTIES AND RESPONSIBILITIES 1. Responds to incidents from business partners to resolve security access problems and troubleshoots basic security access administration issues. (15%) 2. Administers the provisioning and deprovisioning of all account types and the review of security access controls to all enterprise systems including ERP, NERC, CRB, etc. by working to ensure that all approved access to cyber assets and network resources are segregated according to regulatory and business requirements. (55%) 3. Maintains and enforces regulatory compliance (PCI, FERC, HIPAA, SOX, NERC) and corporate IT security standards associated with information technology. (30%) Key Internal: Interacts with team members at the Service Desk, Enterprise Security, and Cyber Security Operations Center. Works with varying levels of management and associates throughout TECO Emera and its affiliates. QUALIFICATIONS Education Required: High school diploma or equivalent Preferred: Bachelor’s degree in Information Systems, Computer Science, Business or related fields Licenses/Certifications Preferred: SSCP/CISSP, Security+, ITIL certification Related Experience Required: Minimum two (2) years of information technology, information security, or information system audit experience; Bachelor’s degree may be considered in lieu of one (1) year of experience listed above. Knowledge/Skills/Abilities (KSA) Required: Basic knowledge of Windows operating system and account management; Ability to support security access requests with preference for SAP, SQL Database, and Windows. Good understanding of the practical aspects of security access management; Exceptional focus on attention to detail. SECURITY ADMINISTRATION ANALYST (Level 2) In addition to the Level 1 Associate Analyst duties and responsibilities, investigates security access exceptions and updates security processes. Works under direct supervision. PRIMARY DUTIES AND RESPONSIBILITIES 1. Performs duties and responsibilities of previous level (70%) 2. Performs additional security tasks based on established processes. Work requires review for soundness of technical judgment and for following the defined policies and procedures. (15%) 3. Enforces corporate security policies and procedures, investigates possible security access exceptions, and updates security processes documentation as necessary. (15%) QUALIFICATIONS Education Required: High school diploma or equivalent Preferred: Bachelor’s degree in Information Systems, Computer Science, Business or related fields Licenses/Certifications Preferred: SSCP/CISSP, Security+, ITIL certification Related Experience Required: Minimum of four (4) years of direct work experience performing the Duties & Responsibilities of this position; Bachelor’s degree may be considered in lieu of up to 2 years of experience listed above. Knowledge/Skills/Abilities (KSA) Required: Thorough knowledge of Windows operating system and user account management and support for administrative requests for SAP, SQL Database, and Windows. Exceptional focus on attention to detail. SENIOR SECURITY ADMINISTRATION ANALYST (Level 3) In addition to the Level 2 Analyst duties and responsibilities, analyzes and troubleshoots more complex activities. Gathers and documents business and functional security roles and access requirements. May mentor Level 1 and Level 2 Analysts. PRIMARY DUTIES AND RESPONSIBILITIES 1. Performs duties and responsibilities of previous levels (50%) 2. Analyzes and troubleshoots complex activities related to security access related issues, proactively updates procedure/process documentation, and suggests and implements process improvements. (15%) 3. Identifies and raises awareness of security access exceptions and identifies areas and processes for improvement and automation. (15%) 4. Coordinates and addresses project related security tasks. (20%) SUPERVISION Indirect Supervision: Contractors QUALIFICATIONS Education Required: High school diploma or equivalent. Preferred: Bachelor’s degree in Information Systems, Computer Science, Business or related fields. Licenses/Certifications Preferred: SSCP/CISSP, Security+, ITIL certification Related Experience Required: Minimum of eight (8) years of direct work experience performing the Duties & Responsibilities of this position is required Bachelor’s degree may be considered in lieu of up to 4 years of experience listed above. Knowledge/Skills/Abilities (KSA) Required: Strong knowledge of Windows operating system and user account management with proven skills in gathering and documenting business and functional security roles and access requirements; Working knowledge of the processes that ensure compliance with NERC CIP, SOX, and PCI. Strong verbal, written, analytical, and interpersonal skills; Exceptional focus on attention to detail. LEAD SECURITY ADMINISTRATION ANALYST – PC role not a part of the Sec Admin Analyst progression The Security Administration Analyst Lead is an exempt level position. In addition to the Senior Security Administration Analyst duties & responsibilities, serves as project team lead and the SME in technical discipline. May mentor and train all levels of the Security Admin Analysts. Works under minimal supervision and may serve as backup to the manager in a limited capacity. PRIMARY DUTIES AND RESPONSIBILITIES 1. Performs duties and responsibilities of previous levels (40%) 2. Functions as project team lead under the direction of the manager or project managers; may lead multiple concurrent projects. (10%) 3. Functions as a subject matter expert in this technical discipline. (10%) 4. Direct management of Security Admin Analyst. Mentors and directs team members, manages team member performance review. Develops and drives standard practices within the team. (20%) 5. In this leadership role, oversees projects and/or functional segments within the team and manages day-to-day responsibilities. May serve as a backup to the manager in a limited capacity. (20%) SUPERVISION Direct Supervision: Direct management of the five (5) Security Admin Analysts. Indirect Supervision: Serves in a leadership role overseeing team members, contractors and contract resources. QUALIFICATIONS Education Required: High school diploma or equivalent Preferred: Bachelor’s degree in Information Systems, Computer Science, Business or related fields Licenses/Certifications Preferred: Security+, SANS GIAC, CISM, CISA, CISSP, ITIL certification Related Experience Required: Minimum of 12 years progressive experience performing the Duties & Responsibilities of this position; Bachelor’s degree may be considered in lieu of up to 4 years of experience listed above. Knowledge/Skills/Abilities (KSA) Required: Expertise in Windows operating system and user account management; Proven leadership skills; Strong analytical and risk assessment skills as well as strong listening and written communication skills for reporting and auditing purposes; Working knowledge of the processes that ensure compliance with NERC, CIP, SOX ,NIST and PCI; Frequently presents information to management, team, and department. Knowledge of identity governance tools. Knowledge of Privilege Management and Muti factor Authentication (MFA) tools. Knowledge and support of Azure AD groups, Knowledge of Role based access controls (RBAC). WORKING CONDITIONS Some extended working hours are required. Fast paced environment. TECO offers a competitive Benefits package!! Competitive Salary *401k Savings plan w/ company matching * Pension plan * Paid time off* Paid Holiday time * Medical, Prescription Drug, & Dental Coverage *Tuition Assistance Program * Employee Assistance Program * Wellness Programs * On-site Fitness Centers * Bonus Plan and more! #LI-SC1