Architect Security IAM

ARCHITECT IAM.

In the context of the Masterplan Infrastructure, the Identity and Access Management Programme defined the vision and the implementation of the Identity and Access Management Foundation set up to deliver the agile IT-infrastructure of the future, such as authenthication mechanislms, identity and access management solutions, and privileged access management controls. The security architect assists in defining the cornerstones of this foundations, and outlines the residual risks with respect to the business impact analysis and the controls selected at the start of each project in the program. you participate in defining the strategic and tactical lines of the IAM Program within the IT Master Plan for the Group's infrastructure plus the path for implementing and deploying them.
you assess the security requirements (new requirements or developments of existing ones) in terms of infrastructure in your field; you put forward possible solutions, you document the feasibility and the financial impact of the alternatives proposed and you choose the security solutions that best correspond to the strategy laid down in this IAM Program.

. You carry out a business impact analysis, a vulnerability and residual risks analysis, prior to building the solution.
. You present the findings to management, in an oral presentation in the French and English language.
for the purposes of invitations to tender, you draw up the security requirements in the contract specifications linked to IAM
. you assure that the requirements for compliance with privacy legislation (CNIL) are known and implemented from the start of the projects.
you assure maintenance of the security infrastructure referencing in your field, so as to produce complete, consistent documentation of the current infrastructure landscape in the tooling that has been selected to support the risks analysis processes.. String knowledge of PKI
. Identity Federation
. Understanding of the Privacy Legislation (Europe)
. Authenthication mechanisms (strong, semi-strong, simple)
. Active Directory and Microsoft IAM Solutions
. experience with identity management suites of products, such as TIM IBM, Site Minder/Identity Minder Computer Associates.
. Infrastructure security, ie security gateways and NGFW.
. SAAS-models
. CISSP, CISA, SANS certifications is desirable. Languages: French (very well spoken + reading/writing) - English (good spoken + reading/writing) - Dutch is nice to have
Regular and transparent communication
Very good presentation skills - adapted to senior management
Assertive - can convince people
Can work independent (to lead studies) but also in team
Methodologies: knowledge of architecture framework TOGAF or other is nice to have
Risk analysis methodologies, such as CRAMM is nice to have.