平台工程师，IAM身份治理与管理
Platform Engineer, IAM Identity Gov. & Admin
职位描述
你是否准备好在Mondelēz International实现你的目标？
加入我们的使命，引领零食的未来。让你的独特性脱颖而出。
你将与信息安全团队合作，作为一位能力出众且经验丰富的信息安全和合规专家。
你将如何贡献
你将根据内部政策和外部最佳实践评估信息安全风险，并通过测试安全系统和应用安全标准、政策和流程来支持信息和IT资产的安全。在全局信息安全负责人的指导下，你将实施网络安全技术并提供日常业务支持。如果适合你的角色，你将管理第三方供应商，确保任何内部或第三方都遵守标准。你还将为相关团队提供信息安全培训。
你将带来什么
渴望掌控自己的未来并加速职业发展。你将带来以下经验和知识：
- 信息安全、合规和风险管理
- 安全解决方案及其在Mondelēz International的应用
- 安全策略、意识活动、政策/标准和治理
- 与技术专家、领导和同事有效沟通
- 分析能力和解决问题的能力
- 作为团队成员，支持并带领达成共同目标
在此职位中，你将：
- 设计、开发和部署SailPoint IdentityIQ解决方案 - 工作流、规则、自定义连接器（JDBC、SCIM、REST、LDAP）和RBAC/ABAC/PBAC访问模型
- 作为IIQ平台在所有环境中的主要操作专家：平台健康状况、聚合和分配问题、根本原因分析、升级和变更控制，遵循ITIL/ITSM
- 运行访问认证活动 - 管理员、权限拥有者、微认证和SoD审查 - 使用基于风险的策略和AI驱动的建议
- 提升自动化的新员工、调动和离职工作流程，从初始权限分配到及时的撤销和孤儿账户清理
- 主导角色挖掘、角色工程和权限合理化，以保持访问模型的简洁和访问请求的简单
- 通过PAM集成、SoD执行和即时权限分配来管理特权访问
- 使IGA流程符合SOX、GDPR、HIPAA、PCI-DSS、NIST 800-53和ISO 27001，具备可审计的报告和证据
- 构建集成
查看英文原文
Job Description
Are You Ready to Make It Happen at Mondelēz International?
Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours.
You work with the information security team as a competent and experienced information security and compliance specialist.
How you will contribute
You will assess information security risks in line with internal policy and external best practices, and support security of information and IT assets by testing security systems and applying security standards, policies, and procedures. Under the guidance of global information security lead, you will implement cyber security technology and provide day-to-day business support. If relevant to your role, you will manage third-party providers to ensure that any internal or third-party adhere to standards. You will also provide information security training to appropriate teams.
What you will bring
A desire to drive your future and accelerate your career. You will bring experience and knowledge in:
- Information security, compliance and risk management
- Security solutions and their applicability to Mondelēz International
- Security strategies, awareness campaigns, policies/standards and governance
- Communicating effectively with technical specialists, leaders and peers
- Analytical and problem-solving abilities
- Being a team player by supporting and leading to achieve common goals
In this Role you will be;
- Designing, developing and deploying SailPoint IdentityIQ solutions - workflows, rules, custom connectors (JDBC, SCIM, REST, LDAP) and RBAC/ABAC/PBAC access models
- Acting as the primary operational SME for the IIQ platform across all environments: platform health, aggregation and provisioning issues, root cause analysis, upgrades and change control under ITIL/ITSM
- Running access certification campaigns - manager, entitlement owner, micro-certification and SoD reviews - using risk-based strategies and AI-driven recommendations
- Enhancing automated Joiner, Mover and Leaver workflows, from birthright provisioning through to timely de-provisioning and orphan account cleanup
- Leading role mining, role engineering and entitlement rationalisation to keep the access model clean and access requests simple
- Governing privileged access through PAM integration, SoD enforcement and Just-In-Time provisioning
- Keeping IGA processes aligned to SOX, GDPR, HIPAA, PCI-DSS, NIST 800-53 and ISO 27001, with audit-ready reporting and evidence
- Building integrations that scale - ServiceNow/Jira for access request fulfilment, SIEM/SOAR for ITDR, and multi-cloud IAM (AWS, Azure, GCP)
- Partnering with application owners, HR, IT Security and the business to drive adoption, and presenting the KPIs that show platform maturity
WHAT YOU WILL BRING
A desire to drive your future and accelerate your career, along with experience and knowledge in:
- 10+ years in Identity & Access Management, including 7+ years hands-on IGA platform engineering
- Expert-level SailPoint IdentityIQ - workflows, rules, connectors, lifecycle events, certifications and role modelling
- Strong Java and BeanShell scripting, with SQL, XML, JSON, REST APIs and web services
- LDAP / Active Directory, Azure AD / Entra ID and enterprise directory services
- SCIM, SAML 2.0, OAuth 2.0, OpenID Connect and CI/CD pipelines (Git, Jenkins, Ansible)
- NIST CSF 2.0, NIST 800-53, ISO 27001/27002, Zero Trust Architecture and COBIT 2019
- A Bachelor's degree in Computer Science, Information Security or a related field, or equivalent experience
- SailPoint certifications, CISSP, CISM or CISA (preferred)
The responsibilities of this position are performed within the framework of a regional business model that is defined and managed by Mondelēz Europe GmbH, Switzerland.
No Relocation support availableBusiness Unit Summary
Mondelēz International, Inc. empowers people to snack right in over 150 countries around the world. We are leading the future of snacking with mouth-watering iconic brands such as Oreo, belVita, LU and Ritz biscuits; Cadbury Dairy Milk, Green & Blacks, Milka and Toblerone chocolate; Philadelphia and Dairylea cheese; and Maynards Bassetts, Trebor and Trident gums. Our more than 80,000 colleagues around the world are key to the success of our business. Great people and great brands. That’s who we are. Join us on our journey to continue leading the future of snacking around the world by offering the right snack, for the right moment, made the right way.
Mondelēz International is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation or preference, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law.
Job Type
RegularInformation SecurityTechnology & DigitalOriginally posted on Himalayas