IAM（身份和访问管理）
IAM (Identity and Access Management)
Luza 是一家专注于人才、技术与创新的综合性咨询公司。我们致力于提升全球企业与个人，推动变革，从内到外。
我们相信技术与人文关怀能积极影响世界各地的社区。我们的方法简单明了，我们看到一个没有边界的未来，相信平等的机会。我们以传播正能量、良好能量、促进平等和关爱他人为核心价值观。
我们的招聘流程独具特色！我们根据价值、教育背景、才能和个性来选拔人才。我们不会考虑种族、宗教、国籍、年龄、性别、性取向或身份。
是时候打破思维定式了，我们将一起实现！
你将负责：
- 管理端到端的访问生命周期（JML：新成员、调动者、离职者），确保用户访问的适当分配和撤销。
- 根据关键原则如最小权限、职责分离（SoD）和基于角色的访问控制（RBAC）实施并维护身份与访问管理（IAM）控制。
- 进行定期的访问审查和认证，以确保合规并降低安全风险。
- 管理和支持 IAM 平台、工具和访问治理流程。
- 管理特权访问请求和控制，确保安全且符合规范的访问管理实践。
- 使用 Active Directory、LDAP、Azure AD、Azure Storage Explorer、Databricks、ServiceNow、SailPoint、Python 和 Bruno Community 等技术。
- 识别改进、自动化和优化访问管理流程的机会。
- 与技术和业务相关方合作，确保访问策略和控制的有效实施。
你具备：
- 有 IAM 和访问治理原则的经验或深入了解。
- 理解关键概念，如最小权限、职责分离（SoD）、RBAC、JML 流程、特权访问管理以及定期访问认证。
- 有 Active Directory、LDAP、Azure AD、SailPoint、ServiceNow、Databricks 和 Azure Storage Explorer 的实际操作经验。
- 具备脚本编写和自动化技能，特别是 Python。
- 主动、自主，有很强的责任感。
- 有批判性思维，持续寻找改进和优化流程的方法。
- 渴望学习并在动态环境中发展自己的技能。
查看英文原文
Luza is an all-inclusive consulting company focused on talent, tech and innovation. We exist to elevate companies and humans all around the world, making change, from the inside to the outside.
We believe that technology + human kindness positively impacts every community around the world. Our approach is simple, we see a world without borders, and believe in equal opportunities. We are guided by our core principles of spreading positivity, good energy and promote equality and care for others.
Our hiring process is unique! People are selected by their value, education, talent and personality. We dont present ethnicity, religion, national origin, age, gender, sexual orientation or identity.
Its time to burst the bubble, and we will do it together!
What You'll do:
- Manage the end-to-end access lifecycle (JML: Joiner, Mover, Leaver), ensuring appropriate provisioning and deprovisioning of user access.
- Implement and maintain Identity & Access Management (IAM) controls based on key principles such as Least Privilege, Segregation of Duties (SoD), and Role-Based Access Control (RBAC).
- Conduct periodic access reviews and certifications to ensure compliance and mitigate security risks.
- Administer and support IAM platforms, tools, and access governance processes.
- Manage privileged access requests and controls, ensuring secure and compliant access management practices.
- Work with technologies such as Active Directory, LDAP, Azure AD, Azure Storage Explorer, Databricks, ServiceNow, SailPoint, Python, and Bruno Community.
- Identify opportunities to improve, automate, and optimize access management processes.
- Collaborate with technical and business stakeholders to ensure effective implementation of access policies and controls.
Who You Are:
- You have experience or strong knowledge of Identity & Access Management (IAM) and Access Governance principles.
- You understand key concepts such as Least Privilege, Segregation of Duties (SoD), RBAC, JML processes, Privileged Access Management, and periodic access certification.
- You have hands-on experience with Active Directory, LDAP, Azure AD, SailPoint, ServiceNow, Databricks, and Azure Storage Explorer.
- You possess scripting and automation skills, particularly in Python.
- You are proactive, autonomous, and have a strong sense of ownership.
- You have a critical mindset and continuously look for ways to improve and optimize processes.
- You are eager to learn and develop your skills in a dynamic environment.
- You have strong communication and stakeholder management abilities.
What you'll get:
- Wage according to candidate's professional experience;
- Remote Work whenever possible;
- Delivery of work equipment adjusted to the performance of functions;
- Benefits plan;
- And others.
Work together with expert teams on projects of large magnitude and intensity, long term together with our clients, all leaders in their industries.
Are you ready to step into a diverse and inclusive world with us?
Together we will promote uniquess!
Originally posted on Himalayas