Willis Towers Watson IT is currently seeking qualified candidates for the position of Identity and Access Management Operations Lead. In this position, the successful candidate must demonstrate experience of leading technical and operational Identity Specialists maintaining global processes and managing our Azure Active Directory environments. The main role for this position is to lead day to day operations of the Identity and Access Management team ensuring successful delivery of service, stakeholder management and continuous development of the IAM Team.

　　The Role

　　Major Accountabilities:

　　Provide oversight and input to Identity Services processes undertaken within ICS or wider across WTW including access recertification, privileged access, JML, policies/standards and risk process ensuring alignment with the internal Information and Cyber Security framework.

　　Assist the Global Head of IAM in strengthening and maturing Identity Services by continually researching new technologies, processes and practices contributing to the long-term Identity strategy within WTW.

　　Manage key audit requests from both internal and external auditors to provide regulatory evidence to support SOX, SOC2, HIPPA etc.

　　Perform as a subject matter expert within IAM covering all aspects of the Identity Security.

　　Support solution development through problem solving to ensure adherence to Security Controls, Policies and Standards with a focus on automation and control.

　　Derive themes from identified gaps and recommend appropriate remediation measures to mitigate risk associated with gaps.

　　Supervise the IAM teams ensuring effective management of resolver queues, SLAs, team rotas, quality control etc and provide a single point of escalation.

　　Provide Operational Engineering and support against the various IAM platforms. (e.g Azure Active Directory, Common Auth, SCCM, Service Now etc).

　　Identify engineering operational improvements, articulate to platform owner, and deliver improvement programmes.

　　Maintain Information Security focus through risk mitigation and data loss prevention practices.

　　Participate in developing skills, capabilities, and services of IAM team including process improvements and documentation.

　　Responsibilities:

　　Oversight of Infrastructure Health Monitoring.

　　Azure Active Directory Operations.

　　Ticket Resolution.

　　Create/Maintain and Enhance Team Processes and Documentation.

　　Active Directory Windows Server Related Functional Support for GPO, DNS, DHCP, PKI, DFS and Other Domain Relevant Services.

　　Plan, implement, and manage identity and access management solutions.

　　Administer user accounts, permissions, and access controls.

　　Monitor activity logs to identify security incidents.

　　Work with senior leadership to ensure that the program meets the needs of the business and complies with all relevant laws and regulations.

　　Develop and maintain training materials related to identity and access management.

　　Keep up to date with the latest industry developments and trends.

　　Manage user identity lifecycle including onboarding, offboarding, and account updates.

　　Monitor compliance with internal policies and external regulations.

　　Respond to audit findings and implement remediation measures.

　　Handle escalated issues, inquiries, and support tickets.

　　The Requirements

　　5 years of experience in IAM or a related field.

　　At least 2-3 Years of previous Leadership experience preferably leading IAM teams.

　　In-depth knowledge of identity and access management concepts, such as SSO, role-based access control, and identity federation.

　　Experience with identity and access management tools, such as Active Directory, LDAP, and Azure AD.

　　Familiarity with authentication protocols, such as SAML, OAuth, and Kerberos.

　　Familiarity with networking concepts like firewalls, VPNs, and DNS.

　　Ability to troubleshoot technical issues related to identity and access management.

　　Willingness to learn new technologies and keep up with industry trends.

　　Familiarity with best practices and compliance standards.

　　Good project management skills.

　　Knowledge of dynamic and high-level languages such as PowerShell or Python.

　　Experience with SQL databases.

　　Experience in IT security or associated field.

　　BS/BA degree in a relevant Business or Information Technology area.

　　8+ years working with Microsoft Products.

　　5+ years Active Directory Extensive Support experience.

　　5+ years of support experience with Windows Server 2016 and above.

　　Technical familiarity with implementing and supporting Microsoft Azure cloud technologies.

　　Solid understanding of underlying hardware components (storage, networking, etc.).

　　Positive team-first attitude with strong verbal and written communication skills.

　　Must possess sound analytical and problem solving capabilities.

　　Nice to have

　　Professional certification such as Certified Identity and Access Manager (CIAM) or Certified Identity Management Professional (CIMP)

　　Experience with Change Auditor, Enterprise Reporter and RMAD will be a plus

　　WTW is an Equal Opportunity Employer