IT Identity Engineer III

Position Overview

• Location Type: Remote
• Employment Type: Full-time
• Salary: Not specified

As a Senior InfoSec Identity Engineer, you will play a critical role in ensuring the security, stability, and scalability of World Kinect’s organization’s identity and access management systems. Your expertise will be essential in integrating and maintaining the following technologies. You’ll be part of a global team driving sustained growth in a culturally-diverse and entrepreneurial environment.

Requirements

• Experience with Microsoft Entra ID integrations with AWS Identity and Access Management (IAM) solutions.
• Experience integrating IAM policies and roles with AWS services and Azure resources.
• Experience managing identities, roles, and permissions across multiple large and micro-sized AWS accounts.
• Experience with Active Directory (AD) and Azure Active Directory/Entra ID.
• Experience analyzing, designing, implementing, and supporting hybrid on-premises and cloud Active Directory environments.
• Experience integrating systems and applications with centralized authentication using AD.
• Experience implementing security baselines and recommended best practices for AD.
• Experience with Azure AD Federation Services (ADFS) environments and Entra ID Enterprise Applications.
• Experience with Privileged Management (PIM, PAM, and Endpoint Privilege Management) platforms (e.g., Centrify, CyberArk, Quest Active Roles Server).
• Strong understanding of least privilege principles and role-based access control (RBAC).
• Experience with synchronization and federation between on-premises AD, Azure AD, and Entra ID.
• Experience troubleshooting and optimizing synchronization processes.

Responsibilities

• Leverage Microsoft Entra ID integrations with AWS Identity and Access Management (IAM) solutions and for secure cloud identity, role and permissions management.
• Integrate IAM policies and roles with AWS services and Azure resources.
• Manage identities, roles, and permissions across multiple large and micro-sized AWS accounts.
• Develop Identity monitoring processes and ensure the SOC, Incident Response and Identity Operations teams have visibility and response capabilities within both infrastructure platforms.
• Analyze, design, implement, and support the hybrid on-premises and cloud Active Directory environment.
• Collaborate with business and technical partners to integrate systems and applications with centralized authentication using AD.
• Implement security baselines and recommended best practices for AD.
• Develop and maintain integrations between Entra ID and Linux-based systems ensuring seamless authentication and authorization for Linux users.
• Provide subject matter expertise on Azure AD and Entra ID.
• Support and maintain Azure AD Federation Services (ADFS) environments and Entra ID Enterprise Applications.
• Collaborate closely with global cross-functional teams to ensure stability and security.
• Support synchronization and federation between on-premises AD, Azure AD, and Entra ID.
• Troubleshoot and optimize synchronization processes to maintain consistency across environments.
• Implement time-based and approval-based role activation to mitigate risks associated with privileged accounts.
• Administer PAM platforms, including Centrify, CyberArk, and Quest Active Roles Server.
• Design and implement controls for managing privileged access on endpoints (Windows, macOS, Linux).
• Collaborate with system administrators and security teams to enforce least privilege principles.
• Define and enforce group-based access policies to elevate privileges when necessary.

Application Instructions

• Not specified.

Company Information

• Company: World Kinect
• Culture: Entrepreneurial, culturally-diverse, innovative, collaborative, efficient
• Values: Stronger together, promoting an environment where individuals can thrive
• Team Size: Approximately 5000 professionals