Unlock Your Potential as a Senior Infosec Identity Engineer at World Kinect
World Kinect, a global leader in the energy industry, is seeking an experienced Senior Infosec Identity Engineer to join their team on a remote basis. As a key member of the InfoSec team, you will play a crucial role in designing, implementing, and maintaining identity and access management solutions that drive the company's global success.
About World Kinect
With a diverse team of approximately 5000 professionals, World Kinect thrives in an entrepreneurial and culturally-diverse environment that values innovative thinking, collaboration, and efficient execution. The company's high-performance culture is the driving force behind its sustained growth, and it offers a unique opportunity for individuals to grow and develop their careers.
Key Responsibilities
- Lead the delivery of Business-As-Usual (BAU) Identity and Access Management operations, ensuring seamless identity and access management across the organization.
- Design, install, maintain, upgrade, and troubleshoot applications and tools that directly impact InfoSec Identity service deliverables.
- Analyze, design, implement, and support hybrid on-premises and cloud Active Directory environments, ensuring secure and efficient identity management.
- Collaborate with business and technical partners to integrate systems and applications with centralized authentication using Active Directory.
- Implement security baselines and recommended best practices for Active Directory, ensuring the highest level of security and compliance.
- Provide subject matter expertise on Azure AD and Entra ID, supporting and maintaining Entra ID Enterprise Applications and other integrated solutions.
- Collaborate with global cross-functional teams to ensure stability and security, supporting synchronization and federation between on-premises AD, Azure AD, and Entra ID.
- Troubleshoot and optimize synchronization processes to maintain consistency across environments.
- Implement time-based and approval-based role activation to mitigate risks associated with privileged accounts, administering PAM platforms, including Centrify, CyberArk, and Quest Active Roles Server.
- Design and implement controls for managing privileged access on endpoints (Windows, macOS, Linux), collaborating with system administrators and security teams to enforce least privilege principles.
- Implement and manage role-based access control (RBAC) for various systems and applications, defining and enforcing group-based access policies to elevate privileges when necessary.
- Contribute to the design, configuration, deployments, and operations of Identity Governance and Administration (IGA) solutions, working on access management, identity governance, and identity management solutions.
- Leverage AWS Identity and Access Management (IAM) and Azure Active Directory for secure cloud identity management, integrating IAM policies and roles with AWS services and Azure resources.
- Develop and maintain integrations between Entra ID and Linux-based systems, ensuring seamless authentication and authorization for Linux users.
- Develop and maintain scripts or workflows to automate user and device provisioning and deprovisioning, streamlining the onboarding and offboarding processes to enhance efficiency and security.
- Collaborate with application owners to certify and manage access to critical applications, ensuring secure handling of application secrets throughout their lifecycle.
- Participate in on-call rotation, providing 24x7 escalation capabilities, and participate in incident response efforts as Incident Commander.
Essential Qualifications
- 5-8 years of experience as a Senior Active Directory/Entra ID Engineer or similar role, with advanced knowledge of Active Directory, Azure Active Directory/Entra ID, and Lightweight Directory Access Protocol (LDAP).
- Familiarity with Privileged Identity Management (PIM), Privileged Access Management (PAM), and Identity Governance and Administration (IGA) concepts.
- Experience with endpoint privilege management, AWS IAM, Azure AD, and Linux integration.
- 1+ year of experience with cloud infrastructure, networking, and security, preferably with AWS and Azure, with platform certifications a plus.
- Experience with orchestration and automation solutions utilizing various APIs, scripting languages, or commercial orchestration tools.
- Experience with creating and reviewing workflow processes and technical documentation.
- Comfortable with mentoring other team members, providing guidance and direction during incident response and engineering efforts.
- Familiarity with regulations and frameworks such as NIST, PCI, SOC, HIPAA, SSAE 16/SOC 1, SOC 2, ISO 17799/27002.
Preferred Qualifications
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent work experience.
- Relevant Microsoft certifications, such as Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Azure Security Engineer Associate, or other industry certifications (e.g., CISSP, CISM, CompTIA Security+).
- Certifications, including but not limited to: CISSP, CISM, ISSAP, CEH, AWS Certified Solution Architect.
What We Offer
As a Senior Infosec Identity Engineer at World Kinect, you will have the opportunity to work on complex and challenging projects, collaborating with a global team of professionals. The company offers a competitive salary, benefits, and perks that support work-life balance. You will also have access to career growth opportunities, training, and development programs that will help you advance your career.
Work Environment and Company Culture
World Kinect values diversity, equity, and inclusion, and is committed to creating a work environment that is inclusive and respectful. The company offers a remote work arrangement, providing the flexibility to work from anywhere. You will be part of a team that is passionate about innovation, collaboration, and customer satisfaction.
Career Growth Opportunities
As a Senior Infosec Identity Engineer at World Kinect, you will have the opportunity to grow and develop your career in a dynamic and fast-paced environment. You will be working on cutting-edge technologies and solutions, and will have access to training and development programs that will help you stay up-to-date with the latest industry trends and best practices.
Join Our Team!
If you are a motivated and experienced Senior Infosec Identity Engineer looking for a new challenge, we encourage you to apply for this exciting opportunity. Even if you feel you're not a perfect match, we'd still love to hear from you. We are looking for great people to join our friendly team.
By submitting an employment application, you consent to World Fuel Services processing your information for this role and potentially for future employment opportunities, in accordance with applicable laws. To learn more about how we protect and/or process personal information, please visit the WFS Privacy Center at: https://www.wfscorp.com/en/privacy-center
We look forward to receiving your application!
Apply Now