Engineer Identity Systems

Job description

Who We Are At Academy Sports + Outdoors our vision is to be the best sports + outdoors retailer in the country — but what truly sets us apart is our people. We’re a passionate, purpose-driven team that’s as committed to each other as we are to our customers. We’ve spent over 80 years building a culture that puts people first. We believe in creating opportunities for growth, fostering meaningful connections, and supporting every Team Member’s journey. What fuels us? Our belief in the power of fun. Here, you won’t just help customers gear up for their next adventure — you’ll launch one of your own. Whether you're starting out or leveling up, Academy is a place where fun can’t lose! Education: Bachelor’s degree in Information Technology or relevant field of required MCSE, MCIPT, Azure and/ or Google Certifications, VMWare VCP6-DCV Work Experiences: 3+ years of experience in-depth IAM administration which includes research, design, installation, testing, configuration, implementation, daily use, troubleshooting, and maintenance of IAM tools, which include, but are not limited to Sailpoint. Foundational knowledge of Windows, Linux/Unix, and iSeries (AS400) Operating systems Working knowledge of database, networking, virtualization, and server hardware concepts Experienced with CyberArk or similar Privileged Access Management platform Working knowledge of rogue accounts and role management processes Experience with application support and system trouble shooting preferred SAML and SSO integration expert, experience with open source and commercial SAML implementations (ADFS, Azure AD, Okta, SAML, Ping, OID, .etc.) Should be an expert in the areas of Identity and Access Management as well as Governance Experience with automating access control processes such as User Provisioning, Onboarding, Role-Based Access Control (RBAC), authorization models, Single Sign-On (SSO), LDAP, Active Directory Working experience on different types of Single-Sign-On (SSO), password reset, self-service, federated identity, multi-factor authentication (MFA), and IAM products and services, including Identity as a Service (IDaaS) Experience migrating disparate legacy IAM technologies and processes to modern architectures is preferred Experience with offshore teams preferred Skills: Strong interpersonal, written, and verbal communication skills to interface effectively with individuals at various levels Thorough working knowledge of Windows Server 2003/2008/2012/ 2016, Unix Thorough working knowledge of Active Directory Subject matter expert level experience in one or more of the following: Web Access Management (WAM), Single Sign On (SSO) Federation (SAML and OIDC), Multi-Factor Authentication (MFA), LDAP Directories, Active Directory Experience in CyberArk setup and administration Experience in managing deployments of an IAM platform (i.e.: Oracle IdM, SailPoint IdentityIQ or Savyint) Experience with role mining, role-based access control and access certification with Oracle IdM, SailPoint IdentityIQ or Savyint Experience with scripting skills (Java, BeanShell/JavaScript, JSP/Servlets, SQLand/or PowerShell preferred) Profound understanding of web-based technologies including multi-tier applications and security standards (HTTP, TLS, REST/SOAP, Cookie Handling, SAML, OAUTH, OIDC, WS-Trust,…) Thorough working knowledge of and ability to, configure and resolved issues related to Microsoft Office 365. Ability to remain organized, pay attention to detail, and meet critical deadlines Analytical with strong problem-solving abilities and creative resolution skills Ability to work well under pressure while consistently meeting time sensitive deadlines Responsibilities: Responsible for administration, configuration, and maintenance of Enterprise IAM tools Conduct periodic recertification activities for identity and access management processes Proactively monitor the customer experience, application performance and hosting infrastructure Actively participate in customizing, and integrating IAM solutions such as Azure Active Directory, SailPoint, CyberArk and PingFederate Partner with Department Leaders to support development of roles, applications, workflows and other configuration components Participate in root cause analysis and long term solutions to improve availability and performance of the application portfolio Participate in projects and provides cross-functional IT application support Ensure developed solutions are aligned with Enterprise Operations standards and procedures Maintain and administer test and pre-production environments Participate in high severity incident recovery efforts Manage IAM rule engine, leveraging automation and attributes for account lifecycle and role automation Identify and mitigate risk while adhering to corporate and department change control procedures Develop a thorough understanding of Academy’s policies, procedures and safety rules Duties may change; team members may be required to perform other duties as assigned Physical Requirements & Attendance Acceptable level of hearing and vision to perform job duties Adhere to company work hours, policies, procedures, and rules governing professional staff behavior Regular attendance required Equal Employment Opportunity Academy is an Equal Opportunity Employer and does not discriminate with regard to employment opportunities or practices on the basis of race, religion, national origin, sex, age, disability, gender identity, sexual orientation, or any other category protected by law. ​