Access & Identity Management, Associate

About this role

The Access & Identity Management (AIM) team is a critical component of Global Information Security and is responsible for controlling and maintaining secure access across the technology estate. The team ensures that all users have appropriate access to technology systems and resources within the Firm.

The AIM administrator is responsible for user administration functions across all technology platforms and applications, including:

• Provisioning all aspects of the employee lifecycle including hiring, transfers, and terminations.
• Managing user accounts, permissions and entitlements in Microsoft Active Directory, Exchange, UNIX, Cloud (Microsoft Azure, AWS, GCP), 600+ business applications and BlackRock's state-of-the-art trading and asset management platform, Aladdin.
• Project work relating to system migrations and onboarding new systems to AIM management.

• Knowledge of enterprise-level Identity Management systems (e.g. SailPoint IdentityIQ, Brainwave, Okta).
• Experience performing user administration in a Windows Active Directory environment, and Microsoft Azure Entra ID.
• Experience in granting NTFS permissions for folders/files in a Windows Distributed File System Environment.
• Experience performing user administration tasks for various in-house and third-party applications.
• Experience in Exchange administration Exchange Admin Center (both ECP, EAC): creating and maintaining mailboxes, distribution lists, contacts and public folders.
• Experience administering 2FA remote access solutions (e.g RSA, Duo, etc)
• Knowledge of Information Security principles and ability to adhere to SSAE16 and SOX audit requirements pertaining to Identity & Access Management (Role-Based Access Control, access governance, detail-oriented, obtaining and documenting approvals, etc).
• Experience with ticketing/workflow management tools (e.g. ServiceNow, JIRA).
• Basic familiarity with UNIX command-line execution.
• Familiarity with PowerShell commands in AD, Office 365 and on-prem Exchange, individually and in bulk and the potential of writing further commands when needed.
• Familiarity with running and writing SQL select queries.
• Strong written and verbal communication skills.
• Commitment to excellence and high standards; strong organizational skills; able to manage time, priorities and workload; provide documentation and accountability.
• Work independently and proactively.