Identity and access management engineer - usds

Identity and Access Management Engineer - USDS


Identity and Access Management Engineer - USDS

Responsibilities
Team Intro
As a direct report to the Principal Lead, US Data, Identity and Access Management (DIAM) within TikTok USDS, you will be working to support the TikTok USDSs Identity workstream. The Data, Identity and Access management (DIAM) team within TikTok's Global Security Organization is responsible for engineering, deploying, testing and monitoring our global infrastructure footprint to validate data inventory, access and protection across our vast infrastructure of data centers, SaaS and IaaS. Identity and Access management team will be responsible for how users within an organization are given an identity - and how it is protected.
In your capacity as a key contributor you are part of a team that manages the security of TikTok data through identity management processes and controls across the entire data lifecycle, from creation to destruction. This will include developing the process for granting and removing access based on the principles of least privilege and need to how to manage access to data. You and the team will oversee policies and procedures for managing access based on enterprise policy and other international regulatory requirements (e.g., data residency), and your team will ingest organizational policies to create enforcement mechanisms.
The candidate must be skilled in conducting technical analysis of access policies, rules, and permissions as well as evaluating appropriateness of effective access. The candidate will develop, select, and motivate highly effective employees to execute TikTok's business model.
Responsibilities
- Define strategy for the execution of Identity and Access Management program
- Onboard application to the IAM tool and support access management and assurance needs
- Build and review technical and functional requirements for in-house or external technologies
- Design and implement access management and assurance programs (people, process, and technology) to mitigate security threats and risks related to access that may impact business data through a holistic global program-oriented approach
- Develop and maintain identity residency and identity access requirements and controls as necessitated by business needs and regulations
- Design and implement the identity review process, ensuring that identities and access is reviewed regularly both for appropriateness of access as well as privilege levels for all users
- Guide the team in developing use cases and integrating access management technologies with related cybersecurity technologies (e.g., security incident and event management, data classification, vulnerability management)
- Develop and maintain policies and procedures that support identity management (e.g., access assurance, access monitoring and reporting, authentication requirements)
- Implement and enforce mechanism to proactively monitor, respond and report on inappropriate data access events
Qualifications
Minimum Qualifications:
- Bachelors’ Degree or industry equivalent work experience in identity and access management, security architecture, and/or engineering in a converged security program
- 5+ years applicable experience
- Demonstrate ability to quickly assimilate to new knowledge and remain current on new developments in access management tools and capabilities and industry knowledge
- In-depth experience in designing and deploying access management technologies and controls in enterprise-class organizations, including the following: Access management on Windows and Linux operating systems, Access monitoring, remediation, and escalation, role and policy-based access controls to enforce the principle of least privilege, and configuration of access permissions and roles, provisioning, modifying, and de-provisioning account access
- Strong understanding of Access management tools, processes, and procedures,User access administration, role and policy-based access controls, including identity management, provisioning and de-provisioning access, Azure, Azure AD, Privileged access management (PAM) tools, CyberArk, and Identity and Access Management (IAM) tools
Preferred Qualifications:
- CISSP, SSCP, CAP, CCSP, CISM or applicable experience in the Information Security field
- Familiarity with securing identity across SaaS and IaaS cloud platforms (e.g., AWS, Google Cloud Platform)
- Be able to deliver both detailed technical reports to enable access remediation and business friendly reports to demonstrate progress and track risk
- Be able to handle ambiguity and collaborate with a global team
- Be comfortable communicating with business executives and technical teams
- SailPoint experience
About USDS
TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. U.S. Data Security (“USDS”) is a subsidiary of TikTok in the U.S. This new, security-first division was created to bring heightened focus and governance to our data protection policies and content assurance protocols to keep U.S. users safe. Our focus is on providing oversight and protection of the TikTok platform and U.S. user data, so millions of Americans can continue turning to TikTok to learn something new, earn a living, express themselves creatively, or be entertained. The teams within USDS that deliver on this commitment daily span across Trust & Safety, Security & Privacy, Engineering, User & Product Ops, Corporate Functions and more.
Data Security Statement
This role requires the ability to work with and support systems designed to protect sensitive data and information. As such, this role will be subject to strict national security-related screening.

Why Join Us
Inspiring creativity is at the core of TikTok's mission. Our innovative product is built to help people authentically express themselves, discover and connect – and our global, diverse teams make that possible. Together, we create value for our communities, inspire creativity and bring joy - a mission we work towards every day.
We strive to do great things with great people. We lead with curiosity, humility, and a desire to make impact in a rapidly growing tech company. Every challenge is an opportunity to learn and innovate as one team. We're resilient and embrace challenges as they come. By constantly iterating and fostering an "Always Day 1" mindset, we achieve meaningful breakthroughs for ourselves, our company, and our users. When we create and grow together, the possibilities are limitless. Join us.
Diversity & Inclusion
TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Acknowledgment of Country
In the spirit of reconciliation, TikTok acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today.


Seniority level

* Seniority level

Mid-Senior level


Employment type

* Employment type

Full-time


Job function

* Job function

Engineering and Information Technology
* Industries

Software Development

Referrals increase your chances of interviewing at TikTok by 2x

Get notified about new Management Engineer jobs in Sydney, New South Wales, Australia .

Northmead, New South Wales, Australia 2 weeks ago

Sydney, New South Wales, Australia 2 weeks ago

Sydney, New South Wales, Australia 4 weeks ago

Sydney, New South Wales, Australia 4 weeks ago

Sydney, New South Wales, Australia 3 weeks ago

Greater Sydney Area A$140,000.00-A$140,000.00 3 weeks ago


Renewable Energy Project Engineer - Octopus Australia

Campbelltown, New South Wales, Australia 2 weeks ago

Campbelltown, New South Wales, Australia 2 weeks ago

North Ryde, New South Wales, Australia A$100,000.00-A$115,000.00 2 weeks ago

Greater Sydney Area A$120,000.00-A$130,000.00 3 weeks ago

Bankstown, New South Wales, Australia 1 month ago

Parramatta, New South Wales, Australia 1 week ago

Blacktown, New South Wales, Australia 1 month ago

Sydney, New South Wales, Australia 1 month ago

Sydney, New South Wales, Australia 3 weeks ago

Mount Pritchard, New South Wales, Australia 3 weeks ago

Sydney, New South Wales, Australia A$85,000.00-A$115,000.00 3 weeks ago

Sydney, New South Wales, Australia 2 weeks ago

Villawood, New South Wales, Australia 1 day ago

Homebush, New South Wales, Australia A$160,000.00-A$180,000.00 3 weeks ago

Sydney, New South Wales, Australia 6 days ago

Sydney, New South Wales, Australia A$90,000.00-A$170,000.00 4 days ago

Sydney, New South Wales, Australia 9 hours ago

Chatswood, New South Wales, Australia 6 hours ago


Lead Project Engineer, Energy Storage projects, Australia

Sydney, New South Wales, Australia 1 day ago

Sydney, New South Wales, Australia 1 day ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

#J-18808-Ljbffr