IAM BA

该职位来源于猎聘 5年 经验 RIAM BA Key Responsibilities:

• Stakeholder Engagement &

  Requirements Analysis: o Engage with global business units and IT teams to gather identity lifecycle requirements and identify pain points in current access management processes. o Conduct deep-dive interviews to analyze current account usage, permission models, and security risks. o Translate complex business needs into detailed Business Requirement Documents (BRD) and functional specifications.

• Solution Design &
  • ForgeRock Integration: o Assist technical teams in designing robust identity management workflows, specifically leveraging ForgeRock capabilities (e.g., Access Management, Identity Management). o Design and document role-based access control (RBAC) models and access matrices to ensure the "least privilege" principle is applied. o Provide expert recommendations on SSO architectures, authentication flows, and integration strategies within multi-cloud or hybrid-cloud environments.

• Project Execution &
  • Change Management: o Support the full project lifecycle, from project kickoff and planning to UAT (User Acceptance Testing) execution and issue tracking. o Develop cleanup and role governance strategies, including rules, processes, and timelines for migration and legacy system integration. o Create training materials and support stakeholder communication to ensure successful adoption of new IAM standards.

• AI Security &
  • AI Agent/Skill Governance: o Design, implement, and maintain security & permission governance frameworks for enterprise AI Solutions, AI Agents, and AI Tool/Skill integrations. o Define fine-grained authorization policies, identity contexts, and access boundaries for AI Agents to ensure secure execution and prevent unauthorized data/action exposure. o Identify and mitigate emerging security risks specific to AI workloads (e.g., identity impersonation, privilege escalation via AI Agent extensions, unverified skill invocations).

• Deliverables: o Produce core project documentation including BRDs, process diagrams, role/permission matrices, and technical recommendation reports. o AI Agent &
  • Skill Access Governance Policy &
  • Functional Architecture Specification. o Technical recommendation reports for SSO/MFA integrations, legacy migrations, and IAM process automation.

  Required

  Qualifications:

• IAM &
  • Identity Governance Expertise: Deep domain knowledge of enterprise Identity &
  • Access Management (IAM), Identity Governance and Administration (IGA), and identity lifecycle management.

• IAM Platform Proficiency: Hands-on experience or strong technical proficiency with ForgeRock (Access Management/Identity Management); familiarity with Okta, SailPoint, or Ping Identity is a plus.
• Authentication &
  • Federation Knowledge: Strong understanding of SSO architectures and federation protocols (SAML 2.0, OpenID Connect, OAuth 2.0, SCIM).

• AI Security &
  • Governance: Proven experience or direct involvement in AI Security Management, including access control and permission scoping for AI Agents, AI Skills/Extensions, and LLM-integrated platforms.

• Cloud &
  • Hybrid Architecture: Solid awareness of identity management patterns in public cloud environments (AWS, Ali) and SaaS ecosystems.

• Data &
  • Risk Analytics: Proficiency in analyzing large volumes of account and permission datasets to identify privilege anomalies, orphaned accounts, and security gaps.

• Communication &
  • Documentation: Outstanding written and verbal documentation capabilities, with the ability to bridge the gap between technical engineering teams and business stakeholders.

• Language Proficiency: Fluent in English (Speaking, Reading, and Writing)