**Experienced Full Stack Security Analyst – Identity and Access Management (IAM) – Remote Opportunity at arenaflex**
**Introduction**
At arenaflex, we're on a mission to revolutionize the aviation industry by becoming the safest and most secure airline in the world. As a leading carrier, we're committed to protecting our customers' and employees' data, and we're looking for a talented and experienced Full Stack Security Analyst to join our Online Protection and Computerized Risk (CDR) team. As a key member of our team, you'll play a critical role in helping us achieve our goal of becoming the most digital-safe airline in the industry.
**About arenaflex**
arenaflex is a world-renowned airline that's dedicated to providing exceptional service to our customers while maintaining the highest standards of safety and security. We're a company that values diversity, inclusivity, and innovation, and we're committed to creating a work environment that's supportive, collaborative, and fun. Our team is made up of talented individuals from diverse backgrounds and industries, and we're always looking for people who share our passion for excellence and our commitment to making a positive impact.
**Job Summary**
As a Full Stack Security Analyst – Identity and Access Management (IAM) at arenaflex, you'll be responsible for analyzing, strengthening, and implementing our IAM frameworks and overall security posture. This role requires a strong understanding of IAM best practices, industry standards, and emerging threats, as well as excellent analytical, communication, and collaboration skills. You'll work closely with our development teams, IT security specialists, and other stakeholders to ensure the secure implementation and adoption of IAM solutions across the organization.
**Key Responsibilities**
* Analyze IAM frameworks to identify vulnerabilities, weaknesses, and areas for improvement, and proactively recommend and implement procedures to enhance security, streamline processes, and ensure optimal system functionality.
* Work closely with development teams, IT security specialists, and other stakeholders to integrate secure identity solutions throughout the product lifecycle and foster open communication and collaboration to ensure successful IAM implementation and adoption.
* Participate in compliance efforts by ensuring IAM frameworks comply with relevant regulations and internal policies, and conduct regular reviews and evaluations to identify and address potential compliance gaps.
* Stay up-to-date with emerging IAM best practices, industry standards, and emerging threats, and adapt and implement new technologies and processes to maintain a robust and secure IAM environment.
* Collaborate with other IAM team members to provide guidance on IAM-related matters and contribute to strategy planning and framework support.
**Essential Qualifications**
* A strong understanding of Enterprise or Client Identity and Access Management, Single Sign-On, Multi-Factor Authentication (MFA), and Verification, Restricted Access Management (PAM), Identity
* Service and Organization concepts
* In-depth knowledge of identity standards and technologies: OpenID Connect (OIDC), OAuth, SAML, Federation, API Gateways, SCIM, and platforms such as Ping Identity, Okta, MS Azure, and ForgeRock
* Knowledge of fraud prevention and detection, identity sealing, and identity verification technologies
* Ability to understand how a security framework functions (including its scalability and resilience capabilities) and how changes in conditions, tasks, or the environment will impact these results
* In-depth knowledge of at least one of the following area-specific tools:
+ EIAM-Delinea, Duo, Okta Access Manager, Sailpoint, Saviynt
* Must be legally authorized to work in the US for any employer without sponsorship
* Successful completion of an interview is required to meet work capability
* Strong, reliable attendance is a fundamental requirement of the position
**Preferred Qualifications**
* Graduate degree
* Network security, Risk Management, Software engineering
* CISA, CISM, CISSP
* 3+ years of related experience
* Knowledge of organizational principles and practices (ISO, NIST)
* Knowledge of compliance regulations (SOX, PCI, FAA, GDPR, PII)
**Job Benefits**
* Remote Work Flexibility: As a remote full-time employee, you'll enjoy the flexibility of working from your preferred location, eliminating the need for a daily commute and allowing you to create a comfortable workspace.
* Balance between work and personal life: Remote work often provides better balance between work and personal activities as it allows you to plan your work around your own life and responsibilities.
* Competitive Compensation: Many organizations offer competitive pay rates for senior-level positions, which can vary greatly depending on the company and company size.
* Health Insurance Benefits: You may be eligible for health insurance, dental coverage, and other medical benefits as part of your compensation package.
* Retirement Plans: Many companies offer retirement savings plans, such as a 401(k), with employer matching or contributions.
* Paid Time Off (PTO): This typically includes vacation days, holidays, and sick leave, which can vary from one company to another.
* Professional Development: Some organizations invest in their employees' professional development by offering opportunities for training, workshops, or tuition reimbursement.
* Investment opportunities or Equity: In specific industries or startups, you may be offered investment opportunities or equity in the company.
* Performance-Based Rewards: Depending on your job and company performance, you may be eligible for performance-based rewards or incentives.
* Remote Work Equipment: Some employers provide the necessary equipment (e.g., computer, internet connection, ergonomic chair) to ensure you have a functional workspace setup.
* Flexible Hours: Depending on the company's policies, you may have the flexibility to set your own working hours reasonably.
* Employee Assistance Programs (EAPs): EAPs can provide private counseling and support services to employees and their families for personal and professional issues.
* Employee Discounts: Some companies offer discounts on their products or services to their employees.
* Commuter Benefits: Although you're working remotely, some companies still offer commuter benefits like public transportation or parking reimbursements.
* Health Initiatives: Health initiatives can include gym memberships, wellness classes, or health challenges to promote employee well-being.
* Remote Team Building: Organizations may organize virtual team-building activities or provide tools for remote employees to stay connected and engaged with their colleagues.
**How to Apply**
If you're a motivated and experienced Full Stack Security Analyst looking for a challenging and rewarding role, we encourage you to apply for this exciting opportunity at arenaflex. Please submit your application through our website, and we'll be in touch to discuss your qualifications further.
Apply Now
At arenaflex, we're on a mission to revolutionize the aviation industry by becoming the safest and most secure airline in the world. As a leading carrier, we're committed to protecting our customers' and employees' data, and we're looking for a talented and experienced Full Stack Security Analyst to join our Online Protection and Computerized Risk (CDR) team. As a key member of our team, you'll play a critical role in helping us achieve our goal of becoming the most digital-safe airline in the industry.
**About arenaflex**
arenaflex is a world-renowned airline that's dedicated to providing exceptional service to our customers while maintaining the highest standards of safety and security. We're a company that values diversity, inclusivity, and innovation, and we're committed to creating a work environment that's supportive, collaborative, and fun. Our team is made up of talented individuals from diverse backgrounds and industries, and we're always looking for people who share our passion for excellence and our commitment to making a positive impact.
**Job Summary**
As a Full Stack Security Analyst – Identity and Access Management (IAM) at arenaflex, you'll be responsible for analyzing, strengthening, and implementing our IAM frameworks and overall security posture. This role requires a strong understanding of IAM best practices, industry standards, and emerging threats, as well as excellent analytical, communication, and collaboration skills. You'll work closely with our development teams, IT security specialists, and other stakeholders to ensure the secure implementation and adoption of IAM solutions across the organization.
**Key Responsibilities**
* Analyze IAM frameworks to identify vulnerabilities, weaknesses, and areas for improvement, and proactively recommend and implement procedures to enhance security, streamline processes, and ensure optimal system functionality.
* Work closely with development teams, IT security specialists, and other stakeholders to integrate secure identity solutions throughout the product lifecycle and foster open communication and collaboration to ensure successful IAM implementation and adoption.
* Participate in compliance efforts by ensuring IAM frameworks comply with relevant regulations and internal policies, and conduct regular reviews and evaluations to identify and address potential compliance gaps.
* Stay up-to-date with emerging IAM best practices, industry standards, and emerging threats, and adapt and implement new technologies and processes to maintain a robust and secure IAM environment.
* Collaborate with other IAM team members to provide guidance on IAM-related matters and contribute to strategy planning and framework support.
**Essential Qualifications**
* A strong understanding of Enterprise or Client Identity and Access Management, Single Sign-On, Multi-Factor Authentication (MFA), and Verification, Restricted Access Management (PAM), Identity
* Service and Organization concepts
* In-depth knowledge of identity standards and technologies: OpenID Connect (OIDC), OAuth, SAML, Federation, API Gateways, SCIM, and platforms such as Ping Identity, Okta, MS Azure, and ForgeRock
* Knowledge of fraud prevention and detection, identity sealing, and identity verification technologies
* Ability to understand how a security framework functions (including its scalability and resilience capabilities) and how changes in conditions, tasks, or the environment will impact these results
* In-depth knowledge of at least one of the following area-specific tools:
+ EIAM-Delinea, Duo, Okta Access Manager, Sailpoint, Saviynt
* Must be legally authorized to work in the US for any employer without sponsorship
* Successful completion of an interview is required to meet work capability
* Strong, reliable attendance is a fundamental requirement of the position
**Preferred Qualifications**
* Graduate degree
* Network security, Risk Management, Software engineering
* CISA, CISM, CISSP
* 3+ years of related experience
* Knowledge of organizational principles and practices (ISO, NIST)
* Knowledge of compliance regulations (SOX, PCI, FAA, GDPR, PII)
**Job Benefits**
* Remote Work Flexibility: As a remote full-time employee, you'll enjoy the flexibility of working from your preferred location, eliminating the need for a daily commute and allowing you to create a comfortable workspace.
* Balance between work and personal life: Remote work often provides better balance between work and personal activities as it allows you to plan your work around your own life and responsibilities.
* Competitive Compensation: Many organizations offer competitive pay rates for senior-level positions, which can vary greatly depending on the company and company size.
* Health Insurance Benefits: You may be eligible for health insurance, dental coverage, and other medical benefits as part of your compensation package.
* Retirement Plans: Many companies offer retirement savings plans, such as a 401(k), with employer matching or contributions.
* Paid Time Off (PTO): This typically includes vacation days, holidays, and sick leave, which can vary from one company to another.
* Professional Development: Some organizations invest in their employees' professional development by offering opportunities for training, workshops, or tuition reimbursement.
* Investment opportunities or Equity: In specific industries or startups, you may be offered investment opportunities or equity in the company.
* Performance-Based Rewards: Depending on your job and company performance, you may be eligible for performance-based rewards or incentives.
* Remote Work Equipment: Some employers provide the necessary equipment (e.g., computer, internet connection, ergonomic chair) to ensure you have a functional workspace setup.
* Flexible Hours: Depending on the company's policies, you may have the flexibility to set your own working hours reasonably.
* Employee Assistance Programs (EAPs): EAPs can provide private counseling and support services to employees and their families for personal and professional issues.
* Employee Discounts: Some companies offer discounts on their products or services to their employees.
* Commuter Benefits: Although you're working remotely, some companies still offer commuter benefits like public transportation or parking reimbursements.
* Health Initiatives: Health initiatives can include gym memberships, wellness classes, or health challenges to promote employee well-being.
* Remote Team Building: Organizations may organize virtual team-building activities or provide tools for remote employees to stay connected and engaged with their colleagues.
**How to Apply**
If you're a motivated and experienced Full Stack Security Analyst looking for a challenging and rewarding role, we encourage you to apply for this exciting opportunity at arenaflex. Please submit your application through our website, and we'll be in touch to discuss your qualifications further.
Apply Now