At FHLB Des Moines, we work each day to develop an inclusive culture that supports and leverages the complexity of a diverse workforce. This enables us to effectively serve the needs of our members and help them succeed.

Accountabilities:

Key Responsibilities:

• Maintain availability of IAM systems including applying upgrades and patches and resolving technical issues on a timely basis.
• Implementation of additional SSO/MFA for Bank applications.
• Optimize and expand the use of Privilege Access Management and Privileged Session Manager (PSM).
• Assess and resolve issues with IAM tools, process, and procedures.
• Provide IAM related requirement input and analysis in support of project initiatives.
• Research technologies and methods that better utilize existing technology.
• Develop proposals and implement new tools and processes to mature the Bank’s security program including automation of IAM Controls.
• Create, develop, implement and maintain security standards, procedures, and guidelines to mitigate risk in the Bank's information security posture; maintain integrity for audit and regulatory reviews.
• Maintain understanding of business processes to improve managing enterprise identity and access.

Qualifications:

• Bachelor of Science or Associate of Applied Science (AAS) degree in Cybersecurity, Computer Science, Management Information Systems, or related field.
• 3-5 years of experience in an information security role with focus on Single Sign-On, Multi-Factor Authentication, and Privileged Access Management.
• 2+ years supporting CyberArk PAM implementation; completion of CyberArk Privileged Access Management (PAM) Administration course a plus.
• Experience implementing and supporting CyberArk Privileged Session Manager.
• Solid understanding of Privileged Access Management (PAM) and related security concepts.
• 2+ years of experience with administration of SecureAuth SSO/MFA solution or market equivalent.
• Demonstrated ability to implement technical solutions and application integrations to enhance enterprise security risk posture.
• In-depth understanding of IAM related protocols such as SAML, OAuth, OIDC, OpenID, and other security interfaces.
• Basic knowledge of OWASP for SAML.
• Experience using XSLT and RegEX.
• Experience with scripting languages and operating system commands and CLI.
• Ability to make effective and informed decisions based upon a sound understanding of the issues and challenges of the organization.
• Effective in a culture of teamwork, collaboration, and accountability with an ability to work both independently and as part of a team.
• Excellent communication skills (verbal and written) as well as interpersonal skills.
• Highly organized; able to plan and prioritize multiple tasks.
• Results-oriented and self-motivated.
• CISSP or similar certification desirable.
• Knowledge of or experience with SOX or FHFA regulations is helpful.

Compensation Range:

This salary range represents the Bank’s good faith and reasonable estimate of possible compensation at the time of hire. Offer to be determined by selected applicant’s education, experience, knowledge, skills & abilities, as well as internal equity and alignment with market data. This role is also eligible to participate in the Bank’s annual incentive plan.

As part of our competitive Total Rewards package, the Bank offers 11 paid holidays, 5 weeks of PTO and a work culture that values work/life balance. Most roles are eligible for our hybrid work schedule of 3 days per week in office, 2 days per week work-from-home. We match 100% of the first 6% you contribute to your 401(k), and provide an additional 4% non-discretionary contribution to your 401(k) at the end of year. More information on our Total Rewards program can be found here.

At FHLB Des Moines, we celebrate diversity, work to create an inclusive culture and champion equity in all of our policies and practices. This enables us to effectively serve the needs of our members and help them succeed. FHLB Des Moines is proud to be an Equal Opportunity Employer. We prohibit discrimination on the basis of race, color, religion, sex (including pregnancy, sexual orientation or gender identity), national origin, age, disability, veteran status, genetic information (including family medical history), status as a parent or any other characteristic protected by federal, state or local law.