Cloud Identity Security Analyst

SCS Technology Security Cloud Identity Security Analyst Job Description Position Overview: Southern Company, a major U.
S.
energy firm, is seeking a Cloud Identity Security Analyst for the administration of security controls, application integrations, and service management within the Identity Security team.
This is a hybrid role that allows for largely remote work, but occasional in-office presence is expected.
This hands-on role will require the ability to work with business partners, handle escalations appropriately, identify and solve operational inefficiencies, and learn new technologies.
The role will work with the Identity Security manager to define and implement policies and procedures of the team and coordinate change management for various identity infrastructure products.
The ideal candidate will have a background in cyber security and service management with an understanding of systems automation and a mentality of constant improvement.
They must be a solid communicator and able to motivate others to provide a consistent and positive business partner experience.
Southern Company is headquartered in Atlanta and we bring energy to homes and businesses across the country.
We’ve made our name as a leading producer of clean, safe, reliable and affordable energy, and we approach each day as a vital step in building the future of energy.
We’re always looking ahead, and our innovations in the industry – from new nuclear to deployment of electric transportation and renewables – to help brighten the lives and businesses of millions of customers nationwide.
Our team is critical to building the future of energy with secure, resilient, and sustainable cyber solutions.
Job Responsibilities: Integrate applications with Entra ID and accelerate business capability while keeping security as the first priority.
Leverage associated cloud security toolsets and work collaboratively with our detection and monitoring teams to reduce risk.
Prioritize and expedite the requests in the Identity Security team’s service management queue.
Advise the direction of identity architecture so that future identity toolsets reduce risk and workload simultaneously.
Design and track metrics to keep a clear view of team workload, customer satisfaction, and other service related measurements.
Assist in the development and maturation of our identity provisioning operations – identify areas of opportunity, design improvements, and execute those solutions with others.
Serve as a trusted advisor to our business partner stakeholders, by taking inputs and constantly evolving our identity processes to meet dynamic business needs.
Leverage a marketing-based approach to security services to improve technology, security awareness, and compliance.
Contribute to standards and polices for the identity security program.
Lead and deliver projects in scope, on time, and within budget.
Mentor others to strengthen security principles and best practices inside and outside the security organization.
Qualifications: Required: 2 years of experience in the areas of service management or identity or technology security.
Experience with identity and security concepts, such as identity providers, single-sign-on, federation, least-privilege, authentication vs authorization, MFA, and certificates.
Experience automating technology systems via modern languages and APIs such as PowerShell, Python, REST.
Familiarity with ITIL processes – change management and incident management.
Ability to lead a project from concept through implementation and anticipate potential problems.
Experience prioritizing and executing with minimal direction or oversight.
Must pass NERC CIP & Insider Threat Protection background checks.
Desired: Experience with modern identity concepts such as dynamic risk, progressive authentication, self-service, biometrics, and passwordless.
Experience with identity related protocols and standards such as SAML, OAuth/OIDC, WS-Fed, SCIM, FIDO, RADIUS, LDAP, Kerberos.
Ability to promote security as a business enablement function using influence, metrics, documentation, strong verbal communication, and presentation skills.
Experience with cloud/on-prem hybrid identity environments.
Industry certifications such as: Microsoft SC-300, GIAC, OSCP, CRISC, CCNP, etc.
Experience with information security frameworks such as: COBIT, NIST, OWASP, etc.
Familiarity with nation state, sophisticated criminal, and supply chain threats.
Up-to-date knowledge of current hacking techniques, vulnerability disclosures, and data breach incidents.
Working knowledge of cloud and traditional security network architectures.
Desire to apply understanding of IT cyber threats to map global cyber security risks to the energy sector and to industrial control systems.
Southern Company (NYSE: SO) is a leading energy provider serving 9 million residential and commercial customers across the Southeast and beyond through its family of companies.
Providing clean, safe, reliable and affordable energy with excellent service is our mission.
The company has electric operating companies in three states, natural gas distribution companies in four states, a competitive generation company, a leading distributed energy infrastructure company with national capabilities, a fiber optics network, and telecommunications services.
Through an industry-leading commitment to innovation, resilience, and sustainability, we are taking action to meet our customers’ and communities’ needs while advancing our commitment to net zero emissions by 2050.
Our uncompromising values ensure we put the needs of those we serve at the center of everything we do and are the key to our sustained success.
We are transforming energy into economic, environmental and social progress for tomorrow.
Our corporate culture and hiring practices have earned the company national awards and recognition from numerous organizations, including Forbes, Military Times, DiversityInc, Black Enterprise, J.
D.
Power, Fortune, Human Rights Campaign and more.
To learn more, visit www.
southerncompany.
com.
Southern Company is an equal opportunity employer where an applicant's qualifications are considered without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, sexual orientation, gender identity or expression, or any other basis prohibited by law.
Job Identification: 4534 Job Category: Cybersecurity Job Schedule: Full time Company: Southern Company Services