IAM Systems Admin - Lakewood, United States - FirstBank

    FirstBank
    FirstBank Lakewood, United States

    1 month ago

    Default job background
    Description
    This is a hybrid position requiring 2 days a week in office. Must reside in the state of CO on start date. Relocation assistance is not provided. FirstBank does not sponsor work visas

    *If candidates are in a familial or romantic relationship with a current FirstBank employee or FirstBank Board of Director they cannot be considered at this time


    Salary Range:
    $83,000 - $110,000


    Founded in 1963, FirstBank maintains more than $20 billion in assets and operates over 100 branch locations across Colorado, Arizona and California.

    Its growth can be attributed to one simple philosophy:

    do right by customers, communities and employees, which is at the center of the company's "banking for good" mantra.

    FirstBank believes that diversity, equity, and inclusion are part of everything we do, both within and outside our company, and prides itself in hiring and training a diverse and talented group.

    We strive to not only maintain a diverse workforce, but also ensure our employee experience garners a sense of belonging, is inclusive and equitable.

    FirstBank believes that a company is nothing without the people that comprise it, and prides itself in hiring and training a diverse and talented group.

    By joining the FirstBank team you will experience its great team culture with ample opportunity for growth.

    There's an opportunity for everyone with positions all across the company, from Teller and Call Center to Technology and Lending.

    Apply today to learn more and join the team

    A Brief Overview


    This IAM Systems Administrator (Analyst, Systems Admin) position is responsible for support of critical Identity and Access Management applications in our 24x7 enterprise environment.

    The IAM administrator will troubleshoot application performance issues and coordinate resolution with internal technical resources and with vendors.

    Daily duties will include project work and support of Active Directory, LDAP, DNS, PKI, and other access/authorization systems such as Identity Federation, Identity Lifecycle and Password Vaulting services including troubleshooting, ongoing maintenance, and upgrades of these systems as well as support for other core applications.

    Participation in an on-call rotation is required as well as after-hours work as needed for system implementations, outages, or upgrades.

    What you will do

    Participate in the evaluation and implementation projects involving existing and new technical solutions.

    Provide implementation and escalation support of Windows and Linux servers for Technical Support and other Technology teams.


    Monitor the capacity and performance of the server infrastructure and make recommendations for increasing capacity and replacing the systems as necessary.

    Follow change control procedures during new implementations and changes to existing systems.

    Collaborate with the Security team to resolve findings from various audits.

    Support of internally developed and packaged applications systems, perform ongoing maintenance, troubleshooting, and upgrades of these systems as well as managing the promotion of code and configuration changes through different environments

    Maintain knowledge of current and developing technologies, recommend evaluation of emerging technologies that would benefit the Infrastructure

    Communicate with management and business units on the status of projects

    Perform other duties and projects as assigned.

    Understand and comply with all provisions of the Safety in the Workplace policy.

    Minimum Requirements

    Typically requires a bachelor's degree in related field and a minimum of 2 years of related experience.


    A combination of post-high school education, job related certification and related experience equivalent to 5 years may be considered in lieu of minimum requirements.

    Preferred Requirements

    Bachelor's Degree in Computer Science or other technical field

    Strong knowledge of managing Active Directory Domain Controllers, Replication, Permission Delegation, DNS and Group Policy

    Knowledge of Windows workstation, server operating systems, and Linux server operating systems

    Strong knowledge of PKI infrastructures, working knowledge with Identity Federation (SSO), Identity Lifecycle Services, or Password Vaulting services

    Knowledge, Skills and Abilities

    Strong organizational skills; ability to balance responsibilities of multiple projects while meeting agreed upon objectives

    Strong technical problem-solving skills

    Strong communication and customer service skills

    Strong knowledge of managing Active Directory Domain Controllers, Replication, Permission Delegation, DNS and Group Policy

    Strong knowledge of PKI infrastructures

    Good working knowledge of AWS Identity and Access Management (IAM) to manage access to AWS services and resources securely

    Working knowledge with Identity Federation (SSO) and Identity Lifecycle Services

    Working knowledge of common authentication standards (OAuth, SAML)

    Strong knowledge of Windows workstation and server operating systems; basic knowledge of Linux server operating systems

    Strong knowledge of LAN protocols and technologies, such as TCP/IP and Ethernet; ability to troubleshoot network services such as DNS, FTP and HTTP

    Ability to create, implement and maintain information security standards at the operating system and application levels

    Ability to implement highly available solutions; implement multi-tiered and load balanced distributed systems

    Ability to develop PowerShell scripts for administrative and automation tasks

    Working Conditions and Physical Requirements

    Frequently remains stationary throughout a typical business day

    Frequently operates a computer and other office machinery, such as a calculator, copy machine, and computer printer

    Occasionally moves about inside the office to access file cabinets, office machinery, and other rooms

    Occasionally positions self to access drawers and shelves of various heights

    Frequently reaches for and handles paperwork and files

    Constantly communicates with customers, coworkers, and management in-person and on the phone

    Must be able to exchange accurate information

    FirstBank does not currently offer fully remote positions, except as required by law. The actual number of in-office days that may be required will vary by business unit, role, and business need.

    Statement of Benefits

    FirstBank offers a suite of benefits that support our employees' professional, financial, physical, emotional and spiritual well-being.

    Benefits currently offered with our positions include:
    Paid Time Off/paid leave programs, 401K/Employee Stock Ownership, United Healthcare medical, MetLife dental, VSP vision, Employee tuition reimbursement, Volunteer Time Off, Short-Term Disability, Long-Term Disability, and Group Life Insurance/AD&D

    FirstBank is an EOE/Affirmative Action employer.

    All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, genetic information, disability, veteran status, or any other applicable status protected by state or local law.

    FirstBank does not permit pay inequities.

    Anyone who believes they have been subject to pay inequity should immediately report their concerns to the Human Resource Department.

    This opportunity is expected to close by 4/5/24

    This opportunity's deadline has been extended to 5/3/24

    This opportunity has been extended to 5/3/24

    Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities


    The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.

    However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information.

    41 CFR c)