<- All Jobs
Identity and Access Management Engineer - USDS
Team Intro
As a direct report to the Principal Lead, US Data, Identity and Access Management (DIAM) within TikTok USDS, you will be working to support the TikTok USDSs Identity workstream. The Data, Identity and Access management (DIAM) team within TikTok's Global Security Organization is responsible for engineering, deploying, testing and monitoring our global infrastructure footprint to validate data inventory, access and protection across our vast infrastructure of data centers, SaaS and IaaS. Identity and Access management team will be responsible for how users within an organization are given an identity - and how it is protected.
In your capacity as a key contributor you are part of a team that manages the security of TikTok data through identity management processes and controls across the entire data lifecycle, from creation to destruction. This will include developing the process for granting and removing access based on the principles of least privilege and need to how to manage access to data. You and the team will oversee policies and procedures for managing access based on enterprise policy and other international regulatory requirements (e.g., data residency), and your team will ingest organizational policies to create enforcement mechanisms.
The candidate must be skilled in conducting technical analysis of access policies, rules, and permissions as well as evaluating appropriateness of effective access. The candidate will develop, select, and motivate highly effective employees to execute TikTok's business model.
Responsibilities
- Define strategy for the execution of Identity and Access Management program
- Onboard application to the IAM tool and support access management and assurance needs
- Build and review technical and functional requirements for in-house or external technologies
- Design and implement access management and assurance programs (people, process, and technology) to mitigate security threats and risks related to access that may impact business data through a holistic global program-oriented approach
- Develop and maintain identity residency and identity access requirements and controls as necessitated by business needs and regulations
- Design and implement the identity review process, ensuring that identities and access is reviewed regularly both for appropriateness of access as well as privilege levels for all users
- Guide the team in developing use cases and integrating access management technologies with related cybersecurity technologies (e.g., security incident and event management, data classification, vulnerability management)
- Develop and maintain policies and procedures that support identity management (e.g., access assurance, access monitoring and reporting, authentication requirements)
- Implement and enforce mechanism to proactively monitor, respond and report on inappropriate data access events
As a direct report to the Principal Lead, US Data, Identity and Access Management (DIAM) within TikTok USDS, you will be working to support the TikTok USDSs Identity workstream. The Data, Identity and Access management (DIAM) team within TikTok's Global Security Organization is responsible for engineering, deploying, testing and monitoring our global infrastructure footprint to validate data inventory, access and protection across our vast infrastructure of data centers, SaaS and IaaS. Identity and Access management team will be responsible for how users within an organization are given an identity - and how it is protected.
In your capacity as a key contributor you are part of a team that manages the security of TikTok data through identity management processes and controls across the entire data lifecycle, from creation to destruction. This will include developing the process for granting and removing access based on the principles of least privilege and need to how to manage access to data. You and the team will oversee policies and procedures for managing access based on enterprise policy and other international regulatory requirements (e.g., data residency), and your team will ingest organizational policies to create enforcement mechanisms.
The candidate must be skilled in conducting technical analysis of access policies, rules, and permissions as well as evaluating appropriateness of effective access. The candidate will develop, select, and motivate highly effective employees to execute TikTok's business model.
Responsibilities
- Define strategy for the execution of Identity and Access Management program
- Onboard application to the IAM tool and support access management and assurance needs
- Build and review technical and functional requirements for in-house or external technologies
- Design and implement access management and assurance programs (people, process, and technology) to mitigate security threats and risks related to access that may impact business data through a holistic global program-oriented approach
- Develop and maintain identity residency and identity access requirements and controls as necessitated by business needs and regulations
- Design and implement the identity review process, ensuring that identities and access is reviewed regularly both for appropriateness of access as well as privilege levels for all users
- Guide the team in developing use cases and integrating access management technologies with related cybersecurity technologies (e.g., security incident and event management, data classification, vulnerability management)
- Develop and maintain policies and procedures that support identity management (e.g., access assurance, access monitoring and reporting, authentication requirements)
- Implement and enforce mechanism to proactively monitor, respond and report on inappropriate data access events