IAM Provisioning Analyst

Vantive: A New Company Built on Our Legacy
Since last year, Baxter has been on a journey to separate our Kidney Care segment into a standalone company. Vantive* will build on our nearly 70-year legacy in acute therapies and home and in-center dialysis to provide best-in-class care to the people we serve. We believe Vantive will not only build our leadership in the kidney care space, it will also offer meaningful work to those who join us.
At Vantive, you will become part of a community of people who are focused, courageous and don’t settle for the mediocre. Each of us are driven to help improve patients’ lives worldwide. Join us as we revolutionize kidney care and other vital organ support.
*Completion of the proposed sale of Vantive to funds managed by the Carlyle Group is subject to receipt of customary regulatory approvals and satisfaction of other closing conditions.

Summary:

As an IAM Provisioning Analyst, you will be responsible for managing and maintaining user access to various systems, applications, and data within the organization and the fulfillment of certificate requests and revocations. Your primary focus will be on ensuring that user access rights align with organizational policies, regulatory requirements, and security best practices. You will play a crucial role in maintaining the integrity and security of the organization's digital assets by accurately provisioning and de-provisioning user accounts, monitoring access privileges, and responding to access requests and incidents.

Essential Duties and Responsibilities:

• Identity Provisioning: Manage the end-to-end process of provisioning user accounts, including creating, modifying, and disabling accounts across multiple systems and platforms.
• Access Control: Implement and enforce access control policies and procedures to ensure that user access rights are appropriate and aligned with business needs.
• Certificate Lifecycle Management: Oversee the issuance, renewal, and revocation of digital certificates. Implement and maintain processes for managing certificate requests, approvals, and deployments. Monitor certificate expiration dates and ensure timely renewal to prevent service disruptions.
• Role-Based Access Control (RBAC): Maintain RBAC frameworks to assign access privileges based on job roles and responsibilities.
• Access Review and Certification: Conduct regular access reviews to validate the appropriateness of user access rights and ensure compliance with security policies and regulatory requirements.
• User Lifecycle Management: Manage the entire lifecycle of user accounts, including onboarding, transfers, promotions, and offboarding, in collaboration with HR and other relevant departments.
• Incident Response: Investigate and respond to security incidents related to unauthorized access or misuse of user accounts, working closely with the incident response team.
• Documentation and Reporting: Maintain accurate documentation of access control policies, procedures, and configurations. Generate reports on access control activities, compliance status, and audit findings as required.
• Collaboration: Collaborate with cross-functional teams, including IT, security, compliance, and audit, to address identity and access management requirements and concerns.
• Continuous Improvement: Stay updated on emerging trends, technologies, and best practices in identity and access management. Continuously assess and improve identity provisioning processes to enhance efficiency and effectiveness.

Qualifications:

Bachelor's degree in computer science, information technology, or related field.

Proven experience in identity and access management, preferably in a large enterprise environment.

Strong understanding of identity management principles, access control models, and security frameworks (e.g., NIST, ISO 27001).

Familiarity with role-based access control (RBAC) concepts and implementation.

Strong understanding of cryptographic concepts, PKI (Public Key Infrastructure), and certificate management protocols (e.g., X.509, SSL/TLS).

Familiarity with certificate management tools and platforms (e.g., OpenSSL, Microsoft Certificate Services, Hashicorp Vault).

Excellent analytical and problem-solving skills with attention to detail.

Strong communication and interpersonal skills, with the ability to collaborate effectively with diverse stakeholders.

Certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Identity and Access Manager (CIAM) are a plus.

Knowledge of regulatory requirements such as GDPR, HIPAA, PCI DSS, etc., and their implications for identity and access management.

Reasonable Accommodations
Baxter is committed to working with and providing reasonable accommodations to individuals with disabilities globally. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the application or interview process, please click on the link here and let us know the nature of your request along with your contact information.

Recruitment Fraud Notice
Baxter has discovered incidents of employment scams, where fraudulent parties pose as Baxter employees, recruiters, or other agents, and engage with online job seekers in an attempt to steal personal and/or financial information. To learn how you can protect yourself, review our Recruitment Fraud Notice.