Identity and Access Management Specialist

MSF is an international, independent medical humanitarian organization. We are a non-profit, self-governed worldwide movement of more than 63,000 people.      

We provide emergency medical assistance during armed conflict, natural disasters, outbreaks of deadly diseases and assist those who are excluded from healthcare. MSF delivers care based on need and when we see injustice, we speak out. We are an organization that remains impartial, knowledgeable, and effective, and this is what makes the difference between life and death.      

People are our priority. At Médecins Sans Frontières (MSF)/ Artsen zonder Grenzen, we are committed to an inclusive culture that encourages and supports the diverse voices of our employees. We encourage diverse applicants including individuals of all gender identities, ages, sexual orientations, nationalities, races, religions, beliefs, social and marital status, people with different abilities and all other diversity characteristics and how they work together. 

With immediate effect, the ICT department is looking for an: 

Identity and Access Management Specialist

(Preferably based the Netherlands, but open to hire in countries with MSF contracting offices, CET +/- 2 hours)

Position objective

Implementing and managing our IAM solution in both country programmes and HQ, aligning technology with business needs, enhancing efficiency, ensuring security and compliance, and providing user support. Their expertise and contributions will directly support the organization in meeting its priorities related to security, compliance, efficiency, user satisfaction and improve the access to MSF information assets. We are currently implementing Sailpoint access Management across our country programmes and Back-office portfolios of our Amsterdam presence. 

Main responsibilities

• In the implementation phase, Integrating applications to get user access data, Ensuring security throughout the Application Development Life Cycle. Ensure industry best practices are implemented and carried forward. 
• Facilitation of employee journey and user experience, reduce manual management of creating and managing identities and support the automation by way of managing user accounts, permissions, and access rights.
• Support the review and optimisation of existing processes in the country programmes and MSF Amsterdam Office specifically processes aligned with the HR Systems (current and under implementation).
• Monitoring compliance with policies, regulations, and customer requirements. Ensure the organization adheres to the Identity and Access Management Policies and Matrix, and the same is reflected in the system by periodic reviews. Participate in IT & Control Audits as focal point for Identity and Access Management. Conduct periodic risk assessments and advise ICT Management on actions.
• Provide user support, ensuring that staff can navigate the IAM system seamlessly. Assist users in accessing the information they need, troubleshoot any issues, and provide guidance on best practices for secure information access.
• Investigate incidents and recommend corrective actions. Manage issues that may occur due to misalignment or mismanagement of user access.
• Act as focal point between Support/ Maintenance vendor and MSF – Manage the vendor after IAM project is in BAU phase.
• Implement Segregation of duties across the MSF OCA ICT Applications landscape.

Candidate Profile

Specific knowledge

Familiarity with and hands-on experience with Low Code development platforms and integration low code solutions into an enterprise application landscape. (Preferably Microsoft Power Platform)

Strong understanding of Identity and Access Management (IAM) principles.

Hands-on experience with SailPoint IdentityIQ/IdentityNow.

Knowledge of SailPoint Lifecycle Manager (LCM) and Compliance Manager.

Familiarity with SailPoint APIs and integration capabilities.

Demonstrated knowledge on Microsoft power platform and Integrations.

Technical Expertise:

Proficiency in Java, BeanShell, or Groovy for customization and scripting.

Experience with SailPoint rule development (e.g., provisioning, certification rules).

Knowledge of directory services (LDAP, Active Directory) and relational databases (SQL/Oracle).

Familiarity with REST APIs and integrations with third-party systems.

Deployment and Configuration:

Experience in setting up connectors (e.g., SAP, Workday, Active Directory).

Understanding of role-based access control (RBAC), least privilege, and segregation of duties (SoD).

Hands-on experience in configuring SailPoint workflows and reports.

Troubleshooting and Support:

Ability to identify and resolve issues in SailPoint environments, including logs analysis. Knowledge of SailPoint-specific error handling and debugging techniques.

General IT Knowledge:

Basic understanding of network security and authentication protocols (SAML, OAuth, OpenID Connect).

Familiarity with DevOps concepts and tools (e.g., Git, Jenkins).

Awareness of regulatory requirements like GDPR, HIPAA, or SOX.

Soft Skills:

Strong problem-solving and analytical abilities.

Effective communication and ability to work collaboratively with cross-functional teams.

Self-starter with a proactive approach to learning new technologies

The ability to translate complex business requirements into technical solutions.

Preferred Qualifications:

Certification in SailPoint IdentityIQ or IdentityNow.

Experience in Agile/Scrum development environments.

Prior experience in migrating or upgrading SailPoint environments.

Knowledge of other IAM tools like Okta, Ping Identity, or CyberArk.

We offer

If you are based in the Netherlands:

A Dutch employment contract, based on 40 hours per week. It is a one-year contract with a renewal option.

A gross monthly salary in scale 16 with a current salary range between 4,085 and 5,624 euros. Your exact salary will depend on relevant work experience.

Other benefits include (pro-rata):

·30 paid vacation days annually, contingent upon full-time employment status.

·A premium free pension where MSF covers 100% of the monthly pension contribution 

·Commuting allowance (terms and conditions apply) & work from home allowance 

·Hybrid working option

·L&D will support you with a variety of learning and development opportunities with internal and external trainings and courses 

·Discounted daily lunch at the office 

·An environment that fosters diversity, with colleagues from around the world representing various cultures and backgrounds 

If you are based outside the Netherlands, local labor law, salaries, and benefits will apply.

Application

If you recognise yourself in this profile, we welcome you to apply directly via our website and upload a letter of motivation + Curriculum Vitae (in English) as one combined document.

The closing date for applications is January 19^th, 2025, at 23:59h.

Information 

For more information about the recruitment procedure, please contact Masha Petrovic (Recruiter) at masa.petrovic@amsterdam.msf.org.

For more information about the role and the team, please contact Rim Mukhopadhyay

(ICT Coordinator Business Applications) at rim.mukhopadhyay@amsterdam.msf.org

***No agencies please***