Information Security Intern - Identity and Access Management (IAM)
Billings Clinic

This is a temporary, non-benefit eligible position not to exceed 6 months.

The Identity and Access Management (IAM) Analyst Intern will work under the auspices of the Information Security Manager and the IAM team to manage identities and access within multiple complex computer applications, directories, and domains that encompass the full user lifecycle management (on- boarding, transfers, off-boarding, access reviews); including gathering information from multiple sources, analyzing, and summarizing the information to draw conclusions and make decisions to ensure appropriate access is provisioned. The role must assimilate customer requirements, utilize standard IT, Audit and Privacy methodologies, and gather information from various sources when provisioning access and designing solutions for projects with defined scope. The role will be required to access information considered confidential and protected by the organization to achieve the implementation and maintenance of systems and appropriate user access. The role must comply with all relevant policies and procedures related to the use, disclosure and security of this information and policies related to the security of the organization's information systems.
Essential Job Functions
• Supports and models behaviors consistent with Billings Clinic's mission, vision, values, code of business conduct and service expectations. Meets all mandatory organizational and departmental requirements. Maintains competency in all organizational, departmental and outside agency standards as it relates to the environment, employee, patient safety or job performance.
• Performs all other duties as assigned or as needed to meet the needs of the department/organization.
• Privileged Identity Management (PIM) and Privileged Access Management (PAM).
• Hands-on Active Directory and LDAP query experience.
• Functional understanding of the following protocols: TCP, UDP, DNS, HTTP, HTTPS, SMTP, SSH, SSL.
• Identity Management Technologies
• Authentication technologies (Kerberos, multi-factor, mutual TLS, etc.).
• Windows security related technologies including Kerberos, NTLM, PKI, TLS/SSL and Security Policy.
• Scripting and/or Coding experience (PowerShell, Python, Ruby or similar) is desirable.
• Billings Clinic policy and procedures, both organizational and departmental.
• Personal computers, hardware, and software.
• Billings Clinic Code of Business Conduct.
• Billings Clinic Corporate Compliance Program.
• HIPAA and confidentiality requirements.
• Patient's/resident's rights.
• Customer service techniques and Personal Service Excellence (PSE).
• Gathering requirements from internal clients/stakeholders and providing security and technical expertise to define and implement access models satisfying business requirements while adhering to the principle of "least privilege".
• Identifying access inconsistencies/risks and providing resolution.
• Working on complex application/technical problem resolution.
• Preparing and maintaining documentation.
• Serve as a key resource on IAM projects and initiatives.
• Work with business and project teams to troubleshoot access issues.
• Comfortable working in a Windows/Linux environment.

Minimum Qualifications

Education

• Minimum High School or GED
• Preferred 2 Year / Associate's Degree in IT or related field

Experience

• Less than 1 year combination of experience and education
• Strong teamwork skills and the ability to effectively communicate with both technical and business users.
• Excellent written, verbal and presentation skills.
• Ability to multi-task and manage confidential information.
• Analytical, critical thinking, time management, and prioritization skills a must.
Certifications and Licenses
• Security+, Microsoft Azure Identity and Access Administrator and/or similar

Or an equivalent combination of education and experience relating to the above tasks, knowledge, skills and abilities will be considered. Employees that require a licensed or certification must be properly licensed/certified and the licensure/certification must be in good standing.