Lead Cyber IAM (Identity & Access Management)

LaBella Associates was established in 1978 and is a certified Great Place To Work. We are headquartered in Rochester, NY with offices across New York, Ohio, Pennsylvania, Connecticut, Maine, Virginia, North and South Carolina, and Madrid, Spain. LaBella is a multi-disciplined architectural and engineering firm dedicated to client satisfaction through teamwork, respect, and trust. We provide services that take a project from start to finish-from an initial study to determine a project's feasibility to construction administration and start up, and everything in between.

We are currently hiring a Lead Cyber IAM (Identity & Access Management) in our Program Management Services division at our client's Binghamton, NY office (hybrid work week - 3 days in office with a possibility of full time in office). This position is responsible for execution of projects that will implement design, operation, and evolution of IAM solutions and strategies for Avangrid Networks operating companies progress for Grid Digitalization.

Salary Range: $95,000 - $115,000

The specific salary offered may be influenced by a variety of factors including but not limited to the candidate's relevant experience, education, and work location.

Responsibilities

• Manage the shift in philosophy of how critical infrastructure is secured from verify once at the perimeter to continual verification of each user, device, application, and transaction

• Provide SME knowledge for the deployment of IAM services and solutions in support of Avangrid's evolution towards a zero-trust security framework

• Ensure projects that reduce risk and provides resiliency

• Engage with, and advise stakeholders within the business on IAM best practices

• Provide expertise and immediacy of decision making, hold team members accountable for results, coaches, mentors and guides team members, resolves disputes and escalates issues when appropriate.

• Ensure IAM services and solutions are designed and delivered in compliance with industry best practices as well as applicable privacy and legal/regulatory requirements including NIST 800-63, GDPR, SOX, CEII, and NERC

• Support implementation of GRC automation tools to manage compliance processes and evidence for applicable IAM services

• Provide SME knowledge for establishing an IAM service model that is well defined, highly available, repeatable, and is constantly measured for Key performance, Key risk, and Key operational level metrics

• Responsible for maintaining measurements and methods in place to ensure best in class control quality and assurance for IAM solutions

• Follow applicable federal agency guidance on IAM technologies relevant to Grid Modernization and assess impact on AVANGRID Networks business model

• Lead, develop, maintain, and write IAM cybersecurity policies, rules standards, and guidelines • Research current IAM industry and government frameworks, vulnerabilities, and risk trends, and assess impact

• Assess vendors/3rd party's IAM solutions for applicable cyber standards/policies

• Establish Vendor process and metrics for IAM cyber assurance

• Analyze current/future IAM vendors, hardware, software, etc. that may be introduced to modernize the electric grid and assess increases and offsets to cyber exposure

• Day to Day support of IAM Solutions MAJOR ROLES AND RESPONSIBILITES (Scope of work - range of responsibilities):

• Lead SME for project development and integration of IAM services and solutions in support of Grid Modernization for AVANGRID Networks

• Lead SME that participates in defining, developing, implementing, and operating IAM services and solutions for:

• Network Automation

• Smart Metering

• Resilient Telecommunications

• Intelligent/automatic centralized operations

• Digital Asset Management

• Digital enabled organization

• Distribution Automation

• Real Time Systems

• DER Management