Title: IT Identity Access Mgmt Engineer

Basic Function

HollyFrontier Corporation is seeking an IT Identity and Access Management Engineer to be located either at the headquarters in Dallas, TX. OR a remote location.The Identity and Access Management Engineer will be responsible for participating in designing, delivery, and support of Identity and Access Management technologies throughout the identity and application lifecycle. Consistent with established security guidelines, this person in this role will make recommendations to address business requirements and improve workflow with effective involvement of support resources.

Job Duties

• Develops, documents, tests, implements, and enhances Identity and Access Management Systems.
• Assists with developing processes and procedures related to the IAM system.
• Works with the team to gather requirements and investigate solutions.
• Assists in identification of alternative configurations and approaches to enable business needs.
• Develops and maintain documentation on common tasks, procedures, data flow and business process diagrams.
• Troubleshoots issues/failures and document potential solutions.
• Collaborates with the team to ensure successful deployment of new features.
• Implements and administers multifactor authentication systems to enhance security posture for computers and users.
• Supports Active Directory (AD) environments in compliance with legal, regulatory and internal policies and standards, and ensures compliance of AD solutions.
• Participates in internal audits of identity and security roles.
• Provides telephone, e-mail, and after-hours support to all sites using various tools.
• Develops and maintains clear, concise, and accurate technical documentation for the application and supporting infrastructure environment, including detailed design documents, builds procedures, training and technical support guidelines.
• Analyzes usage and trends, and evaluates vendor products for fit with established architecture.
• Monitors system health for assigned applications.
• Consults with peers and SaaS providers to resolve issues.
• Documents activities such as down time, problems, and system configurations.

Special assignments or tasks assigned to the employee by their supervisor, as determined from time to time in their sole and complete discretion.

Experience

A minimum of seven (7) years of related experience in Information Technology. Experience administering any of the major Enterprise IAM products: SailPoint Inentity IQ / IdentityNOw, CyberArk and Ping Identity.

Education Level

A minimum of an Associate’s degree (two year degree) is required with a focus on computer science, MIS or technical program OR equivalent job related experience.

Required Skills

• Extensive experience working with LDAP, Microsoft Active Directory, Azure Active Directory, and third party identity providers (i.e. Ping, Okta, OneLogin). Hands on experience with multifactor authentication (Okta, Duo, Ping, Azure MFA) and clients. Programming experience with PowerShelFunctional knowledge of SQL database
• Experience with ITIL methodology for Service, Change and Incident management, Basic knowledge of public cloud providers (i.e. Azure, AWS); Intermediate knowledge of Windows/Linux operating system.
• Demonstrate a working knowledge of multiple technologies and their interfaces and integration (REST API, Web Services, etc.)Knowledge of IT security best practices. Ability to manage tasks independently and take ownership of responsibilities, learn from mistakes and apply constructive feedback to improve performance.
• Strong customer focus with ability to manage customer expectations, experience, and strong team-oriented interpersonal skills with the ability to interface with a broad range of people and roles. Ability to adapt to a rapidly changing environment. Critical thinking skills to evaluate alternatives and present solutions that are consistent with business objectives and strategy. Advanced reading, writing and verbal communication skills to effectively communicate with others.

Preferred Skills:

• Experience with Privileged Access management and multi-factor authentication.
• 3+ years Identity and Access Management (IAM) administration.
• Experience with IT auditing and controls.
• Programming experience with Java, JavaScript & HTML.
• Experience with merger and acquisition infrastructure activities.

Work Conditions

Office based with up to 25% travel by land and air required. Travel to Petroleum refinery, warehouse/plant environment, out-of-doors environment, exposure to the risk of electrical shock. Subject to all temperatures, weather and varying road conditions.

Our One HFC Culture:

Our One HFC Culture focuses on five key values of Safety, Integrity, Teamwork, Ownership and Inclusion. They influence our decisions, shape our behaviors and keep us connected across the entire organization. Safety is first: We maintain a true Safety culture for our employees, communities, environments and customers. Our goal is to make sure everyone returns home safely each day. Everything we do is done with Integrity; We speak up. We listen. We do the right thing. We encourage employees to Step Up and Stand Out by championing a culture of Teamwork and Ownership. Last, but not least, we foster a culture of Inclusion by encouraging diversity of experiences, viewpoints and backgrounds. What makes each of us different, together makes us stronger.

About HF Sinclair Corporation

HF Sinclair Corporation (“HF Sinclair”), headquartered in Dallas, Texas, is an independent energy company that produces and markets high value light products such as gasoline, diesel fuel, jet fuel, renewable diesel and other specialty products. HF Sinclair owns and operates refineries located in Kansas, Oklahoma, New Mexico, Wyoming, Washington and Utah and markets its refined products in 19 states principally in the Southwest U.S., the Rocky Mountains extending into the Pacific Northwest and in other neighboring Plains states. HF Sinclair supplies high quality fuels to more than 1,300 Sinclair branded stations and licenses the use of the Sinclair brand at more than 300 additional locations throughout the country. In addition, subsidiaries of HF Sinclair produce and market base oils and other specialized lubricants in the U.S., Canada and the Netherlands, and export products to more than 80 countries. Through its subsidiaries, HF Sinclair produces renewable diesel at two of its facilities in Wyoming. HF Sinclair also owns a 47% limited partner interest and a non-economic general partner interest in Holly Energy Partners, L.P., a master limited partnership that provides petroleum product and crude oil transportation, terminalling, storage and throughput services to the petroleum industry, including HF Sinclair subsidiaries.

Equal Opportunity Employer

HF Sinclair Corporation is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status or any other prohibited ground of discrimination.