Southern Company is headquartered in Atlanta, and we bring energy to homes and businesses across the country. We've made our name as a leading producer of clean, safe, reliable and affordable energy, and we approach each day as a vital step in building the future of energy. We're always looking ahead, and our innovations in the industry - from new nuclear to deployment of electric transportation and renewables - to help brighten the lives and businesses of millions of customers nationwide. Our team is critical to building the future of energy with secure, resilient, and sustainable cyber solutions.

Defend. Protect. Enable.

Job Responsibilities

• Architecture, integration, lifecycle, and future planning for Microsoft Entra ID and Google Identity Platform identity providers.
• Creation and lifecycle of cloud-native identities such as Service Principals and App Registrations.
• Enforcing the principle of least privilege, especially in the area of AI integrations.
• Integration of applications using cloud-native identity protocols such as SAML, Oauth, or OpenID.
• Implementation of new security feature sets to address modern risks such as FIDO/Passkeys.
• Triage and escalation of cloud identity issues - with the technology and with individual business partners.
• Build automations where possible to facilitate repeat work or reporting within the cloud environments.
• Mentoring others in the area of IAM, cloud identity, and modern authentication principles and best practices.
• Serve as a trusted advisor to our stakeholders, by designing security solutions, for improved security and business enablement.
• Maintain various controls to meet regulatory requirements, including but not limited to Sarbanes-Oxley (SOX), FERC and NERC.
• Monitor, forecast, and prepare for new regulatory requirements or cloud technology changes.
• Aid in the development of standards and polices for the IAM program.
• Enhance processes to facilitate improved operational efficiencies, risk mitigation, and customer interactions.
• Lead and deliver cloud identity projects in scope, on time, and within budget.
• Provide expertise to assist in the development of Southern Company's security architecture - identify areas of opportunity, research alternatives, and recommend solutions.

Required Requirements and qualifications:

• Experience managing cloud-native identity providers, specifically Microsoft Entra ID and/or Google Cloud Identity Platform.
• Experience with cloud application integrations using SAML or OpenID.
• Experience with OAuth IDs (Service Principals), their configuration, lifecycle, and long-term risk management.
• An understanding of cloud role-based access controls and their unique differences from on-prem.
• Ability to leverage user dynamic risk, progressive authentication, self-service.
• Knowledge of modern authentication methods e.g. FIDO, Biometrics, Passwordless.
• Knowledge of cloud entitlement management and best practices.
• Must pass NERC CIP & Insider Threat Protection background checks.

Desired

• Technical knowledge with the following concepts: On-premises SSO, Active Directory, Privileged Account Management, PKI
• A solid understanding of IAM related protocols and standards such as: SAML, OAuth/OIDC, SCIM, FIDO, RADIUS, LDAPS, Kerberos.
• Strong verbal communication, and presentation skills.
• Competency in APIs (Rest, Graph) and/or JavaScript/Python/JSON/SQL.
• Experience prioritizing and executing with minimal direction or oversight.
• Industry certifications such as: CISSP, CCSP, CISA, GIAC, OSCP, CRISC, CCNP, etc.
• Experience with information security frameworks such as: COBIT, NIST, OWASP, etc.
• Familiarity with nation state, sophisticated criminal, and supply chain threats.

PDN-a08e764a-2dff-4b2c-860e-fe39dc3492d8