Berkley Technology Services (BTS) is a dynamic company committed to providing world class IT services. We offer a unique culture, enabling our team members to be at the forefront of technology while delivering high quality solutions. We are looking for outstanding individuals who will bring unique perspectives, insight, and innovation to our teams. BTS, a member company of W. R. Berkley Corporation, has facilities in Des Moines, Iowa and Wilmington, Delaware.

Our functions include working with various third parties to develop, integrate, and support insurance systems of WRBC's operating units. BTS strives to provide these functions in a holistic manner including helpdesk support, system connectivity, and operational support. Additional responsibilities include coordinating communications regarding best practices for our supported systems and researching innovative technologies. At BTS, there are opportunities associated with being a part of an established and empowering corporation while maintaining a positive personal working environment. Additionally, we provide a competitive compensation and benefits package including a casual dress code. BTS is constantly growing and expanding to meet the changing demands of one of the most successful insurance organizations in the world. Visit us at berkley-bts.com to learn more information.

The Company is an equal employment opportunity employer. 

Seeking a dynamic Lead Engineer with a strong background in Identity Access Management (IAM) technologies and systems infrastructure. The ideal candidate will actively engage in the planning, architecture, and execution of systems, serving as a pivotal liaison between the organization and key vendors such as Microsoft and AppViewX. This role demands a proactive approach to problem resolution, the ability to serve as a lead on projects, and a commitment to mentoring technical staff. Collaboration with project managers and technical teams to deliver customer-centric solutions, including the presentation of design and deployment strategies, is essential.

The successful candidate will possess deep expertise in Entra ID, Active Directory, and PKI. Responsibilities include documenting platform topology, system level programming/scripting, and leading the design and implementation of comprehensive IAM policies. This role requires a proactive stance on system provisioning, maintenance, security, and compliance, ensuring alignment with company goals and regulatory standards.

As a leader in the IAM domain, the role involves extensive mentorship, guiding both peers and subordinates in IAM technologies and best practices. The candidate will manage the deployment of IAM solutions, emphasizing security standards and user needs fulfillment. Key to the role is the development of policies and procedures that support system integrity, security, and availability, with a focus on identity verification and access control. Strong analytical skills, excellent communication abilities, and professional experience are crucial for success in this position.

Key functions include but are not limited to:

• Serve as liaison to vendors (e.g., Microsoft, AppViewX, etc.) to facilitate problem resolution.
• Actively participate in the planning and implementation of systems, infrastructure, and related hardware and software in response to incoming customer requests and organizational requirements.
• Be able to serve as a Lead Engineer on engagements and work directly with Project Management, Account Management, and Customer teams.
• Mentor and cross-train technical staff, peers, and subordinate team members in technologies and best practices, including hands-on sessions and workshops on topics such as automating certificate processes with tools like AppViewX.
• Provides guidance on BTS development standards and quality expectations to employees entering the job family.
• Collaborate with technical staff, including project managers.
• Customer liaison for solutions including presentation of design and deployment strategies. 
• Provide subject matter expertise in Active Directory, DNS, and Windows Server operating systems.
• Responsible for system level programming / scripting on an ad hoc basis and to facilitate the management of supported applications and technologies.
• Develop the planning, architecture, and oversee the implementation of policies and procedures to ensure system provisioning and maintenance is consistent with company goals, industry best practices, and regulatory requirements.
• Conduct research on emerging products, services, protocols, and standards in support of systems software procurement and development efforts.
• Performs configuration, integration, maintenance, performance management, security management, failure analysis and recovery, and user support.
• Manage end user accounts, permissions, and access rights in accordance with best practices regarding privacy, security, and regulatory compliance.
• Participate and adhere to defined ITIL standards for incident, request, and change management.
• Document problems and resolution for future reference.
• Document platform configurations and standards.
• Maintain excellent communication skills, particularly across functional technical areas.
• Possess strong analytical abilities and professional office experience.
• Address and resolve issues with PKI, and tools like AppViewX for certificate lifecycle management, ensuring their smooth integration into existing systems for effective access management.
• Lead IAM technology deployment projects, such as AppViewX for certificate lifecycle management. Collaborate with project, account, and customer teams to ensure deployments fulfill user needs and comply with security standards.
• Develop and manage the implementation of policies and procedures for system provisioning and maintenance, emphasizing IAM. Ensure these practices align with company objectives, industry best practices, and regulatory standards, especially regarding identity verification and access control.
• Lead the creation of comprehensive IAM policies, utilizing Group Policy Objects (GPO) and Entra ID Conditional Access Policies. This involves setting standards, guidelines, and procedures for identity management and access control in Windows Active Directory environments with GPOs, and for cloud and hybrid resources with Entra ID Conditional Access Policies.
• Research emerging IAM technologies, including new products, services, protocols, and standards. Keep up with trends in authentication, authorization, and identity management to inform procurement and development strategies.
• Engage in system level programming/scripting to support enterprise applications and automation for PKI and certificate lifecycle management.
• As a lead PKI Expert, design and implement a secure, scalable two-tier PKI infrastructure. Focus on safely deploying Root and Subordinate CAs, ensuring robust disaster recovery for root keys with key escrow, managing certificate lifecycles, adhering to security standards, and training IT and security teams for efficient integration into the organization's security framework.
• On Call Rotation (PIC) is required

• Bachelors Degree in Computer Science, Information Technology, Information Systems, or a related discipline. Equivalent experience and/or alternative qualifications will be considered.
• PKI design, administration, and support for a minimum of 5 years
• Microsoft Windows Server technology for a minimum of 5 years
• Active Directory, DNS, and DHCP administration support for a minimum of 5 years
• Entra ID and Intune experience for a minimum of 3 years