Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital...
Transcript of Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital...
![Page 1: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/1.jpg)
Hiring for Identity and Access Management
IAM OnlineWednesday, June 10, 2020
Presenters:Jessica Fink, Internet2Heather Flanagan, IDProKirk Kelly, Portland State University Erica Lomax, Oregon State University
Moderator:Kevin Morooney, Internet2
![Page 2: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/2.jpg)
“If we talk about society and politics long enough…”*
2*Campaign finance reform, term limits.
![Page 3: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/3.jpg)
3
![Page 4: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/4.jpg)
We end up at places that are difficult to understand, difficult to change.
4
![Page 5: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/5.jpg)
If we combine these two phenomena...
5
![Page 6: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/6.jpg)
6
Blah blah identity and access management.
I know, right? Identity and access management blah blah blah.
![Page 7: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/7.jpg)
If you think about identity and access management long enough...and if you talk to
others about identity and access management long enough...you end up at workforce and skills development, professionalization of a skillset..using words like mentor, apprentice,
training, knowledge, guild, certification.7
![Page 8: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/8.jpg)
Hiring for Identity and Access Management
IAM OnlineWednesday, June 10, 2020
Presenters:Jessica Fink, Internet2Heather Flanagan, ID ProKirk Kelly, Portland State University Erica Lomax, Oregon State University
Moderator:Kevin Morooney, Internet2
![Page 9: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/9.jpg)
Why is Hiring Important?
Kirk KellyVP & CIOPortland State University
![Page 10: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/10.jpg)
"The secret of my success is that we have gone to exceptional lengths to hire the best people in the world."Steve Jobs
The Importance of Hiring
![Page 11: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/11.jpg)
Hiring is a bigger decision than you might imagine
Why does hiring matter?
1
What can you do?
2
![Page 12: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/12.jpg)
The power of
70%
1 can represent
ALL 1 Negative
to11 Positive
Productivity linked to
Engagement
The “real” cost of a bad hiring decision
Decreased Productivity
Cultural Imbalance
Reputation
Disengagement
![Page 13: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/13.jpg)
The payoff of a good hire
17%Increase
#1 impact is your hire
CULTURE
MORALE
PRODUCTIVITY
TURNOVER
24% Less Turnover
![Page 14: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/14.jpg)
Hiring - The million-dollar decision
![Page 15: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/15.jpg)
The “How”What can you do?
![Page 16: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/16.jpg)
Attributes for Success
TeamPlayer
Innovation Coaching Proactive Communication
![Page 17: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/17.jpg)
Do Not Settle
100% Hints References
Be willing to go back out if you
don’t have the right potential hire.
Have 100% confidence in
your hire.
Stay clued into hints.
References have immense value - know what they can do for you.
Failed Search
![Page 18: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/18.jpg)
Where does hiring fall on your priority list?
![Page 19: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/19.jpg)
Why is IAM hiring hard?Erica LomaxDirector, Identity & ITSM
![Page 20: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/20.jpg)
Industry IAM
CustomersEmployees
![Page 21: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/21.jpg)
Higher ed IAM
Employees Customers
![Page 22: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/22.jpg)
Is IAM part of security?
Almost exclusively reports to Security
My research shows about 50% security, 50% other
![Page 23: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/23.jpg)
How do people learn about IAM?
Do your university technology courses teach IAM concepts?
Are your recent graduates qualified for IAM jobs in your organization?
![Page 24: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/24.jpg)
IAM is so much more than just the tech
![Page 25: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/25.jpg)
But don’t discount the tech
There’s a lot to run, but how much is higher ed specific?• Trusted Access Platform
• Person Registry -- COmanage, midPoint• WebSSO/SAML Identity Provider -- Shibboleth Identity Provider• Relying Party Information -- InCommon Metadata• Consent Service -- Scalable Consent• Groups Service -- Grouper• Provisioning Service -- COmanage, midPoint
• MFA• Other tools
Does your team also run non-IAM services?
![Page 26: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/26.jpg)
My team is small (3 FTE; ~33,000 enrolled students)
More tech and few staff results in needing “experts”, not entry or mid-level positions
How big is your team?
![Page 27: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/27.jpg)
Hiring challenges
1. Higher ed IAM doesn’t look like industry IAM2. IAM doesn’t look the same across higher ed3. There is no real pipeline4. High levels of institutional knowledge helpful - it’s more than
just the tech5. There’s a lot of tech, much is higher ed specific6. Small(er) teams = individuals with advanced/specialized skills
![Page 28: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/28.jpg)
What skills do I look for?
Specific IT position skills
ProgrammerDevOpsSysAdminBusiness Analyst
General skills
Ability to apply knowledge with critical thinkingTroubleshootingCapability to learn new technology skillsInterest in solving problems
![Page 29: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/29.jpg)
HEATHER FLANAGANPrincipal [email protected]
![Page 30: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/30.jpg)
ABOUT IDPRO AND THE BOK
The IDPro Vision
❖ Digital identities are created, managed, and used professionally and ethically, through secure, privacy-protecting, and reliable practices that produce high value digital services.
❖ The disciplines of digital identity and access management are globally seen as vital and vibrant counterparts to privacy and information security
❖ Practitioners in all phases of their careers have access to continuing education and development materials that help them achieve their goals.
Getting there from here:
● Body of Knowledge - https://www.idpro.org/body-of-knowledge ● Certification (eventually)
![Page 31: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/31.jpg)
WHY?
![Page 32: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/32.jpg)
EXPERIENCEHow many years have you worked in the identity industry or directly with identity tech systems?
©2019 IDPro, Inc. Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 License
![Page 33: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/33.jpg)
PROFICIENCYHow long did it take you to feel proficient as an identity professional?
©2019 IDPro, Inc. Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 License
![Page 34: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/34.jpg)
BODY OF KNOWLEDGE
![Page 35: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/35.jpg)
WHERE DOES CONTENT COME FROM?
● Current topics:● Introductions to:
● Admin-time● Access Control● IAM Architecture● IAM Project Management
● Standard reviews● ISO 24760, parts 1-3
● Laws and Regulations● GDPR● Laws Governing Identity Systems
Volunteers!
©2019 IDPro, Inc. Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 License
![Page 36: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/36.jpg)
PUBLICATION PROCESS AND TIMING
1. Submission via Janeway2. Initial Review by Principal Editor3. BoK Committee Review4. Full Edit by Principal Editor5. Board Comment Period6. Final edit, sign off, publication7. Community Comment via GitHub
Process
• Aiming for quarterly releases, with an annual compendium starting June 2021• 31 March 2020 – Issue 1• ~18 June 2020 – Issue 2
Timing
©2019 IDPro, Inc. Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 License
![Page 37: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/37.jpg)
CERTIFICATION AND PROFILES
• IAM has some common, basic considerations• IAM also has some context-driven details unique to different sectors
o Higher Educationo Commerceo Healthcareo Fintecho Governmento Enterprise / Workforceo …
Planning stages
![Page 38: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/38.jpg)
FOR MORE INFO
• @idpro_org
• www.idpro.org
©2019 IDPro, Inc. Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 License
https://www.idpro.org/body-of-knowledge/
![Page 39: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/39.jpg)
Base CAMP
Software Training
CAMP & ACAMP
Learn the basics of IAM, the Federation and related software. Learn each of the
InCommon Trusted Access Platform components (Shibboleth, Grouper, COmanage, midPoint).
At the CAMP series, hosted at TechEx, find out how you can build on your work by sharing and comparing notes with others.
1
2
3
Getting Started with InCommon Recommended Path
![Page 40: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/40.jpg)
InCommon Virtual BaseCAMPJuly 20-24, 2020 (Noon - 4 pm ET each day)
Workshop providing:
● An introduction to identity and access management basics
● An introduction to the InCommon Federation
● An overview of the community-built InCommon Trusted Access Platform services and software
● Flexibility, sessions will be recorded and available
Program and registration information: https://meetings.internet2.edu/2020-basecamp/
![Page 41: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/41.jpg)
InCommon Academy Training Portfolio
Details and registration information at https://incommon.org/academy/software-training/
![Page 42: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/42.jpg)
InCommon CAMP and ACAMPOpportunities to network and present and collaborate with other IAM professionals
CAMP:
● Planned, conference-style sessions that reflect what the community is working on
ACAMP:
● Unconference format, we fill the slots with speakers each day
● Reflects ideation within the community, what’s next, what’s baking, what’s interesting
Note: In-person conference in October cancelled, we’re exploring online options for 2020
![Page 43: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/43.jpg)
Interested in continuing the discussion?
CACTI is spinning up a Recruiting & Developing IAM Resources Working Group
Indicate you interest at: https://tinyurl.com/resources-wg
![Page 44: Hiring for Identity and Access Management · ABOUT IDPRO AND THE BOK The IDPro Vision Digital identities are created, managed, and used professionally and ethically, through secure,](https://reader033.fdocuments.in/reader033/viewer/2022042416/5f31df6ec0edc829eb3652a3/html5/thumbnails/44.jpg)
IAM Online Evaluation
https://www.surveymonkey.com/r/IAMOnline-June-2020