Access & Identity Management Engineer, Analyst / Princeton, NJ
BlackRock
- Location
- Princeton, NJ
- Work model
- On-Site
- Level
- Mid
- Posted
- 1d ago
Skills
About this role
About this role Your team The Access and Identity Management team is part of Global Information Security and is responsible for helping protect the firm's information, systems, and cloud environments. The team partners with business, technology, and security stakeholders to establish and maintain identity and access controls across enterprise platforms. Team members play a key role in supporting secure access, strengthening governance processes, and driving continuous improvement initiatives that help safeguard critical technology resources. The Access & Identity Management (AIM) Governance team is responsible for ensuring that user access across BlackRock's applications, platforms, data repositories, and privileged environments remains appropriate, compliant, and aligned with business needs. The team owns and operates BlackRock's access recertification program, providing oversight of user entitlements and access governance controls across Aladdin, non-Aladdin applications, privileged access, cloud platforms, and unstructured data environments. Your role and impact The AIM Governance Administrator is responsible for supporting BlackRock’s Identity and Access Management (IAM) governance program by administering access entitlement reviews and maintaining access controls across a broad range of enterprise systems. This role helps ensure compliance with information security policies, regulatory requirements, and audit standards by delivering effective access governance, user administration, reporting, and audit support. The position requires strong attention to detail, a commitment to operational excellence, and the ability to collaborate with business partners, auditors, and technology teams to maintain a secure and compliant access management environment.
Your responsibilities
In every role at BlackRock, you'll be expected to apply sound judgement and critical thinking to solve complex problems, adapt as the business evolves, and embrace the curiosity to explore new approaches and technologies while challenging outcomes. The scope of this role also includes the following responsibilities: Administer entitlement reviews covering a wide variety of systems including, but not limited to, 3rd party hosted apps, in-house apps, unstructured data, NTFS Shared Folders and privileged access to ensure compliance with security policies and regulatory requirements. Managing user accounts, permissions and entitlements in Microsoft Active Directory, Exchange, UNIX, Cloud (Microsoft Azure, AWS, GCP), 600+ business applications and BlackRock’s state-of-the-art trading and asset management platform, Aladdin. Responsible for generating and providing access reports and audit evidence for both our business partners and Internal Audit teams. Monitor and report on IAM metrics Support internal and external audits to demonstrate compliance with relevant laws, regulations, and policies. Read, understand, and follow all written instructions regarding the administration of entitlement reviews. Maintain detailed documentation for access review procedures.
Your experience
Bachelor’s degree or foreign equivalent from an accredited institution OR three years of relevant experience is required Experience performing access entitlement reviews within required service level agreements Experience working with auditors in an IAM capacity Knowledge of enterprise-level Identity Management systems (e.g. SailPoint IdentityIQ, Brainwave, Okta). Experience performing user administration in a Windows Active Directory environment, and Microsoft Azure Entra ID. Experience in granting NTFS permissions for folders/files in a Windows Distributed File System Environment. Knowledge of Exchange administration Exchange Admin Center (both ECP, EAC): creating and maintaining mailboxes, distribution lists, contacts and public folders. Knowledge of Information Security principles and ability to adhere to SSAE16 and SOX audit requirements pertaining to Identity & Access