INTERN - Data Analyst & Identity governance (Linux, 6 Months)

Job Title

Internship - Identity governance data analysis

Team description
 

Part of the Security organization in Amadeus, you will join one of the teams in charge of the identity and access management of Amadeus products. It is composed of a group of security experts who play the role of developers, analysts or system engineers. Together, they oversee the development, maintenance and evolution of a set of solutions related to user authorization. The team follows the latest standards in terms of agile processes and is part of a SAFe train focused on security.

Summary of the internship
 

The team is responsible for maintaining an infrastructure of components that enable application owners to manage the lifecycle of user identities. This ensures that new users are provisioned with appropriate privileges, while departing users are removed from the system and their associated permissions are revoked.

Traditionally, the management of user identities has been handled manually to a significant extent. This creates a discrepancy between the rights required for users and their actual capabilities, which does not conform to the least-privilege principle, thus posing security risks and affecting overall system integrity. Additionally, the lack of automation can make it difficult to scale and adapt to evolving business needs, resulting in a cumbersome and error-prone identity management system.

With the migration to the cloud, Amadeus is exploring a new and more modern approach to user identity. In this new setup, user rights are based entirely on the company’s organizational structure, ensuring a streamlined and hierarchical approach to access management.

We are looking for a highly motivated intern to analyze the current organizational structure and user privileges. The intern's job will be to create an accurate mapping of user roles to their privileges, following the least-privilege principle as much as possible. This involves understanding the various functions within the organization, identifying the necessary privilege each role requires, and designing a structured framework that minimizes unnecessary accesses.

This internship will be divided into two phases:

• During the initial phase of the internship, your primary focus will be on becoming acquainted with our ecosystem, infrastructure and its components along with understanding the problems we are facing. You will study the state-of-the-art of what is best done in the industry with respect to identity governance. You will first work on a sample data extract and lead an offline analysis of the current user identity management system, identifying discrepancies, and proposing solutions. To reduce unnecessary accesses, you will develop a metric to evaluate the performance of your model. This part of the internship will last 2 to 3 months. Throughout this internship, you will engage with our experts, who will offer guidance on various topics.

• In the second part, you will construct the framework and incrementally enhance it using our data set to achieve improved results. Finally, we will apply your model to our production data set to evaluate its performance. You will provide strategic proposals and recommendations on how Amadeus can leverage your model to improve its identity framework.

Main expectations
 

We are seeking dynamic candidates with the following set of skills:

• Strong interest in data science and data manipulation/analysis.

• Keen interest in computer security.

• Currently finalizing a master’s degree in computer science with a major in data science.

• Mandatory: Linux operating system, Bash, DevOps principles.

• Good understanding of cloud technologies.

• Considered a plus: exposure to Agile best practices (SAFe, Scrum, Kanban, …)

• Keen on learning new technologies.

• Likes to work in a multicultural team and share knowledge.

• Strong analytical and communication skills.

• Rigorous problem-solving skills.

• Creativity, innovation skills.

Diversity & Inclusion

Amadeus is an Equal Employment Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or a related medical condition), ancestry, national origin, age, genetic information, military or veterans status, sexual orientation, gender expression, perception, or identity, marital status, mental or physical disability status, or any other protected federal, state, or local status unrelated to performance of work involved.

Amadeus endeavors to make https://jobs.amadeus.com/ accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process for Amadeus France, please contact us at accommodations.france@amadeus.com. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.