| Description: |
Join us in shaping the future of enterprise security as an IAM Security Engineer-where your expertise directly fortifies critical infrastructure, protects sensitive data, and advances best practices in zero trust security. This role offers a unique opportunity to lead innovative identity and access management initiatives across cloud, on-premises, and hybrid environments, making a tangible impact on our organization's security posture. Overview: As an IAM Security Engineer, you'll design, implement, and support sophisticated privileged access and identity security solutions. Collaborating with a team passionate about cybersecurity, you will strengthen our Zero Trust framework by safeguarding privileged accounts, managing governance policies, and integrating cutting-edge IAM technologies. What You'll Do & Achieve: - Lead the design and administration of enterprise Privileged Access Management (PAM) solutions, securing shared, privileged, and service accounts across diverse environments.
- Implement credential vaulting, password rotation, session control, monitoring, and auditing to reduce risk.
- Support onboarding of PAM across infrastructure, applications, databases, and cloud platforms.
- Manage Microsoft Entra ID Privileged Identity Management (PIM), configuring JIT, just-enough access, role activation workflows, and access reviews.
- Secure privileged access in Azure and AWS, integrating controls within cloud-native architectures and supporting cloud security initiatives.
- Integrate PAM solutions with identity providers like Microsoft Entra ID, Active Directory, LDAP, SailPoint, and others, supporting SSO, MFA, and federation.
- Collaborate with IAM and IGA teams to enforce privileged access governance and compliance standards.
- Investigate security incidents, support audit activities, and develop reporting dashboards aligned with least-privilege and Zero Trust principles.
- Develop automation scripts to streamline provisioning, password management, and reporting, supporting Infrastructure as Code and DevSecOps practices.
Must-Have Skills & Experience: - 5+ years in Identity & Access Management or Cybersecurity, with 3+ years supporting enterprise PAM solutions.
- Hands-on experience with PAM tools such as CyberArk, BeyondTrust, or Delinea.
- Strong knowledge of Microsoft Entra ID PIM, Azure, AWS, and cloud security controls.
- Familiarity with scripting (PowerShell, Python), APIs, and automation.
- Experience managing privileged access within large, regulated enterprise environments.
- Ability to troubleshoot, support operations, and perform access reviews and audits.
Nice-to-Have Skills: - Certifications such as CyberArk Sentry, SC-300, CISSP, or AWS Security Specialty.
- Experience with additional PAM vendors or IAM tools like SailPoint, Saviynt, or Okta.
- Knowledge of Zero Trust, RBAC, ABAC, and related security architectures.
What We Offer: Be part of a forward-thinking team dedicated to cybersecurity excellence. Grow your expertise, lead meaningful projects, and help shape a safer digital future.  |
