IAM Security Engineer

Join us in shaping the future of secure digital identity management as our IAM Security Engineer, where your expertise will safeguard our organization’s most critical assets and elevate our security posture to new heights.

Overview

We’re looking for a passionate and experienced IAM Security Engineer to design, implement, and support enterprise-grade privileged access and identity security solutions. If you thrive on solving complex security challenges and want to make a real impact in a dynamic environment, this is your chance to be part of a forward-thinking team committed to zero-trust principles and innovation.

What You’ll Do

• Lead the design and administration of Privileged Access Management (PAM) solutions, securing privileged, shared, and service accounts across on-prem, cloud, and hybrid platforms.
• Configure credential vaulting, password rotation, session management, and session recording to uphold the highest security standards.
• Implement and manage Microsoft Entra ID Privileged Identity Management (PIM), supporting role-based and attribute-based access controls, Just-in-Time access, and access reviews.
• Secure privileged access within Microsoft Azure and AWS environments, integrating controls into cloud-native and hybrid architectures aligned with Zero Trust initiatives.
• Integrate PAM solutions with identity providers such as Active Directory, SailPoint, Saviynt, and others, supporting Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federation efforts.
• Support audit, compliance, and governance activities, including privileged account reviews, incident investigations, and metrics reporting.
• Develop automation scripts and workflows for PAM onboarding, provisioning, and operational efficiency, supporting Infrastructure as Code (IaC) and DevSecOps practices.

Must Have

• 5+ years of experience in Identity & Access Management or Cybersecurity, including 3+ years supporting PAM solutions.
• Strong hands-on experience with Microsoft Entra ID PIM, CyberArk, BeyondTrust, or Delinea.
• Familiarity with cloud platforms such as Azure and AWS, including securing cloud-based privileged accounts.
• Knowledge of scripting and automation tools such as PowerShell, Python, and REST APIs.
• Experience in enterprise environments with compliance and regulatory requirements.
• Ability to troubleshoot and support complex security systems.

Nice to Have

• Certifications such as CyberArk Defender/Sentry, Microsoft SC-300, AWS Security Specialty, or CISSP.
• Experience with other PAM tools, IAM integrations, or security operations.
• Understanding of Zero Trust architecture and risk management fundamentals.

We Offer

A collaborative environment where your skills will directly influence our security resilience. Join us and contribute to a safer digital world.