Description

Key Skills:CyberArk, Entra ID, Azure AD, DevOps

Roles and Responsibilities:

• Support IAM service transition and operational handover (BAU) into a centralized IAM function, including scope definition and RACI across support teams.
• Implement Entra PIM (Privileged Identity Management) for just-in-time (JIT) privileged access, migrating standing access to eligible role-based access and configuring approval workflows and tiered access controls.
• Transform and govern Conditional Access policies by baselining current controls, redesigning into a simplified secure model, and enforcing MFA and risk-based access controls.
• Enhance CyberArk PAM by strengthening privileged session controls, improving vaulting coverage through account discovery, and maintaining ongoing CyberArk hygiene and lifecycle management.
• Improve identity security hygiene by remediating weak AD passwords for users and service accounts, reducing over-permissioned access, and governing non-human identities (service accounts, managed identities, application registrations).

Skills Required:

• 12 - 16 years of experience in IAM and cybersecurity engineering.
• Strong hands-on implementation experience across IAM/PAM and identity security controls.
• Microsoft Entra ID (Azure AD) and Entra ID IAM engineering, including privileged access enablement.
• Privileged Identity Management (Entra PIM) for JIT access, eligible assignments, approval workflows, and tiered admin access (Tier 0).
• Conditional Access policy design and governance, including MFA and risk-based access controls.
• Active Directory (AD) security engineering, including identity hygiene remediation and governance of service accounts.

Good to Have:

• DevOps experience supporting IAM/PAM operational workflows and automation.

Education: Bachelor's Degree in related field

Key Skills

Education

Any Graduate