Description

You will own IAM/PAM operations, identity security governance, and privileged access management within an on-site engineering team.

This role is on-site.

Responsibilities

• Support IAM service transition and operational handover (BAU) into a centralized IAM function, defining scope and RACI across support teams.
• Implement Entra PIM for just-in-time privileged access, migrating standing access to eligible role-based access with approval workflows and tiered controls.
• Transform and govern Conditional Access policies by baselining current controls, redesigning into a simplified secure model, and enforcing MFA and risk-based access.
• Enhance CyberArk PAM by strengthening privileged session controls, improving vaulting coverage via account discovery, and maintaining ongoing hygiene and lifecycle management.
• Improve identity security hygiene by remediating weak AD passwords, reducing over-permissioned access, and governing non-human identities.

Required Skills

• 12+ years of experience in IAM and cybersecurity engineering.
• Strong hands-on implementation experience with Microsoft Entra ID (Azure AD) and Entra ID IAM engineering.
• Privileged Identity Management (Entra PIM) for JIT access, eligible assignments, approval workflows, and tiered admin access (Tier 0).
• Conditional Access policy design and governance, including MFA and risk-based access controls.
• Active Directory (AD) security engineering, including identity hygiene remediation and governance of service accounts.
• Experience with CyberArk PAM and privileged session controls.

Preferred Skills

• DevOps experience supporting IAM/PAM operational workflows and automation.

Key Skills

Education

Any Graduate