Description

You will modernize and secure identity across corporate, frontline, and OT environments.

This role is hybrid.

Responsibilities

• Onboard and integrate applications into IGA platforms (SailPoint, Saviynt, or Oracle), establishing access models, approvals, and SoD controls.
• Reduce identity debt by removing orphaned accounts, right-sizing entitlements, and cleaning up AD/Entra ID.
• Advance authentication by supporting FIDO2/passwordless and phishing-resistant MFA, migrating legacy flows to WebAuthn/OIDC/SAML.
• Manage federation by configuring Entra ID SSO, conditional access, and adaptive policies aligned to Zero Trust.
• Report on access certifications, lifecycle performance, and compliance posture across IAM engineering, security architecture, and compliance teams.

Required Skills

• 7+ years in IGA/IAM with strong Active Directory and Entra ID fundamentals.
• Protocol fluency in SAML, OIDC, and OAuth2.
• Experience with IGAs (SailPoint, Saviynt, Oracle IDCS) or PAM tools (CyberArk, BeyondTrust).
• Working knowledge of Zero Trust, RBAC, lifecycle automation, and phishing-resistant MFA (FIDO2).
• Proficiency in scripting for analysis/automation using PowerShell, Python, or SQL.
• Understanding of identity risk and controls (NIST 800-63B, CIS, TSA).

Preferred Skills

• Experience with OT environment identity management.
• Background in security architecture or compliance auditing.

Key Skills

Education

Any Graduate