Description

You define and implement advanced identity and access management strategies under Zero Trust principles.

Assess identity maturity and design target architectures for workforce, customer, and workload identities. Build adaptive access controls including risk-based, context-aware, and passwordless solutions. Implement workload identity using mTLS, SPIFFE/SPIRE, and PKI for Kubernetes and serverless environments. Integrate Identity Governance and Administration (IGA), Privileged Access Management (PAM), and ITDR to restrict privileges. Create multi-tenant reference architectures and runbooks for managed identity services.

Responsibilities

• Design adaptive access controls for web, mobile, and legacy applications.
• Implement workload identity solutions for microservices on Kubernetes and serverless platforms.
• Integrate IGA, PAM, and ITDR solutions to limit lateral movement and enforce least privilege.
• Define SLAs and KPIs for managed identity services.
• Integrate identity telemetry with SIEM/SOAR/MDR tools.

Required Skills

• 6+ years in cybersecurity with 6+ years focused on Identity & Access Management.
• Deep knowledge of SAML, OAuth 2.0, OpenID Connect, SCIM, and FIDO2/WebAuthn.
• Hands-on experience with Microsoft Entra ID, Okta, Ping, or ForgeRock.
• Experience with IGA platforms like SailPoint or Saviynt, and PAM tools like CyberArk.
• Proficiency in cloud and workload identity across Azure, AWS, and GCP, including secrets management.
• Familiarity with CIEM/permissions management and ITDR.
• Knowledge of API authorization using Policy as Code (e.g., OPA) for event-driven architectures.
• Ability to integrate identity telemetry with Microsoft Sentinel or Splunk.

Preferred Skills

• Experience leading complex identity migrations and M&A integrations.
• Familiarity with IoT/OT device identity provisioning and attestation.

Key Skills

Education

Any Gradute