IAM Engineer

Join us in shaping the future of enterprise security as an IAM Security Engineer—where your expertise directly fortifies critical infrastructure, protects sensitive data, and advances best practices in zero trust security. This role offers a unique opportunity to lead innovative identity and access management initiatives across cloud, on-premises, and hybrid environments, making a tangible impact on our organization’s security posture.

Overview:

As an IAM Security Engineer, you'll design, implement, and support sophisticated privileged access and identity security solutions. Collaborating with a team passionate about cybersecurity, you will strengthen our Zero Trust framework by safeguarding privileged accounts, managing governance policies, and integrating cutting-edge IAM technologies.

What You'll Do & Achieve:

• Lead the design and administration of enterprise Privileged Access Management (PAM) solutions, securing shared, privileged, and service accounts across diverse environments.
• Implement credential vaulting, password rotation, session control, monitoring, and auditing to reduce risk.
• Support onboarding of PAM across infrastructure, applications, databases, and cloud platforms.
• Manage Microsoft Entra ID Privileged Identity Management (PIM), configuring JIT, just-enough access, role activation workflows, and access reviews.
• Secure privileged access in Azure and AWS, integrating controls within cloud-native architectures and supporting cloud security initiatives.
• Integrate PAM solutions with identity providers like Microsoft Entra ID, Active Directory, LDAP, SailPoint, and others, supporting SSO, MFA, and federation.
• Collaborate with IAM and IGA teams to enforce privileged access governance and compliance standards.
• Investigate security incidents, support audit activities, and develop reporting dashboards aligned with least-privilege and Zero Trust principles.
• Develop automation scripts to streamline provisioning, password management, and reporting, supporting Infrastructure as Code and DevSecOps practices.

Must-Have Skills & Experience:

• 5+ years in Identity & Access Management or Cybersecurity, with 3+ years supporting enterprise PAM solutions.
• Hands-on experience with PAM tools such as CyberArk, BeyondTrust, or Delinea.
• Strong knowledge of Microsoft Entra ID PIM, Azure, AWS, and cloud security controls.
• Familiarity with scripting (PowerShell, Python), APIs, and automation.
• Experience managing privileged access within large, regulated enterprise environments.
• Ability to troubleshoot, support operations, and perform access reviews and audits.

Nice-to-Have Skills:

• Certifications such as CyberArk Sentry, SC-300, CISSP, or AWS Security Specialty.
• Experience with additional PAM vendors or IAM tools like SailPoint, Saviynt, or Okta.
• Knowledge of Zero Trust, RBAC, ABAC, and related security architectures.

What We Offer:

Be part of a forward-thinking team dedicated to cybersecurity excellence. Grow your expertise, lead meaningful projects, and help shape a safer digital future.