One Identity Manager Engineer

Qualifications
Must have
• 3–5+ years of hands-on experience with One Identity Manager in a support, implementation, or managed
services capacity. Experience should show independent handling of escalations, root cause analysis and
P1/P2 incidents, not only routine access requests.
• Deep working knowledge of the One Identity Manager data model: Person objects, account definitions, Unified
Namespace, UNSAccount, PersonInBaseTree, business roles, dynamic roles, and inheritance.
• Experience diagnosing Job Queue and DBQueue Processor issues, process step failures, and Job Service
performance problems.
• Hands-on experience with Synchronisation Editor: sync projects, schema classes, object matching rules,
property mapping rules, variable sets, revision filtering, and start-up configurations.
• T-SQL / SQL Server: proficient in querying the Identity Manager database for diagnostics, job history analysis,
and orphan account identification.
• Solid understanding of identity lifecycle (joiner-mover-leaver), authoritative source vs. target system concepts,
provisioning, deprovisioning, and reconciliation.
• Working experience with IT Shop configuration, approval workflows, RBAC, ABAC, SoD rule management,
and access certification campaigns.
• Active Directory, LDAP, and Entra ID integration and troubleshooting.
• Experience raising and working cases with One Identity (OEM) support, and supporting version upgrades and
patch cycles.
• Basic scripting knowledge for automation, such as PowerShell, REST APIs and bulk uploads.
• Proficiency with ServiceNow for incident, change, and problem management, and working knowledge of ITIL
processes.
• Strong understanding of Windows Server.
• Strong analytical and troubleshooting skills with the ability to work under escalation pressure, manage complex
multi-system failures, and diagnose from logs before engaging the OEM

• Excellent written and verbal communication skills, with the ability to work with technical and non-technical
stakeholders, document RCA findings and write structured knowledge base articles.
Good to have
• One Identity Manager Technical Specialist certification. Strong hands-on experience is valued equally.
• VB.NET: able to read and debug templates, format scripts and custom scripts in Designer and System
Debugger.
• One Identity Manager Implementation Professional certification, or CISSP, CISM or an equivalent IAM/security
certification.
• Experience with One Identity Safeguard, CyberArk or other PAM platforms, including the IGA-to-PAM handoff.
• Exposure to AWS EC2 or Azure hosted Identity Manager deployments, and Linux familiarity.
• Experience in regulated industries such as financial services or insurance, with awareness of SOX, GDPR, or
equivalent frameworks.
• Prior managed services or multi-tenant support experience, and experience working with global or
cross-cultural teams