Security Engineer II - Identity and Access Security
Core
Design, implement, and support enterprise Identity and Access Management (IAM), Privileged Access Management (PAM), and Machine Identity Security solutions.
Role type
Senior IAM Engineer (Identity & Access Security)
Builds
Secure and compliant access controls across the organization
Domain
Cybersecurity, Identity Management
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
IAM engineering and administration, Identity Governance (IGA), Privileged Access Management (PAM), Microsoft Entra ID, Microsoft Identity Manager (MIM), identity lifecycle management, access provisioning, deprovisioning, role changes, access reviews, Privileged Identity Management (PIM), RBAC, least-privilege principles, Zero Trust architecture, PKI, certificate lifecycle management, machine identity security, service account governance, secrets management, PowerShell scripting, Python scripting
Preferred skills
CyberArk, BeyondTrust, Delinea, enterprise PKI platforms, machine identity governance, workload identities, AI Security, AI governance frameworks, SIEM integration, Java, C#
Technologies
Microsoft Entra ID, Microsoft Identity Manager (MIM), Delinea PAM, CyberArk, BeyondTrust, Venafi, Keyfactor, DigiCert Trust Lifecycle Manager, PowerShell, Python
Responsibilities
Design and implement IAM, IGA, and PAM solutions; Manage identity lifecycle processes including onboarding, offboarding, and access reviews; Administer privileged access controls and support Zero Trust initiatives; Support machine identity security and certificate lifecycle management; Develop automation solutions using scripting languages; Troubleshoot complex identity and access-related issues
Seniority
Senior, hands-on IC