IAM Engineer

Role: IAM Engineer

Location: Remote Role

We are seeking a Team Lead IAM Engineer with strong experience in Microsoft Entra ID (Azure AD) and CyberArk Privileged Access Management.
Responsibilities
Identity & Access Management (Microsoft Entra ID / Azure AD)
Experience implementing Microsoft Entra ID solutions
Design and enforce Conditional Access, MFA, passwordless authentication, and device based access
Integrate internal and third party applications using SAML, OAuth 2.0, OIDC
Implement identity lifecycle (JML), RBAC, access reviews, and entitlement management
Maintain role-based access control (RBAC) aligned with least privilege principles.
Support IAM integrations with CyberArk PAM, DLP, and security platforms where applicable.
Troubleshoot complex sign in, token, MFA, PRT, and policy enforcement issues with minimal user disruption
Privileged Access Management (CyberArk PAM)
Hands on deployment and administration of CyberArk components: Vault, PSM, CPM, Secrets Management
Onboard privileged accounts across servers, databases, network, cloud, and service identities
Enforce least privilege, credential rotation, session recording, and approval workflows
Integrate CyberArk with Microsoft Entra ID for identity driven privileged access.
Monitor privileged access activity and investigate suspicious or non compliant usage.
Support PAM audits, regulatory reviews, and emergency access scenarios (break glass)
Governance, Compliance & Risk
Implement IAM and PAM controls aligned with Financial services regulatory expectations and Internal risk & audit frameworks
Support audits and compliance reviews (e.g., access evidence, privileged access reports)
Design and maintain audit ready documentation, including:
Architecture diagrams
Policy definitions
Access workflows and operational procedures
Participate in identity related incident response, RCA, and remediation activities