IAM Security Engineer

• Proficient knowledge and understanding of the key principles of Identity Access Management
• Proficient knowledge of access controls (i.e. RBAC, DAC, MAC) and usage of least privilege
• Subject matter expert on security design and solution development related to Identity Lifecycle management
• Strong knowledge of modern authentication standards, protocols, and frameworks: LDAP, SAML, OAUTH2, OIDC, FIDO2, Kerberos, SCIM, WS-Federation, JWT.
• Familiarity with DevOps tools and a mindset to promote a culture of automation Fostering Innovation and Automation: Developing and/or supporting the introduction of new and improved methods, products, procedures, or technologies
• Manage Applications Credentials, User Access Policy Management.
• Assist application teams through the SDLC process (including requirements gathering, configuration, testing to integrate applications/systems with AM and PAM solutions)
• Good functional understanding of CyberArk with experience in creating accounts, safes and customized platforms in CyberArk coupled with account management operations expertise (includes concept of verification and reconciliation)
• Well-versed with various error codes and corresponding solutions for EPV and all components of CPM, PVWA, PSM,PSMP,OPM and AIM
• Well versed with CyberArk automation scripts in PACLI coupled with good acquaintance with Password upload utility.
• Operational support with Azure
• Skilled in Active Directory concepts, including users, security groups, policies
• Track and complete IAM-related requests/issues via ticketing system. Ensure that appropriate approvals are in place, and provide guidance to approvers as needed, prior to acting on tickets.

Enforce compliance with IAM principles including least privilege and password management.

• We are looking for people who have implemented cloud-native architecture using best practices in cloud technologies (e.g., containers, microservices, serverless).Also worked with Role-Based Access Control (RBAC), and Single Sign-On (SSO) cloud-based identity governance solutions.

• We need someone who planned and executed the migration of applications .Strong understanding of security protocols, cloud standards, and compliance frameworks with Cloud expertise (with a focus on Azure).

• Engineer & Design cloud security solutions, heavily utilizing Microsoft Azure , advanced programming experience (Python, TypeScript, Bash, etc.)

• Strong understanding of identity federation (SAML, OAuth, OpenID Connect, etc.) leading SSO/MFA platforms, Microsoft identities, and cloud platform identities (AWS IAM, Azure AD

• Experience with Identity and Access Management policy application and enforcement using DevSecOps

• Experience with API gateways and API security, Zero Trust security, secure configuration of containerized application platforms (e.g. Kubernetes)