Sr. Cybersecurity Engineer

Key Responsibilities:

• Administer and maintain Identity and Access Management (IAM) and ** Privileged Access Management (PAM)** platforms to ensure high availability, performance, and reliability.
• Design and enforce identity lifecycle processes including onboarding, offboarding, and role-based access modifications.
• Manage **access provisioning, de-provisioning , and conduct regular ** access reviews for users, applications, and systems.
• Monitor and govern privileged account activities, applying **best practices for privilege escalation, session monitoring **, and credential management.
• Ensure compliance with internal access policies and support external and internal audit requirements.
• Optimize detection rules, policies, and automation workflows to enhance operational efficiency.
• Troubleshoot and resolve access-related incidents in collaboration with IT and application support teams.
• Maintain up-to-date documentation for IAM/PAM architectures, configurations, policies, and operational procedures.
• Support the integration of IAM/PAM systems across hybrid environments including on-premise and cloud platforms.
• Collaborate with security architects and ** GRC (Governance, Risk, and Compliance)** teams to improve the overall security posture.
• Work alongside other cybersecurity teams (e.g., **Threat Intelligence, Incident Response, Red Team **) to strengthen detection and response mechanisms.

Requirements

Requirements:

• Bachelor’s degree in **Information Security, Computer Science **, or a related technical field.
• 3–5 years of hands-on experience in IAM and/or PAM-focused roles.
• Strong expertise in IAM platforms such as **SailPoint **.
• Practical experience with PAM tools like **BeyondTrust **.
• Knowledge of **SSO, MFA, RBAC, Zero Trust **, and ** access governance frameworks **.
• Familiarity with compliance standards such as ** ISO 27001, NIST, NCA ECC, and GDPR **.
• Strong skills in **analysis, troubleshooting, and documentation **.
• Professional certifications in SailPoint or ** BeyondTrust** are highly desirable.