IAM Security Engineer

We are looking for anIAM Security Engineer to onboard privileged accounts, roll out EPM, and support PRA operations on the PAM platform. You will work with IAM stakeholders, maintain clear runbooks and SOPs, and help resolve privileged access and endpoint privilege tickets.

Responsibilities

• Onboard privileged and admin accounts into the PAM platform in line with established standards
• Roll out endpoint privilege management agents across Windows and macOS devices at scale
• Operate day-to-day privileged remote access capabilities and ensure service continuity
• Update runbooks, onboarding guides, and standard operating procedures for PAM operations
• Handle and triage operational tickets related to privileged access and endpoint privilege
• Align rollout sequencing and provide status updates with IAM stakeholders and program partners
• Verify least-privilege configurations and account lifecycle controls across onboarded assets

Requirements

• Hands-on PAM experience with BeyondTrust Password Safe, EPM, PRA or an equivalent platform with 2+ years of experience
• Strong understanding of privileged account lifecycle management and least-privilege concepts
• Working knowledge of identity and access management with exposure to access workflows and controls
• Practical experience with Windows and macOS endpoint environments
• Solid understanding of Active Directory administration concepts
• Strong written communication skills for producing operational documentation
• English proficiency: B2 Upper-Intermediate

Nice to have

• Atlassian Jira
• Atlassian Confluence
• SOX (Sarbanes-Oxley Act)
• PCI DSS
• PowerShell