Qureos Mentor

Cedrus Group (Pvt.) Limited.

We are seeking a skilled One Identity Privileged Access Management (PAM) Safeguard Technologist / Expert to design, implement, and manage privileged access solutions across enterprise environments. The ideal candidate will have deep expertise in One Identity Safeguard, with a strong understanding of identity governance, access control, and cybersecurity best practices.This role focuses on securing privileged accounts, automating access workflows, ensuring compliance, and supporting digital identity transformation initiatives.Key Responsibilities:<ul><li>Design, deploy, and maintain One Identity Safeguard PAM solutions across hybrid or multi-cloud environments.</li><li>Configure Safeguard Password Safe and Safeguard for Privileged Sessions to manage privileged credentials and secure session monitoring.</li><li>Integrate PAM with Active Directory, Azure AD, ServiceNow, SIEM tools, and other enterprise systems.</li><li>Develop and enforce least privilege access policies, ensuring compliance with corporate and regulatory standards (ISO 27001, NIST, GDPR, etc.).</li><li>Monitor privileged activity, generate reports, and respond to audit or compliance inquiries.</li><li>Perform ongoing system upgrades, patching, and performance tuning to maintain solution health.</li><li>Collaborate with cybersecurity, infrastructure, and application teams to ensure seamless PAM adoption and security alignment.</li><li>Troubleshoot PAM-related issues and provide Level 3 support for privileged access systems.</li><li>Conduct periodic access reviews, risk assessments, and vulnerability checks related to privileged identities.</li><li>Deliver technical documentation, training, and knowledge transfer to internal teams.</li></ul>Required Skills &amp; Experience:<ul><li>One Identity Safeguard Privileged Access Management (PAM) certification.</li><li>5+ years of experience in IT security, identity management, or infrastructure security.</li><li>Proven hands-on experience with One Identity Safeguard (Password Safe, Privileged Sessions) implementation and management.</li><li>Strong understanding of Privileged Access Management (PAM) principles and best practices.</li><li>Experience with Active Directory, LDAP, Azure AD, PowerShell, and Windows/Linux systems.</li><li>Familiarity with API integration, automation, and scripting for access workflows.</li><li>Understanding of Zero Trust, Role-Based Access Control (RBAC), and credential vaulting.</li><li>Knowledge of network protocols (RDP, SSH, HTTPS) and secure authentication mechanisms.</li><li>Excellent analytical, troubleshooting, and communication skills.</li></ul>Preferred Qualifications:<ul><li>Experience with Identity Governance &amp; Administration (IGA) or SIEM/SOAR integrations.</li><li>Exposure to cloud PAM and hybrid identity environments (AWS, Azure, Google Cloud).</li><li>Security certifications such as CISSP, CISM, CompTIA Security+, or similar.</li></ul>Soft Skills:<ul><li>Strong problem-solving and analytical thinking.</li><li>Ability to work independently and collaboratively in a global environment.</li><li>Effective communication and documentation skills.</li><li>Adaptability to new tools, technologies, and security frameworks.</li></ul>Reporting To:Manager / Head of Information SecurityJob Type: Full-timePay: From Rs200,000.00 per monthWork Location: Remote

One Identity PAM Safeguard Technologist

One Identity IAM Engineer is responsible for implementing, configuring, and supporting the One Identity Identity and Access Management (IAM) platform to manage user identities, access rights, and entitlements across enterprise systems. This role ensures secure and compliant identity lifecycle management, access governance, and seamless integration with critical business applications.Key Responsibilities:<ul><li>Design, deploy, and maintain One Identity Manager components, including Identity Manager, Authentication Services, Password Manager, Safeguard, and Starling Connect.</li><li>Configure and manage identity lifecycle processes such as provisioning, de-provisioning, role management, and attestation.</li><li>Develop and maintain system connectors for integrations with Active Directory, Azure AD, SAP, ServiceNow, CSV, SQL, and other enterprise applications.</li><li>Utilize One Identity Manager tools such as Designer, Manager, Job Queue Info, and Object Browser for configuration, troubleshooting, and optimization.</li><li>Implement and maintain Role-Based Access Control (RBAC), Segregation of Duties (SoD), and Access Request workflows to ensure compliance and governance.</li><li>Design and manage attestation and recertification campaigns to validate user access and maintain audit readiness.</li><li>Configure identity synchronization, data mapping, and attribute flows across connected systems to maintain data accuracy and consistency.</li><li>Administer Privileged Access Management (PAM) through One Identity Safeguard, ensuring secure handling of privileged credentials.</li><li>Customize and extend One Identity Manager functionality using scripts, workflows, and API-based integrations.</li><li>Perform regular troubleshooting, upgrades, and patch management of the IAM environment.</li><li>Collaborate with security, compliance, and application teams to enforce least-privilege and zero-trust access models.</li><li>Prepare and maintain detailed technical documentation, standard operating procedures, and compliance reports.</li></ul>Required Skills &amp; Experience:<ul><li>3&ndash;7 years of hands-on experience with One Identity Manager (OIM) or similar IAM platforms (SailPoint, Okta, ForgeRock, etc.).</li><li>Proven experience working with system connectors (Active Directory, Azure AD, SAP, ServiceNow, CSV, SQL).</li><li>Strong knowledge of One Identity Manager tools: Designer, Manager, Job Queue Info, and Object Browser.</li><li>Understanding of Role-Based Access Control (RBAC), Segregation of Duties (SoD), and Access Request processes.</li><li>Experience designing and managing attestation and recertification campaigns.</li><li>Solid grasp of identity synchronization concepts, data mapping, and attribute flow design.</li><li>Proficiency in PowerShell, SQL, and API-based integrations.</li><li>Strong understanding of Active Directory, LDAP, SSO, and MFA principles.</li><li>Knowledge of ITIL processes, identity governance, and compliance frameworks (GDPR, ISO 27001, SOX).</li><li>Excellent analytical, troubleshooting, and problem-solving skills with attention to detail.</li></ul>Preferred Qualifications:<ul><li>One Identity Certified Professional (OICP) certification.</li><li>Experience with cloud-based IAM solutions, especially Azure AD or AWS IAM.</li><li>Familiarity with DevOps integration (CI/CD pipelines for IAM configuration and deployment).</li></ul>Job Type: Full-timePay: From Rs150,000.00 per monthExperience:<ul><li>One Identity: 2 years (Required)</li></ul>Work Location: Remote

One Identity IAM Engineer

Join Cedrus Group (Pvt.) Limited. and explore 2   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

Cedrus Group (Pvt.) Limited.

ABOUT_COMPANY

One Identity PAM Safeguard Technologist

One Identity IAM Engineer