identity and access management engineer

Diligent

<div><div><p><b>About Us</b></p>
<p>
Diligent is the AI leader in governance, risk and compliance (GRC) SaaS solutions, helping more than 1 million users and 700,000 board members to clarify risk and elevate governance. The Diligent One Platform gives practitioners, the C-Suite and the board a consolidated view of their entire GRC practice so they can more effectively manage risk, build greater resilience and make better decisions, faster.</p>
<div>
At Diligent, we're building the future with people who think boldly and move fast. Whether you're designing systems that leverage large language models or part of a team reimaging workflows with AI, you'll help us unlock entirely new ways of working and thinking. Curiosity is in our DNA, we look for individuals willing to ask the big questions and experiment fearlessly - those who embrace change not as a challenge, but as an opportunity. The future belongs to those who keep learning, and we are building it together. At Diligent, you're not just building the future - you're an agent of positive change, joining a global community on a mission to make an impact.</div>
<p>
Learn more at diligent.com or follow us on LinkedIn and Facebook</p></div><p><b>
Position Overview:</b><br>
Diligent is seeking a Staff IAM Engineer to strengthen the security and efficiency of our global identity and access management ecosystem. In this role, you will design, implement, and manage enterprise IAM solutions&mdash;including Okta, AWS IAM, BeyondTrust PAM, and IGA platforms&mdash;ensuring secure access for employees, partners, and applications. You will collaborate across IT, Security, HR, and Application teams to enforce identity policies, manage access lifecycles, and support regulatory compliance. This is a high-impact role offering the opportunity to shape IAM strategy, mentor engineers, and enhance Diligent's overall security posture.</p>
<p><b>
Key Responsibilities:</b></p>
<p><b>
Design &amp; Implementation</b></p>
<ul>
<li><p>Architect, implement, and manage IAM solutions across cloud and on-premises environments.</p>
</li>
<li><p>Develop automated provisioning and deprovisioning workflows using IGA platforms (e.g., SailPoint, Saviynt).</p>
</li>
<li><p>Configure and maintain role-based access control, single sign-on (SSO), and multi-factor authentication (MFA).</p>
</li>
</ul><p><b>Security &amp; Compliance</b></p>
<ul>
<li><p>Develop and enforce IAM policies, standards, and procedures.</p>
</li>
<li><p>Lead or support IAM-related audits, risk assessments, and compliance initiatives (SOC2, HIPAA, ISO 27001).</p>
</li>
<li><p>Monitor IAM systems for security incidents and respond to threats.</p>
</li>
<li><p>Conduct regular access reviews and audits to ensure adherence to policies.</p>
</li>
</ul><p><b>Collaboration &amp; Leadership</b></p>
<ul>
<li><p>Partner with InfoSec, SRE, HR, and application teams to ensure seamless identity lifecycle processes.</p>
</li>
<li><p>Mentor junior IAM engineers and provide guidance to cross-functional stakeholders.</p>
</li>
<li><p>Document IAM processes and best practices for accessibility and consistency.</p>
</li>
<li><p>Provide training and awareness sessions on IAM best practices and security protocols.</p>
</li>
</ul><p><b>Required Experience &amp; Skills:</b></p>
<ul>
<li><p>6+ years in Information Security roles, with 4+ years in IAM-focused positions.</p>
</li>
<li><p>Bachelor's degree in Computer Science or related field, or equivalent experience.</p>
</li>
<li><p>Proven experience with enterprise IAM solutions, including Okta (SSO, MFA, Access Gateway, Lifecycle Management) and AWS IAM services (including Identity Center).</p>
</li>
<li><p>Hands-on experience with PAM solutions (BeyondTrust, CyberArk, or Delinea) and IGA platforms (SailPoint, Saviynt, Omada).</p>
</li>
<li><p>Strong understanding of IAM protocols and standards: SAML, OIDC, OAuth 2.0, SCIM, LDAP.</p>
</li>
<li><p>Experience with scripting/automation (Python, PowerShell, Terraform, CDK).</p>
</li>
<li><p>Knowledge of security frameworks (NIST, ISO) and directory technologies (Active Directory, LDAP, virtual directories).</p>
</li>
<li><p>Excellent problem-solving, communication, and project management skills.</p>
</li>
<li><p>Ability to work collaboratively in cross-functional teams.</p>
</li>
</ul><p><b>Preferred Experience &amp; Certifications:</b></p>
<ul>
<li><p>Relevant certifications: Okta Certified Professional, AWS Certified Security &ndash; Specialty, CISSP, BeyondTrust, or IGA platform certifications.</p>
</li>
<li><p>Familiarity with DevOps pipelines and IAM integration into CI/CD workflows.</p>
</li>
<li><p>Experience with virtualized or containerized environments (Kubernetes) and securing service identities.</p>
</li>
<li><p>Knowledge of compliance frameworks (SOC2, HIPAA, ISO 27001, NIST).</p>
</li>
<li><p>Strong awareness of emerging IAM threats and advanced security practices.</p></li></ul><br>
<p>
</p><div><p><b>What Diligent Offers You</b></p>
<ul>
<li><b>Creativity is ingrained in our culture.</b> We are innovative collaborators by nature. We thrive in exploring how things can be differently both in our internal processes and to help our clients</li>
<li><b>We care about our people. </b>Diligent offers a flexible work environment, global days of service, comprehensive health benefits, meeting free days, generous time off policy and wellness programs to name a few</li>
<li><b>We have teams all over the world</b>. We may be headquartered in New York City, but we have office hubs in Washington D.C., Vancouver, London, Galway, Budapest, Munich, Bengaluru, Singapore, and Sydney.</li>
<li><b>Diversity is important to us.</b> Growing, maintaining and promoting a diverse team is a top priority for us. We foster and encourage diversity through our Employee Resource Groups and provide access to resources and education to support the education of our team, facilitate dialogue, and foster understanding.</li>
</ul>
<p>Diligent created the modern governance movement. Our world-changing idea is to empower leaders with the technology, insights and connections they need to drive greater impact and accountability &ndash; to lead with purpose. Our employees are passionate, smart, and creative people who not only want to help build the software company of the future, but who want to make the world a more sustainable, equitable and better place.</p>
<p>
Headquartered in New York, Diligent has offices in Washington D.C., London, Galway, Budapest, Vancouver, Bengaluru, Munich, Singapore and Sydney. To foster strong collaboration and connection, this role will follow a hybrid work model. If you are within a commuting distance to one of our Diligent office locations, you will be expected to <b>work onsite at least 50% of the time.</b> We believe that in-person engagement helps drive innovation, teamwork, and a strong sense of community.</p><br>
<p></p>
<p>
We are a drug free workplace. Diligent is proud to be an equal opportunity employer. We do not discriminate based on race, color, religious creed, sex, national origin, ancestry, citizenship status, pregnancy, childbirth, physical disability, mental disability, age, military status, protected veteran status, marital status, registered domestic partner or civil union status, gender (including sex stereotyping and gender identity or expression), medical condition (including, but not limited to, cancer related or HIV/AIDS related), genetic information, or sexual orientation in accordance with applicable federal, state and local laws. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Diligent's EEO Policy and Know Your Rights. We are committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, you may contact us at recruitment@diligent.com.</p>
<p><b>
To all recruitment agencies:</b> Diligent does not accept unsolicited agency resumes. Please do not forward resumes to our jobs alias, Diligent employees or any other organization location. Diligent is not responsible for any fees related to unsolicited resumes.</p></div></div>

Staff Identity and Access Management Engineer

Cedrus Group (Pvt.) Limited.

<p>One Identity IAM Engineer is responsible for implementing, configuring, and supporting the One Identity Identity and Access Management (IAM) platform to manage user identities, access rights, and entitlements across enterprise systems. This role ensures secure and compliant identity lifecycle management, access governance, and seamless integration with critical business applications.</p><p><b>Key Responsibilities:</b></p><ul><li>Design, deploy, and maintain One Identity Manager components, including Identity Manager, Authentication Services, Password Manager, Safeguard, and Starling Connect.</li><li>Configure and manage identity lifecycle processes such as provisioning, de-provisioning, role management, and attestation.</li><li>Develop and maintain system connectors for integrations with Active Directory, Azure AD, SAP, ServiceNow, CSV, SQL, and other enterprise applications.</li><li>Utilize One Identity Manager tools such as Designer, Manager, Job Queue Info, and Object Browser for configuration, troubleshooting, and optimization.</li><li>Implement and maintain Role-Based Access Control (RBAC), Segregation of Duties (SoD), and Access Request workflows to ensure compliance and governance.</li><li>Design and manage attestation and recertification campaigns to validate user access and maintain audit readiness.</li><li>Configure identity synchronization, data mapping, and attribute flows across connected systems to maintain data accuracy and consistency.</li><li>Administer Privileged Access Management (PAM) through One Identity Safeguard, ensuring secure handling of privileged credentials.</li><li>Customize and extend One Identity Manager functionality using scripts, workflows, and API-based integrations.</li><li>Perform regular troubleshooting, upgrades, and patch management of the IAM environment.</li><li>Collaborate with security, compliance, and application teams to enforce least-privilege and zero-trust access models.</li><li>Prepare and maintain detailed technical documentation, standard operating procedures, and compliance reports.</li></ul><p><b>Required Skills &amp; Experience:</b></p><ul><li>3&ndash;7 years of hands-on experience with One Identity Manager (OIM) or similar IAM platforms (SailPoint, Okta, ForgeRock, etc.).</li><li>Proven experience working with system connectors (Active Directory, Azure AD, SAP, ServiceNow, CSV, SQL).</li><li>Strong knowledge of One Identity Manager tools: Designer, Manager, Job Queue Info, and Object Browser.</li><li>Understanding of Role-Based Access Control (RBAC), Segregation of Duties (SoD), and Access Request processes.</li><li>Experience designing and managing attestation and recertification campaigns.</li><li>Solid grasp of identity synchronization concepts, data mapping, and attribute flow design.</li><li>Proficiency in PowerShell, SQL, and API-based integrations.</li><li>Strong understanding of Active Directory, LDAP, SSO, and MFA principles.</li><li>Knowledge of ITIL processes, identity governance, and compliance frameworks (GDPR, ISO 27001, SOX).</li><li>Excellent analytical, troubleshooting, and problem-solving skills with attention to detail.</li></ul><p><b>Preferred Qualifications:</b></p><ul><li>One Identity Certified Professional (OICP) certification.</li><li>Experience with cloud-based IAM solutions, especially Azure AD or AWS IAM.</li><li>Familiarity with DevOps integration (CI/CD pipelines for IAM configuration and deployment).</li></ul><p>Job Type: Full-time</p><p>Pay: From Rs150,000.00 per month</p><p>Experience:</p><ul><li>One Identity: 2 years (Required)</li></ul><p>Work Location: Remote</p>

One Identity IAM Engineer

Uber

<div><b>About the role</b><br>
<br>
Our mission is to make Uber the industry model for secure and seamless access through differentiated, highly scalable, and extensible products and services, engineering standards, policy, and open communications. We are focusing on building both an identity and access management technology platform and user-facing products that give our users more control over their access, build trust, advance security, and enable our business.<br>
<br>
<b>What the Candidate Will Need / Bonus Points</b>
- What the Candidate Will Do -<br>
<br>
<ul><li>Provide technical leadership in designing, implementing, testing, and rolling out the Identity platform (e.g. SailPoint IIQ, Cloud Identity, LDAP, MFA, SSO, etc.) at Uber.</li></ul><br>
<ul><li>Practice Software engineering best practices while writing or reviewing code</li></ul><br>
<ul><li>Develop high quality engineering design documents for new integrations and initiatives</li></ul><br>
<ul><li>Engineer, Configure, Implement and maintain Identity and Access Management solutions and services</li></ul><br>
<ul><li>Resolve bugs through strong programming, critical problem solving, database query skills</li></ul><br>
<ul><li>Lead design and implementation engagements with other teams and be the voice of the team in those meeting while having empathy for the customer</li></ul><br>
<ul><li>Change Management to critical platforms using Terraform Services Standard Build code.</li></ul><br>
<ul><li>Design, Implement, maintain, manage and troubleshoot birthright provisioning and access certifications.</li></ul><br>
<ul><li>Use css and js based front end customization skills to customize interfaces and build custom interfaces.</li></ul>
- Basic Qualifications -<br>
<br>
<ul><li>7+ Years of experience in development, Design and consulting for developing, designing SailPoint IIQ or similar IGA solutions, and Authentication platforms at large organizations.</li></ul><br>
<ul><li>Experience with developing complex software systems scaling to millions of users with production quality deployment, monitoring, and reliability.</li></ul><br>
<ul><li>Experience with large-scale distributed storage and database systems (SQL e.g. MySQL)</li></ul><br>
<ul><li>Ability to decompose complex business problems and help lead multiple teams in solving them.</li></ul><br>
<ul><li>Understand Role-Based Access Control, Policy-Based Access Control, Attribute based access control, Governance, Access Certification in SailPoint</li></ul><br>
<ul><li>Experience in Web and Middleware technologies such as Nginx, Tomcat, Weblogic</li></ul><br>
<ul><li>Skill set in traffic management, Service and Session Load balancing skills primarily on HAProxy, NLB and F5 are added benefits.
</li></ul><br>
<ul><li>Leveraged tools like Cursor, GitHub Copilots to improve developer productivity</li></ul>
- Preferred Qualifications -<br>
<br>
<ul><li>3+ Years working experience in Devops, Linux, Puppet and Infrastructure automation</li></ul><br>
<ul><li>Experience working with AI/ML, MCP, Prompt engineering to build Identity solutions, or solve operational issues</li></ul><br>
<ul><li>Relevant Certifications from the Industry and Technology such as SailPoint, Google Cloud, Microsoft, Cisco and Redhat.</li></ul><br>
<ul><li>Relevant publications in personnel identity, authentication and authorization areas.</li></ul></div>

Senior AI/ML Engineer

<div><p>XPO India Shared Services</p><div><div><p><b>
Job Title: </b>Lead Engineer, Active Directory</p><div><b><br>
Reports to:</b> Manager, Technology Infrastructure</div></div><div><div><div><b><br>
Job Grade: </b>Assigned by Comp.</div><div><b>
Job Code:<br>
</b></div></div><div><div><b>FLSA Status: </b>Exempt</div><div><b>
FLSA Category, if Exempt:</b> Assigned by Comp.</div><div><b>
EEO Category:</b> Assigned by Comp</div></div></div><div><div><b><br>
Prepared By: </b>Mark Sobczak</div><div><div><b><br>
Date Approved: </b>Entered by Comp.</div><div><b>
Approved By:</b> Entered by Comp.</div></div></div><div><div><div><b><br>
GENERAL DESCRIPTION:</b></div><div>
The Lead Engineer, Active Directory provides strategic and technical leadership in the design, implementation, and optimization of the enterprise Active Directory environment. This senior-level role ensures the stability, scalability, and security of the identity and access management services, aligning directory architecture with business needs and industry best practices. Responsibilities include review design of existing Active Directory environments, collaborating with cross-functional teams to deliver scalable and resilient identity solutions, leveraging automation and scripting, evaluating system performance, resolving complex issues, performing large-scale domain consolidations, and contributing to continuous improvement initiatives aligned with business needs.</div></div></div><div></div><div><div><div><b><br>
ESSENTIAL DUTIES AND RESPONSIBILITIES:</b></div><ul><li>
Design and maintain a highly available, secure, and scalable Active Directory systems, including forests, domains, and trusts</li><li>
Develop long-term strategies for AD modernization, including cloud and hybrid identity integration (e.g., Azure AD, Entra ID)</li><li>
Define and enforce Group Policy Objects (GPO) standards for authentication, password policies, and privileged access management</li><li>
Implement and maintain AD-based activation, robust security controls for AD, including delegation models, RBAC, and auditing</li><li>
Collaborate with security teams to ensure compliance with regulatory frameworks (e.g., SOX, HIPAA, PCI DSS)</li><li>
Lead large-scale AD migrations, consolidations, and upgrades (e.g., forest/domain redesign, Windows Server upgrades)</li><li>
Serve as the highest-level escalation point for complex directory issues and outages</li><li>
Produce and maintain comprehensive architecture diagrams, policies, and operational documentation</li><li>
Mentor and guide engineers and administrators on best practices for AD operations</li></ul></div></div><div></div><div><div><div><b><br>
SUPERVISORY RESPONSIBILITIES:
</b></div><ul><li>This Job has no supervisory responsibilities.</li></ul></div></div><div></div><div><div><div><b><br>
DECISION-MAKING RESPONSIBILITIES:
</b></div><ul><li>This Job has no decision-making responsibilities.</li></ul></div></div><div></div><div><div><div><b><br>
EDUCATION/EXPERIENCE:</b></div><ul><li>
Minimum Required Education: Bachelor&rsquo;s degree or equivalent related work or military experience</li><li>
Minimum Required Experience: 5 years of experience managing Active Directory environments</li><li>
Desirable Education/Experience:</li></ul><ul><li><div><ul><li>
In-depth understanding of: AD Site component topology; Forest/Inter-Forest Operations and Topology; AADConnect; AD and Azure Environment Security; strong knowledge and experience with Group Policy management</li><li>
Expert Knowledge of AD on Windows Server 2016 and newer</li><li>
Strong experience with DNS management</li><li>
Strong experience with AD security policies and service accounts management</li><li>
Experience with CyberArk</li><li>
Experience with Saviynt Identity Manager</li><li>
Experience with VMWare environments</li><li>
Experience with Citrix Environments</li></ul></div></li></ul></div></div><div></div><div><div><div><b><br>
CERTIFICATES AND LICENSES:</b></div><div><b>
Desireable Certifications
</b></div><ul><li>Microsoft Certified: Identity and Access Administrator Associate</li><li>
Microsoft Certified: Windows Server Hybrid Adminstrator Associate</li><li>
Microsoft Certified Solutions Expert (MCSE) or legacy MCSA</li></ul></div></div><div><div><div><b><br>
JOB RELATED COMPETENCIES:
</b></div><div>To perform the job successfully, an individual should demonstrate the following competencies:</div><ul><li><b>
Analytical Skills &ndash;</b><ul><li>
Identifies and resolves problems</li><li>
Demonstrates attention to detail</li><li>
Identifies opportunities to increase accuracy and optimize resources and develops/recommends/implements solutions</li><li>
Strong aptitude for understanding and performing analysis of data, processes, policies, procedures and/or systems</li></ul></li></ul><ul><li><div><ul><li>
Composes thorough and detailed written technical documentation, procedures, manuals, etc.</li></ul></div></li></ul><ul><li><b>
Communication Skills &ndash;
</b></li></ul><ul><li><div><ul><li>Writes clearly and informatively while editing work for spelling and grammar mistakes</li><li>
Presents organized and thorough information and data appropriate for intended audience</li><li>
Utilizes variety of interpersonal styles and communication methods to effectively adapt to new work structures, processes, or cultures</li><li>
Demonstrates group presentation skills and excellent negotiation skills to deal effectively with individuals and groups within and outside the organization</li></ul></div></li></ul><ul><li><b>
Time Management Skills &ndash;</b></li></ul><ul><li><div><ul><li>
Demonstrates follow-up skills</li><li>
Provides timely and professional support to all internal/external customers and vendors</li><li>
Prioritizes regular workload, special tasks and concurrent projects, allocating time and resources to ensure that work is completed accurately and efficiently within established time frame</li></ul></div></li></ul><ul><li><b>
Other &ndash;</b><ul><li>
Self-motivated</li><li>
Team-oriented - Consults with Team members and management as needed to complete assigned responsibilities</li><li>
Works with minimal supervision</li><li>
Establishes and maintains effective, collaborative work relationships both internally and externally</li><li>
Maintains strict confidentiality</li></ul></li></ul></div></div><div></div><div><div><div><b><br>
Technical Competencies:</b></div><ul><li><div><ul><li>
Deep expertise in Active Directory architecture, security and replication</li><li>
Strong knowledge of DNS, DHCP, PKI, Kerberos, LDAP, and federation technologies (ADFS, SAML, OAuth)</li><li>
Experience with Azure AD/Entra ID, cloud integrations, and identity governance</li><li>
Excellent analytical, problem-solving, and project management skills</li><li>
Effective communication and leadership abilities to influence technical and non-technical stakeholders</li></ul></div></li></ul></div></div><div></div><div><div><div><b><br>
WORK ENVIRONMENT &amp; PHYSICAL DEMANDS:</b></div><ul><li>
Work Space<ul><li>
Office / cubicle workspace with moderate noise level</li><li>
Hybrid</li></ul></li><li>
Hours of Work/Travel<ul><li>
Extended hours including weekends</li><li>
Hours vary to cover nights and weekends, early mornings and evenings</li><li>
Provide on-call or after-hours support during maintenance windows, emergencies/outages, or system upgrades</li></ul></li><li>
Physical Activity<ul><li>
Able to lift up to 50 pounds</li><li>
Spend extended periods at a computer workstation</li></ul></li></ul></div></div></div><div></div><div><b><br>
XPO</b><b> is an Equal Employment Opportunity Employer (M/F/V/H)</b></div><p>
Be part of something big</p></div>

Lead Engineer, Active Directory

Solace Health

<div><p><i>Solace is a healthcare advocacy marketplace that connects patients and families to experts who help them understand and take charge of their personal health</i></p><p></p><h2 class="jobSectionHeader"><b>
About the Role</b></h2><p>
We're looking for a Senior Security Engineer to join our security team as our second security hire. You'll play a foundational role in building and scaling our corporate security program, security operations, and governance functions as we rapidly grow from 200 to 400+ employees.</p><p>
This is a high-impact role where you'll own critical security and compliance initiatives across the organization. You'll work directly with IT, HR, Legal, and leadership teams to build robust security controls, drive awareness, and establish a security-first culture while maintaining the agility a Series B startup requires.</p><p></p><h2 class="jobSectionHeader"><b>
About Solace
</b></h2><p>Healthcare in the U.S. is fundamentally broken. The system is so complex that 88% of U.S. adults do not have the health literacy necessary to navigate it without help. Solace cuts through the red tape of healthcare by pairing patients with expert advocates and giving them the tools to make better decisions&mdash;and get better outcomes.</p><p>
We're a Series B startup, founded in 2022 and backed by Inspired Capital, Craft Ventures, Torch Capital, Menlo Ventures, and Signalfire. Our fully remote U.S. team is lean, mission-driven, and growing quickly.</p><p>
Solace isn't a place to coast. We're here to redefine healthcare&mdash;and that demands urgency, precision, and heart. If you're looking to stretch yourself, sharpen your edge, and do the best work of your life alongside a team that cares deeply, you're in the right place. We&rsquo;re intense, and we like it that way.</p><p><b><i>
Read more in our Wall Street Journal funding announcement </i></b><b><i>here.</i></b></p><p></p><h2 class="jobSectionHeader"><b>
What You'll Do</b></h2><p></p><p><b>
Identity &amp; Access Management (Primary Focus)</b></p><ul><li><p>
Manage and optimize Okta SSO deployment across 70+ SaaS applications</p></li><li><p>
Implement and enforce role-based access controls (RBAC) and least privilege principles</p></li><li><p>
Lead quarterly access reviews and user lifecycle management</p></li><li><p>
Drive adoption of MFA and implement conditional access policies</p></li><li><p>
Oversee endpoint management via Jamf and device compliance standards</p></li></ul><p><b>
Security Governance &amp; Compliance</b></p><ul><li><p>
Drive HIPAA and SOC 2 compliance maintenance through Vanta</p></li><li><p>
Manage vendor risk assessment program and Business Associate Agreement (BAA) collection for 70+ vendors</p></li><li><p>
Develop and maintain security policies, standards, and procedures</p></li><li><p>
Support customer security assessments and RFP responses</p></li><li><p>
Prepare for HITRUST certification and future IPO readiness requirements</p></li></ul><p><b>
Security Awareness &amp; Training</b></p><ul><li><p>
Design and deliver security awareness training</p></li><li><p>
Create role-specific training programs (HIPAA, phishing, data handling, incident response)</p></li><li><p>
Build and maintain security documentation and knowledge base</p></li><li><p>
Develop metrics and reporting on training completion and effectiveness</p></li><li><p>
Partner with HR on security onboarding and offboarding processes</p></li></ul><p><b>
Security Operations &amp; Monitoring</b></p><ul><li><p>
Implement and tune security monitoring and alerting systems</p></li><li><p>
Manage security logging and audit trail requirements for HIPAA compliance</p></li><li><p>
Conduct security assessments and risk analysis</p></li><li><p>
Lead incident response coordination and post-incident reviews</p></li><li><p>
Track and remediate security findings from audits and assessments</p></li></ul><p><b>
Risk Management &amp; Third-Party Security</b></p><ul><li><p>
Maintain risk register and coordinate risk treatment activities</p></li><li><p>
Conduct vendor security assessments and ongoing monitoring</p></li><li><p>
Support procurement reviews for security and compliance implications</p></li><li><p>
Manage security aspects of contractor access and data handling</p></li></ul><h2 class="jobSectionHeader"><b><br>
What You Bring to the Table</b></h2><ul><li><p>
4+ years in corporate security, GRC, security operations, or similar roles</p></li><li><p>
Hands-on experience with identity and access management (Okta, Azure AD, or similar IAM platforms)</p></li><li><p>
Practical HIPAA implementation experience in healthcare or regulated environments</p></li><li><p>
Experience building security awareness programs and delivering training to diverse audiences</p></li><li><p>
Demonstrated success implementing security controls in cloud-first organizations</p></li><li><p>
Familiarity with compliance frameworks (SOC 2, HIPAA, HITRUST) and audit processes</p></li><li><p>
Experience with endpoint management solutions (Jamf, Intune, or similar)</p></li><li><p>
Security certifications (CISSP, CISM, CISA, Security+, or similar)</p></li><li><p>
Experience with GRC platforms (Vanta, Drata, SecureFrame)</p></li><li><p>
Background in IT systems administration or helpdesk</p></li><li><p>
Experience managing security for remote/distributed workforces</p></li><li><p>
Familiarity with vendor risk management platforms</p></li><li><p>
Knowledge of data privacy regulations (GDPR, CCPA)</p></li><li><p>
Ability to collaborate and balance security rigor with business enablement</p></li></ul><p><i>
Applicants must be based in the United States.</i></p><p></p><p><b>
Up for the Challenge?
</b></p><p>We look forward to meeting you.</p><p></p><p><b>
Fraudulent Recruitment Advisory:</b> Solace Health will <b>NEVER</b> request bank details or offer employment without an interview. All legitimate communications come from official solace.health emails only or ashbyhq.com. Report suspicious activity to recruiting@solace.health or advocate@solace.health.</p></div>

Senior Security Engineer

Blue Yonder

<div></div><div><div>Scope</div><ul><li>
Provide critical support for our Identity Governance and Administration (IGA) program while advancing our MFA everywhere initiative. The IGA program is essential to meet our identity compliance controls and internal audit requirements, and enhanced MFA maturity directly impacts customer confidence in our security posture</li></ul><div></div><div>
What you&rsquo;ll do:</div><ul><li>
Design, implement, and maintain Identity Governance and Administration (IGA) solutions, including user lifecycle management, access certification workflows, and automated provisioning/deprovisioning processes</li><li>
Support mentorship of more junior team members and upleveling the overall technical skill of the identity and access management team</li><li>
Identify strategic gaps in identity governance capabilities, analyzing current state and recommending improvements to IAM roadmaps and organizational identity strategy</li><li>
Collaborate with cross-functional teams to integrate IAM best practices into application development, cloud deployments, and system architecture, ensuring secure identity integration across environments</li><li>
Develop and maintain IAM automation tools for identity lifecycle management, access reviews, policy enforcement, and continuous identity risk assessment</li><li>
Monitor and remediate identity-related vulnerabilities, excessive privileges, and policy violations from IGA platforms, identity scanners, and access analytics tools</li><li>
Stay current with emerging IAM technologies, identity standards (SAML, OAuth, OIDC), and governance frameworks, influencing organizational identity architecture with industry best practices</li><li>
Support the detection, investigation, and resolution of identity-related security incidents, including compromised accounts and unauthorized access events</li><li>
Configure and optimize identity management platforms, directory services, privileged access management solutions, and identity analytics tools</li><li>
Support compliance efforts (SOX, PCI-DSS, ISO 27001, SOC 2) by implementing identity controls, access governance reporting, and audit capabilities for regulatory requirements</li><li>
Document IAM policies, identity governance processes, access standards, and identity architecture diagrams</li></ul><div></div><div>
What we are looking for:</div><ul><li>
5+ years of experience in Identity and Access Management, Security Engineering, or IAM-focused technical roles with hands-on IGA platform experience</li><li>
Expert knowledge of Identity Governance and Administration platforms (e.g., SailPoint, Saviynt, Oracle IGM, Microsoft Identity Manager) and their implementation across enterprise environments</li><li>
Deep understanding of IAM fundamentals including identity lifecycle management, access certification, role-based access control (RBAC), attribute-based access control (ABAC), and segregation of duties (SoD) enforcement</li><li>
Strong experience with cloud IAM services across AWS, Azure, and GCP, including identity federation, directory integration, and cross-platform identity governance</li><li>
Proficient with identity-related scripting and automation (e.g., PowerShell, Python, REST APIs) for IGA workflows, identity connectors, and access provisioning processes</li><li>
Experience implementing IAM solutions in fast-paced or highly regulated environments (finance, healthcare, SaaS, etc.) with demonstrated ability to manage complex identity governance requirements and regulatory compliance at enterprise scale.</li><li>
Preferred Qualifications:</li><li>
Hands-on experience with any of the following:<ul><li>
Saviynt IGA Platform</li><li>
IAM Lifecycle Automation</li><li>
API Integrations (REST, SOAP, GraphQL, Webhooks)</li><li>
AI-integrated workflows</li></ul></li><li>
Experience leading organization wide initiatives and driving security outcomes that empower business goals.</li></ul><div></div><div>
Our Values</div><div><br>
If you want to know the heart of a company, take a look at their values. Ours unite us. They are what drive our success &ndash; and the success of our customers. Does your heart beat like ours? Find out here: <div>Core Values</div></div><div></div><div>
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.</div></div>

Senior Security Engineer (IAM)

AVS Info systems limited

<p><b>Relevant Number of Years</b> &ndash; 10+ years</p><p><b>Responsibilities</b></p><p>&middot; Implementation of Core-PAS CyberArk components (EPV, DR EPV, HA EPV, PVWA, PSM, PSMP, CPM).</p><p>&middot; Implementation of Privileged Threat Analytics (PTA)</p><p>&middot; Implementation of Advanced Modules (AAM &ndash; CP, AAM &ndash; CCP, Alero, HTML 5)</p><p>&middot; Development of Connection components using Auto-IT for Web applications &amp; thick clients</p><p>&middot; Knowledge about PAM Access Reviews</p><p>&middot; Knowledge about Identity modules (Eg: Sailpoint, ISIM)</p><p>&middot; Knowledge about Access Modules (Eg: Azure SSO, ISAM)</p><p>&middot; Knowledge about Active Directories (Microsoft AD, Azure AD)</p><p>&middot; Integration of SIEM, SNMP, SMTP, SAML, LDAPS with CyberArk</p><p>&middot; Development of CPM Plugins for SSH &amp; Web based applications.</p><p>&middot; Certification &ndash; Defender/Sentry (Mandatory), CDE (Optional)</p><p>&middot; Preparation of Architecture designs for all modules of CyberArk</p><p>&middot; Creation &amp; review of High level project plan</p><p>&middot; Provide consulting advise to customer/stakeholders during technical discussions.</p><p>&middot; Creation of Project Documentation (HLD, DTD, SoP, KEDB, Breakglass, etc.,)</p><p>&middot; Assist colleagues from Support &amp; Project team with technical queries</p><p>&middot; Knowledge on CyberArk REST API&rsquo;s</p><p>&middot; Atleast 1 Programming Language at L2 level (Eg: Powershell, Python, etc.,)</p><p>&middot; Able to assist Develop &amp; tester with Automation initiates</p><p>&middot; Able to create Discovery rules</p><p>&middot; Run DNA Scans</p><p>&middot; Hands-on with Device types &ndash; Windows, *Nix, Network, Database, SAP, Web applications, Tier 0&amp;1 accounts, Domain Controllers</p><p>&middot; Understanding of Azure PIM</p><p>&middot; Knowledge about one more PAM solution is a added advantage</p><p>&middot; Assist with new SOW/Contract Creation &amp; prepare effort estimation for new initiates</p><p>&middot; Prepare roadmap for the customer based on the vision</p><p>&middot; Knowledge about Power BI reporting</p><p>&middot; Knowledge about PAS Reporter, Telemetry, Export Vault Data</p><p>Job Types: Full-time, Permanent</p><p>Pay: From &#8377;200,000.00 per month</p><p>Work Location: Remote</p>

CyberArk Architect/ Consultant/ SME

Search 10000+ Identity and access management engineer jobs near you this October. New roles added regularly across leading industries. Apply today.