identity and access management engineer

Optimum

<div><div><div><h2 class="jobSectionHeader"><b>Job Summary</b></h2>
</div><div><p>
The IAM &amp; PAM Engineer will be responsible for ensuring that Optimum's Identity &amp; Access Management and Privileged Access Management platform is implemented, designed, and maintained to ensure that all applications being used within the company are on-boarded for access entitlements, provisioning and de-provisioning of users. Candidate must be familiar in integrating and managing privileged accounts, ensuring security compliance, and providing technical support for CyberArk or similar related technologies. Candidate must be well versed with Identity federation principles as the person will have the responsibility to set the standard for the firm in terms of identity &amp; access management as well as privilege access management. Candidate must also have role-based access control (RBAC) experience in relation to design, implementation, and remediation. This position requires participation in technical research and development to enable continuing innovation for Privilege Access Management and Information Risk management. CyberArk Experience Preferred.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Responsibilities</b></h2>
</div><div><ul><li>Provides information security subject matter expertise in support of projects sponsored by business units and other EIT departments.</li><li>
Install and configure CyberArk PAS solutions or related technology, including the Enterprise Password Vault (EPV), Central Policy Manager (CPM), Password Vault Web Access (PVWA), Privileged Session Manager (PSM), and Privileged Session Manager Proxy (PSMP), Endpoint Privilege Access Management (EPAM), Third Party Privilege Access Management (VPAM).</li><li>
Administer and engineer CyberArk for integrating privileged accounts across on-premises and cloud environments, including Azure.</li><li>
Collaborate with cross-functional teams to integrate CyberArk solutions into both on-premises and cloud-based systems.</li><li>
Integration of Automated Password rotation on Service Accounts, and other Highly Privileged accounts.</li><li>
Conduct regular assessments and audits to ensure the security and compliance of privileged accounts and access across all environments.</li><li>
Assist in the documentation of processes, procedures, and best practices for CyberArk administration and privileged access management.</li><li>
Stay up-to-date on the latest developments in CyberArk technologies and cybersecurity best practices through self-study and training opportunities.</li><li>
Ensures that system implementations conform to established company security standards and/or industry best practices.</li><li>
Participates in the budget process by specifying Information Security technical, resource and personnel requirements for capital projects.</li><li>
Conducts laboratory and pilot evaluations of security technologies.</li><li>
Provides information security consulting services to business units and other departments.</li><li>
Maintains support relationships with various vendors and manufacturers.</li><li>
Develops and maintains minimum security baseline configurations for various handheld, workstation and server operating systems.</li><li>
Processes Service Desk tickets assigned to the Engineering team. Responsible for problem resolution.</li><li>
Develops documentation including operations manuals, runbooks, procedures and problem resolutions.
<br>
</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>Qualifications</b></h2>
</div><div><ul><li>Bachelor's degree in Information Systems, IT Security, Cybersecurity, Computer Science or equivalent experience required</li><li>
Minimum 3-5 years of experience in Information Security with focus on Identity and Access Management with Privileged Access solution components such as CyberArk - EPV, CPM, PVWA, PSM, PSMP, EPAM, and VPAM</li><li>
Deep understanding of RBAC (Role Based Access Control), Single Sign On (SSO), and Privileged Account Management (PAM), Identity and Access Management (IAM)</li><li>
Identity Access and Governance management - Preferably skills with SailPoint, Okta, and a Privilege Access Management solution such as CyberArk</li><li>
Strong Analytical background</li><li>
Understanding of Active Directory domains, LDAP directories, Oracle Identity, Unix Identity.</li><li>
Strong understanding of cloud computing concepts including experience with Microsoft Azure, Amazon Web Services, Google Cloud Platform</li><li>
Knowledge of scripting (Unix/Linux shell, Perl and Windows) or programming (Visual Basic and MS Access)</li><li>
Expert knowledge of Microsoft Active Directory, Azure Active Directory</li><li>
Advanced level knowledge in architecture and implementation of identity and access management solutions</li><li>
Extensive experience in design and troubleshooting of user provisioning and deprovisioning workflows, including automation of access and access removal to various applications and/or authorities</li><li>
Demonstrated knowledge of identity, authentication, security, privacy, and compliance and how they factor into cloud and hybrid solutions</li><li>
Strong working knowledge of network architecture and standards for large enterprise</li><li>
Knowledge of compliance standards and practices such as PCI DSS, Sarbanes Oxley, and Department of Justice National Security Agreement</li><li>
Ability to assemble project requirements and contribute to a security design implementation from inception to completion</li><li>
Familiarity with AI Tools and AI First mindset</li><li>
This position follows a hybrid work model and is based at our Plano, TX office</li></ul></div></div></div>

System Engineer- Identity

<div><h3 class="jobSectionHeader"><b>About the job</b></h3>
<p>
The Information Security Engineer is responsible for designing, implementing, and maintaining security controls across the organization's cloud, identity, endpoint, and network environments. This role focuses on engineering secure configurations, building automation, integrating security tooling, and ensuring the ongoing protection of systems and data.</p>
<p>
The Information Security Engineer works closely with the IT &amp; InfoSec Helpdesk, Infrastructure teams, and Development teams to architect secure solutions, conduct security assessments, and implement governance frameworks aligned to ISO 27001 and internal InfoSec policies. This role also supports complex incident response activities, assists in root-cause analysis, and ensures controls are implemented following secure-by-design principles.</p>
<p><b>
The shift for this positions is 08.00 - 17.00 CET/CEST with Saturday &amp; Sunday off.</b></p>
<h3 class="jobSectionHeader"><b>
Responsibilities</b></h3>
<p><b>
Security Engineering &amp; Control Implementation:</b></p>
<ul>
<li>Design, implement, and maintain security controls across Azure, Entra ID, Microsoft 365, network, and endpoint environments.</li>
<li>Develop and maintain secure configurations, baselines, and policy frameworks using Azure Policy, Intune compliance, and conditional access.</li>
<li>Integrate and optimize security tools including Microsoft Defender suite, SIEM/SOAR platforms, cloud security posture management, and identity governance systems.</li>
</ul>
<p><b>Cloud &amp; Infrastructure Security Architecture:</b></p>
<ul>
<li>Support the design and review of cloud architectures, including secure VNet design, firewalls/NSGs, Private Link, and hybrid connectivity.</li>
<li>Implement key cloud security protections such as encryption, identity governance, privileged access control, and secure automation frameworks.</li>
<li>Partner with Cloud Engineers to codify security controls using Infrastructure-as-Code (IaC).</li>
</ul>
<p><b>Identity &amp; Acess Security (Entra ID &amp; M365):</b></p>
<ul>
<li>Implement and manage identity governance: MFA, Conditional Access, PIM, RBAC, role lifecycle automation.</li>
<li>Review, assess, and refine authentication and access control configurations.</li>
<li>Conduct periodic privileged access audits and align identity practices with Zero Trust principles.</li>
</ul>
<p><b>Security Monitoring &amp; Threat Engineering:</b></p>
<ul>
<li>Tune and enhance SIEM/Sentinel detections, automation, and response playbooks.</li>
<li>Develop KQL detection queries aligned to threat behaviours and emerging attack patterns.</li>
<li>Improve signal fidelity across Defender platforms and integrate new data sources</li>
</ul>
<p><b>Incident Response &amp; Digital Forensics Support:</b></p>
<ul>
<li>Serve as technical escalation during high-severity incidents.</li>
<li>Perform deep-dive investigations into identity compromise, cloud misconfigurations, lateral movement, and high-risk endpoint activity.</li>
<li>Provide forensic artefact analysis support (logs, file metadata, registry data, process analysis).</li>
<li>Implement long-term remediation items and drive post-incident improvements.</li>
</ul>
<p><b>Vulnerability &amp; Risk Management</b></p>
<ul>
<li>Support vulnerability assessment programs across cloud, endpoints, and SaaS platforms.</li>
<li><ul><li>Validate remediation efforts with system owners and ensure alignment to risk thresholds.</li></ul></li>
<li><ul><li>Interpret vulnerabilities based on severity, real-world exploitability, and exposure in Microsoft, cloud, and identity stacks.</li></ul></li>
</ul>
<p><b>Compliance, Governance &amp; ISO 27001 Alignment</b></p>
<ul>
<li>Implement and maintain controls aligned with ISO 27001:2022 requirements.</li>
<li>Support evidence collection, audit preparation, and remediation of nonconformities.</li>
<li>Maintain accurate documentation including policies, baselines, runbooks, and reference diagrams.</li>
</ul>
<p><b>Automation, Scripting &amp; Continuous Improvement</b></p>
<ul>
<li>Build and maintain automation using PowerShell, Azure CLI, Logic Apps, and Functions.</li>
<li>Automate user lifecycle, security state validation, incident containment tasks, and compliance reporting.</li>
<li>Continuously identify opportunities to strengthen security posture through modernization, simplification, and automation.</li>
</ul>
<p><b>Collaboration &amp; Knowledge Leadership</b></p>
<ul>
<li>Work closely with Cloud, IT Support, Development, and Compliance teams to embed security into operational and architectural decision-making.</li>
<li>Mentor InfoSec Analysts and provide guidance on investigation techniques, threat identification, and control operation.</li>
<li>Deliver internal training, knowledge-transfer sessions, and documentation.</li>
</ul>
<p><b>Ticket Resolution &amp; Request Fulfilment</b></p>
<ul>
<li>Respond to and resolve incidents and requests within the agreed SLAs.</li>
<li>Handle user and complex incidents across Azure, AVD, and M365; drive quick MTTR and reduce ticket reopens via robust post-resolution notes and KB updates.</li>
<li>Fulfil service requests (e.g., resource provisioning, AVD image updates, M365 security baselines, conditional access adjustments).</li>
<li>Problem management: identify recurring issues, perform root-cause analysis, raise Problem records, and propose corrective/preventive actions.</li>
<li>Escalation management: engage vendor support only after thorough triage and data collection (logs, timelines, impacted scope).</li>
</ul><h3 class="jobSectionHeader"><b>About You</b></h3>
<p><b>
Required Experience</b></p>
<ul>
<li>4+ years of experience in information security engineering, cloud security, or infrastructure security roles.</li>
<li>Hands-on experience implementing security controls in Azure and Microsoft 365 ecosystems.</li>
<li>Experience with Defender for Endpoint, Defender for Cloud, Defender for Identity, and Sentinel.</li>
<li>Experience with secure cloud networking, identity governance, and Zero Trust principles.</li>
<li>Experience supporting complex incident response investigations.</li>
<li>Familiarity with ITIL processes (incident, change, problem).</li>
<li>Understanding of security frameworks (i.e. ISO 27001:2022) and data privacy regulations (i.e. GDPR).</li>
</ul>
<p><b>Technical Skills</b></p>
<ul>
<li>Azure security architecture, governance, and configuration.</li>
<li>Advanced Entra ID identity governance and access control.</li>
<li>Endpoint and cloud threat detection (Defender suite).</li>
<li>SIEM/SOAR engineering (Sentinel, Logic Apps).</li>
<li>PowerShell, automation, and API integration.</li>
<li>KQL, log analysis, and detection engineering.</li>
<li>Infrastructure-as-Code familiarity (Bicep/ARM/Terraform).</li>
<li>Secure network design, segmentation, and encryption practices.</li>
</ul>
<p><b>Soft skills</b></p>
<ul>
<li>Customer focused: prioritizing the needs and satisfaction of users and clients in every interaction.</li>
<li>Communication: effective communication skills to collaborate with cross-functional teams, management, and external stakeholders.</li>
<li>Collaborative: working effectively with cross-functional teams to achieve common goals.</li>
<li>Innovative: consistently seeking new ideas and approaches to solve problems and improve processes.</li>
<li>Problem-solving: analytical mindset to identify gaps and recommend solutions.</li>
<li>Adaptability: the infrastructure, security, and client landscape evolve rapidly, so adaptability is crucial.</li>
</ul>
<p>The following qualifications are mandatory:</p>
<ul>
<li>CompTIA Security+ or similar (i.e. ISC2 Certified in Cybersecurity)</li>
<li>SC-300: Identity &amp; Access Administrator</li>
</ul>
<p>The following qualifications would be advantageous:</p>
<ul>
<li>AZ-500: Azure Security Engineer</li>
<li>SC-200: Security Operations Analyst</li>
<li>ISO 27001: 2022 Foundations</li>
</ul><h3 class="jobSectionHeader"><b>We </b><b>offer</b></h3>
<ul><li>The flexibility to work 100% remotely with no wasted commute time and travel costs.</li>
<li>A position at a fast-paced international company with ambitious gaming, e-commerce, and tech clients.</li>
<li>A diverse and inclusive culture with people from 80+ countries, speaking 25+ languages - where we celebrate everyone's uniqueness.</li>
<li>Innovative digital tools, and continuous opportunities for learning and development.</li>
<li>Access to Udemy Business for learning and development.</li>
<li>Fun employee engagement activities and participation in 5CA employee-lead communities such as 5CA Connect, Pride, 5CA Gamers, Women of 5CA, to name a few.</li>
<li>Location-specific benefits</li></ul></div><p></p>

Information Security Engineer [Remote]

The Home Depot

<div><p><b>Position Purpose:</b></p><div><p>
The Cybersecurity Principal Engineer, AI Identity (Non‑Human Identity) is a senior, hands‑on technical leader within The Home Depot Cybersecurity Architecture &amp; Innovation team. This role provides enterprise‑wide thought leadership and architectural direction for Identity and Access Management (IAM) with a specialized focus on AI, agentic AI, and Non‑Human Identity (NHI).</p><p></p><p>
The Principal Engineer serves as a recognized company and industry expert, combining deep IAM expertise with a broad understanding of cybersecurity, cloud, and modern enterprise technologies. The role operates in a horizontal capacity, supporting and guiding multiple cybersecurity and technology functions through solution design, evaluation, prototyping, documentation, and operationalization.</p><p></p><p>
This position plays a critical role in shaping Home Depot&rsquo;s AI identity strategy and maturity, defining the foundational IAM architecture and technology enablement stack required to securely support AI workloads, services, and autonomous agents. The Principal Engineer partners closely with cybersecurity, engineering, architecture, and operations teams to ensure identity solutions are scalable, secure, and aligned to both current and future‑state enterprise architecture.</p></div><p><b><br>
Key Responsibilities:</b></p><ul><li>
100% Deliver Execution, Plans &amp; Aligns - Review, analyze, identify, and provide solutions to mitigate potential security control gaps enterprise wide; Collaborate across teams to reduce vulnerabilities, risks, and incident management; Partner with engineers, technology, and business partners to implement and maintain a secure environment</li></ul><p><b><br>
Direct Manager/Direct Reports:</b></p><ul><li>
This position typically reports to Distinguished Engineer</li><li>
This position has 0 Direct Reports</li></ul><p><b><br>
Travel Requirements:</b></p><ul><li>
No travel required.</li></ul><p><b><br>
Physical Requirements:</b></p><ul><li>
Most of the time is spent sitting in a comfortable position, and there is frequent opportunity to move about. On rare occasions, there may be a need to move or lift light articles.</li></ul><p><b><br>
Working Conditions:</b></p><ul><li>
Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.</li></ul><p><b><br>
Minimum Qualifications:</b></p><ul><li>
Must be eighteen years of age or older.</li><li>
Must be legally permitted to work in the United States.</li></ul><div><ul><li>
Extensive enterprise experience in Identity and Access Management (IAM), including identity provisioning, authentication, and authorization.</li><li>
Hands‑on experience with Non‑Human Identity (NHI), such as service accounts, workload identities, or machine identities</li><li>
Proven ability to independently evaluate, design, and prototype complex security or identity solutions</li><li>
Experience working within large, highly integrated enterprise technology environments</li><li>
Strong understanding of core cybersecurity concepts, including authentication/authorization, encryption, segmentation, and secure system design</li><li>
Broad technical knowledge across cloud, compute, networking, databases, and application development</li><li>
Experience with cloud platforms (e.g., AWS, Azure, or equivalent) and cloud‑native identity patterns</li><li>
Proficiency in at least one programming or scripting language used for prototyping, automation, or integration</li><li>
Ability to produce clear technical documentation, including architecture artifacts and design decisions</li><li>
Strong collaboration skills and the ability to provide technical guidance across cross‑functional teams</li></ul></div><p></p><p><b><br>
Preferred Qualifications:</b></p><div><ul><li>
Demonstrated experience applying IAM concepts to AI, agentic AI, and emerging AI technology patterns</li><li>
Experience designing or supporting identity strategies for AI workloads, services, or autonomous agents</li><li>
Proven experience developing holistic reference architectures, roadmaps, and future‑state designs</li><li>
Familiarity with Zero Trust principles and modern identity‑centric security architectures</li><li>
Experience guiding engineering and operations teams through operationalization and technology handoff</li><li>
Knowledge of industry cybersecurity frameworks and standards (e.g., NIST or similar)</li><li>
Experience conducting technology evaluations, proofs of concept, and capability assessments</li><li>
Ability to represent IAM or security architecture in cross‑functional design and innovation forums</li><li>
Demonstrated success operating independently in fast‑moving, evolving technology initiatives</li></ul></div><p><br>
</p><p><b>Minimum Education:</b></p><ul><li>
The knowledge, skills, and abilities are typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job.</li></ul><p><b><br>
Preferred Education:</b></p><ul><li>
No additional education</li></ul><p><b><br>
Minimum Years of Work Experience:</b></p><ul><li>
10</li></ul><p><b><br>
Preferred Years of Work Experience:</b></p><ul><li>
No additional years of experience</li></ul><p><b><br>
Minimum Leadership Experience:</b></p><ul><li>
None</li></ul><p><b><br>
Preferred Leadership Experience:</b></p><ul><li>
None</li></ul><p><b><br>
Certifications:</b></p><ul><li>
None</li></ul><p><b><br>
Competencies:</b></p><ul><li>
Decision Quality</li><li>
Plans and Aligns</li><li>
Develops Talent</li><li>
Manages Conflict</li></ul></div><p></p>

Cybersecurity Principal, AI Identity (REMOTE)

Capgemini

<div><div><div><div><p>Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you&rsquo;d like, where you&rsquo;ll be supported and inspired by a collaborative community of colleagues around the world, and where you&rsquo;ll be able to reimagine what&rsquo;s possible. Join us and help the world&rsquo;s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.</p>
<div><div><div><h2 class="jobSectionHeader"><b>Location</b></h2>
</div><div><p>This is a remote role based in the USA.</p>
</div></div><div><div><h2 class="jobSectionHeader"><b>About the Job You're Considering</b></h2>
</div><div><p>We are looking for an experienced <b>AWS IAM Engineer</b> to implement, manage, and scale enterprise Identity and Access Management (IAM) solutions across AWS environments. This role focuses on hands-on engineering, automation, and standardization of IAM workloads, with a strong emphasis on <b>IAM persona buildout for services</b>, <b>infrastructure-as-code modernization</b>, and <b>integration with Identity Directory / Identity Governance (IDC) platforms</b>.</p>
</div></div><div><div><h2 class="jobSectionHeader"><b>Your Role</b></h2>
</div><div><p><b>IAM Engineering &amp; Operations</b></p>
<ul><li>Engineer and maintain <b>AWS IAM workloads</b> across multi-account environments</li>
<li>Build, configure, and manage <b>IAM roles, policies, permission boundaries, and trust relationships</b> for human and service identities</li>
<li>Implement <b>least-privilege access models</b> using RBAC and ABAC principles</li>
<li>Troubleshoot and resolve IAM-related access and permission issues</li><br>
</ul><p></p><p><b>IAM Persona Buildout &amp; Enterprise Rollout</b></p>
<ul><li>Design and implement <b>IAM personas for services, applications, and platform workloads</b></li>
<li>Support <b>enterprise-scale rollout</b> of standardized IAM personas across development, staging, and production environments</li>
<li>Ensure IAM persona consistency, reusability, and compliance across teams and accounts</li>
<li>Partner with security, platform, and application teams to onboard services to approved IAM models</li><br>
</ul><p></p><p><b>Infrastructure as Code &amp; Migration</b></p>
<ul><li>Convert and modernize <b>CloudFormation-based IAM roles and policies to Terraform</b></li>
<li>Engineer <b>Terraform modules</b> for reusable IAM components (roles, policies, instance profiles, service roles)</li>
<li>Maintain and enhance Terraform pipelines for IAM deployments</li>
<li>Support migration activities from legacy IAM implementations (e.g., CNF or bespoke frameworks) to Terraform</li><br>
</ul><p></p><p><b>Identity Directory / Identity Governance (IDC)</b></p>
<ul><li>Integrate AWS IAM with <b>IDC solutions</b> for identity lifecycle management</li>
<li>Engineer IAM workflows supporting <b>identity provisioning, deprovisioning, and access reviews</b></li>
<li>Support federation and identity synchronization between AWS and IDC platforms</li>
<li>Assist with audit readiness, compliance reporting, and governance controls</li>
</ul></div></div></div><p>The base compensation range for this role in the posted location is: <b>$70,176- $144,100.</b></p>
<p>Capgemini provides compensation range information in accordance with applicable national, state, provincial, and local pay transparency laws. The base compensation range listed for this position reflects the minimum and maximum target compensation Capgemini, in good faith, believes it may pay for the role at the time of this posting. This range may be subject to change as permitted by law.</p>
<p>The actual compensation offered to any candidate may fall outside of the posted range and will be determined based on multiple factors legally permitted in the applicable jurisdiction.</p>
<p>These may include, but are not limited to: Geographic location, Education and qualifications, Certifications and licenses, Relevant experience and skills, Seniority and performance, Market and business consideration, Internal pay equity.</p>
<p>It is not typical for candidates to be hired at or near the top of the posted compensation range.</p>
<p>In addition to base salary, this role may be eligible for additional compensation such as variable incentives, bonuses, or commissions, depending on the position and applicable laws.</p><br>
<p></p><p><b>Capgemini offers a comprehensive, non-negotiable benefits package to all regular, full-time employees.</b> In the U.S. and Canada, available benefits are determined by local policy and eligibility and may include:</p>
<ul><li>Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade, Company paid holidays, Personal Days, Sick Leave</li>
</ul><ul><li>Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)</li>
<li>Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)</li>
<li>Life and disability insurance</li>
<li>Employee assistance programs</li>
<li>Other benefits as provided by local policy and eligibility</li>
</ul><p><b>Important Notice:</b> Compensation (including bonuses, commissions, or other forms of incentive pay) is not considered earned, vested, or payable until it becomes due under the terms of applicable plans or agreements and is subject to Capgemini&rsquo;s discretion, consistent with applicable laws. The Company reserves the right to amend or withdraw compensation programs at any time, within the limits of applicable legislation.</p><br>
<p></p><p><b>Disclaimers</b></p>
<p>Capgemini is an Equal Opportunity Employer encouraging inclusion in the workplace. Capgemini also participates in the Partnership Accreditation in Indigenous Relations (PAIR) program which supports meaningful engagement with Indigenous communities across Canada by promoting fairness, accessibility, inclusion and respect. We value the rich cultural heritage and contributions of Indigenous Peoples and actively work to create a welcoming and respectful environment. All qualified applicants will receive consideration for employment without regard to race, national origin, gender identity/expression, age, religion, disability, sexual orientation, genetics, veteran status, marital status or any other characteristic protected by law.</p>
<p>This is a general description of the Duties, Responsibilities and Qualifications required for this position. Physical, mental, sensory or environmental demands may be referenced in an attempt to communicate the manner in which this position traditionally is performed. Whenever necessary to provide individuals with disabilities an equal employment opportunity, Capgemini will consider reasonable accommodations that might involve varying job requirements and/or changing the way this job is performed, provided that such accommodation does not pose an undue hardship. Capgemini is committed to providing reasonable accommodation during our recruitment process. If you need assistance or accommodation, please reach out to your recruiting contact.</p>
<p>Please be aware that Capgemini may capture your image (video or screenshot) during the interview process and that image may be used for verification, including during the hiring and onboarding process.</p>
<p>Click the following link for more information on your rights as an Applicant in the United States. http://www.capgemini.com/resources/equal-employment-opportunity-is-the-law</p><br>
<p></p><p>Capgemini is a global business and technology transformation partner, helping organizations to accelerate their dual transition to a digital and sustainable world, while creating tangible impact for enterprises and society. It is a responsible and diverse group of 340,000 team members in more than 50 countries. With its strong over 55-year heritage, Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to engineering, all fueled by its market leading capabilities in AI, generative AI, cloud and data, combined with its deep industry expertise and partner ecosystem.</p></div></div></div></div><p></p>

AWS IAM Engineer

Openkyber

<div><p><b>Title:</b> IAM Engineer(PingOne)</p>
<p><b>Location:</b> - Bethesda, MD, (Remote)</p>
<p><b>Hire Type:</b> Contract</p>
<p>Job Description: Leads the Identity &amp; Access Management (IAM) function in Global Information Security organization through subject matter expertise (L3) on multi-factor authentication (MFA), Web Access Management (WAM) technologies. Functions as the Security Engineer in the team providing engineering support for MFA and SSO service offerings, daily operations, and continuous improvements. Hands-on MFA implementation experience with PingOne SaaS products (DaVinci, Protect, Verify, Directory) including integrations with Ping Federate for SSO services. Analyzes and implements changes to the MFA and SSO infrastructure including configurations and customizations to address application, security, and performance requirements. Works with stakeholders to integrate and onboard new applications and helps troubleshoot integrations with existing applications and systems. Responsible for directing L2/L1 technical staff to address application security issues.</p>
<p><b>Core Work Activities :</b></p>
<ul><li>Functions as an MFA and WAM point of contact for IT system administrators, Service Desk, service providers and application owners.</li>
<li>Works closely with senior engineers and other team members for MFA and SSO services and operational needs.</li>
<li>Routinely collaborates with different security team members including, but not limited to architecture, infrastructure, network, compliance, and incident response</li>
<li>Manages the MFA and WAM services including requirements gathering, design, building, testing, deployment, and operationalization.</li>
<li>Collaborates with multiple stakeholders to support implementation of new applications and services.</li>
<li>Defines and documents MFA and WAM policies and procedures</li>
<li>Creates test cases to ensure cross platform interoperability.</li>
<li>Implements and validates security controls for the MFA and WAM solution.</li>
<li>Designs security solutions to address risks throughout the SDLC process and confirm that the level of risk is acceptable in accordance with policies.</li>
<li>Provides guidance and oversight for L2/L1 troubleshooting of operational issues.</li>
<li>Leads the identification and remediation of relative security events</li>
</ul><p><b>Maintaining Goals:</b> Submits reports in a timely manner, ensuring delivery deadlines are met. Promotes the documenting of project progress accurately. Provides input and assistance to other teams regarding projects.</p>
<p><b>Managing Work, Projects, and Policies:</b> Manages and implements work and projects as assigned. Generates and provides accurate and timely results in the form of reports, presentations, etc. Analyzes information and evaluates results to choose the best solution and solve problems. Provides timely, accurate, and detailed status reports as requested.</p>
<p><b>Demonstrating and Applying Discipline Knowledge:</b> Provides technical expertise and support to persons inside and outside of the department. Demonstrates knowledge of job-relevant issues, products, systems, and processes. Demonstrates knowledge of function-specific procedures. Keeps up-to-date technically and applies new knowledge to job. Uses computers and computer systems (including hardware and software) to enter data and/ or process information.</p>
<p><b>Delivering on the Needs of Key Stakeholders:</b> Understands and meets the needs of key stakeholders. Develops specific goals and plans to prioritize, organize, and accomplish work. Determines priorities, schedules, plans and necessary resources to ensure completion of any projects on schedule. Collaborates with internal partners and stakeholders to support business/initiative strategies Communicates concepts in a clear and persuasive manner that is easy to understand. Generates and provides accurate and timely results in the form of reports, presentations, etc. Demonstrates an understanding of business priorities</p>
<p><b>Additional Responsibilities:</b> Provides information to supervisors and co-workers by telephone, in written form, e-mail, or in person in a timely manner. Demonstrates self-confidence, energy and enthusiasm. Informs and/or updates leaders on relevant information in a timely manner. Manages time effectively and conducts activities in an organized manner. Presents ideas, expectations and information in a concise, organized manner. Uses problem solving methodology for decision making and follow up. Performs other reasonable duties as assigned by manager.</p>
<p><b>Candidate Profile :</b></p>
<ul><li>Required Education and Experience: Undergraduate degree in Computer Sciences or related field or equivalent work experience and certifications</li>
<li>Minimum 5+ years of information security or infrastructure engineering experience including - 4+ years of experience in managing MFA offerings - Passkeys, Biometrics, FIDO tokens, various authenticators, Implementation experience of PingOne products like DaVinci, Verify, Protect, Neo</li>
<li>4+ years' experience of Federation/SSO services, protocols, and technologies - OAuth/OIDC, SAML, WS-FED, Browsers, MDM/MAM, X509 cert-based authentication (user &amp; device)</li>
<li>2+ years' experience with Ping Access and Ping Federate architecture, design, and implementation - Policy design and implementation, Ping Fed custom adapter development, Integration of custom applications</li>
<li>2+ years of experience in Development - JAVA, HTML/JavaScript/JSON, scripting (Ansible, Shell, Perl, Expect)</li>
<li>2+ years of experience translating business requirements to technical requirements with strong written and verbal communication skills</li>
<li>2+ years of experience with LDAP and directory Services using Radiant logic or Ping Directory</li>
</ul><ul><li>Preferred: 5+ years of experience with integrating IAM solutions with infrastructure and applications</li>
<li>2+ years of experience in designing &amp; implementing API services and data transformation layers</li>
<li>2+ years of experience on containerized deployment environments</li>
<li>Current information security certification, including Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified SCADA Security Architect (CSSA) or Certified Secure Software Lifecycle Professional (CSSLP)</li>
<li>Technical knowledge of industry best practices pertaining to MFA/WAM services</li>
<li>Experience with defining &amp; fulfilling Key Performance Indicators for MFA infrastructure</li>
<li>Experience in the IAM domain with user lifecycle management, authentication, authorization, federation, and privileged access management</li>
<li>Experience in implementing the capabilities such as Passwordless or adaptive authentication</li>
<li>Experience with cloud/SaaS IAM/WAM services</li>
<li>Experience with Zero-Trust Framework</li>
<li>Experience with CASB and WAF technologies.</li>
<li>Experience doing business analysis and requirements gathering for complex business systems</li>
<li>Responsible for identifying, evaluating, and participating in decision making around new and emerging IAM/MFA technologies and should be able to support other areas of Information Security as needed</li>
<li>Strong understanding of PKI, certificate management, security, and provisioning of identity data.</li>
</ul><p><b>For applications and inquiries, contact:</b> hirings@openkyber.com</p></div>

OCI IAM Engineer

BV Teck

<div>Bright Vision Technologies is a forward-thinking software development company dedicated to building innovative solutions that help businesses automate and optimize their operations.<br>
We leverage cutting-edge technologies to create scalable, secure, and user-friendly applications. As we continue to grow, we&rsquo;re looking for a skilled <b>IAM Systems Integration Engineer </b>to join our dynamic team and contribute to our mission of transforming business processes through technology.<br>
<br>
This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential.<br>
<br>
<b>Position: IAM Systems Integration Engineer</b><br>
<b>Location: Chantilly, VA (Onsite)</b><br>
<b>Duration: Full Time</b><br>
<br>
Client is seeking an experienced <b>TS/SCI Cleared Software Integration Engineer</b> to provide support to a mission critical enterprise identity and access management system. A successful candidate will develop an understanding of the services offered to external organizations, provide lifecycle systems engineering support to development and operations on the program, and use a combination of technical and functional expertise to recommend solutions to satisfy customer requirements. The candidate will apply technical knowledge in supporting multiple concurrent client integrations with our Enterprise Identity, Credential, and Access Management (ICAM) services<br>
<br>
This program requires employees to have an <b>active TS clearance with and SCI/CI Poly eligibility</b>. If you have a Full Scope Poly, working this program will keep your Full Scope ACTIVE.<br>
<br>
<b>Responsibilities:</b><ul><li>
Perform software testing or validation procedures, improving the procedures as needed</li><li>
Perform system integration and experience integrating services from different systems</li><li>
Debug software issues, investigate root causes, and recommend fixes</li><li>
Perform Authentication (AuthN), Authorization (AuthZ), Digital Policy Management (DPM), Entitlement Management (EM), and Authoritative Attributes (AuthA)Leverage project management skills to manage a client&rsquo;s integration with our services</li><li>
Perform Linux server administration</li><li>
Implement, evolve, and support authentication, Single Sign On (SSO), Security Assertion Markup Language (SAML), federation, and cloud infrastructure</li><li>
Deploy and operate secure authentication, access management, and Identity as a Service (IDaaS) technologies</li><li>
Implement methods, standards, and approaches for describing, analyzing, and documenting an organization's enterprise IT architecture</li><li>
Navigate Linux or Windows operating systems using command line interface</li></ul><br>
<b>
Required Skills:</b><ul><li>
Excellent written and verbal communication skills and extensive experience working with external</li><li>
Experience with one or more of the following:</li><li>
System integration or software development, and experience integrating services from different systems</li><li>
Troubleshooting software issues, investigating root causes, and recommending fixes</li><li>
Performing software testing or validation</li><li>
Navigate Linux or Windows operating systems using command line interface</li><li>
Perform software testing or validation procedures, improving the procedures as needed</li><li>
Demonstrated ability to document processes/ procedures</li><li>
Ability to debug software issues, investigate root causes, and recommend fixes</li><li>
Active TS required to start; SCI/Poly eligible</li><li>
Active SEC+ certification or DoD 8570 IAT Level II certification, or ability to attain certification within 60 days of start</li><li>
Bachelor&rsquo;s Degree with 4+ years of relevant work experience, will consider work experience in lieu of a degree</li></ul><br>
<b>
Preferred Skills:</b><ul><li>
SCI/Poly</li><li>
System administration skills in support of RHEL, SE Linux, Solaris, Windows, Apache, IIS</li><li>
Knowledge of software development lifecycle (SDLC), Scrum, and Agile processes</li><li>
Knowledge of Oracle Identity and Access Management (IdAM) suite, including OAM, OID, OVD, OHS</li><li>
Knowledge of authentication standards using OAuth, SAML, or PKI</li></ul><div><br>
Would you like to know more about this opportunity? For immediate consideration, please send your resume directly to <b>Harry</b><b>@bvteck.com or contact us via phone at 908-676-4399.</b><br>
<br>
At BVTeck, we are committed to providing equal employment opportunities and fostering an inclusive work environment. We encourage applications from all qualified individuals regardless of race, ethnicity, religion, gender identity, sexual orientation, age, disability, or any other protected status. If you require accommodations during the recruitment process, please let us know.</div><p>
Equal Employment Opportunity (EEO) Statement</p>
<p>Bright Vision Technologies (BV Teck) is committed to equal employment opportunity (EEO) for all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other protected status as defined by applicable federal, state, or local laws. This commitment extends to all aspects of employment, including recruitment, hiring, training, compensation, promotion, transfer, leaves of absence, termination, layoffs, and recall.</p>
<p>BV Teck expressly prohibits any form of workplace harassment or discrimination. Any improper interference with employees' ability to perform their job duties may result in disciplinary action up to and including termination of employment.</p><p>
</p><p>tChunre2Nk</p></div>

IAM Systems Integration Engineer

Tata Consultancy Services (TCS)

<div></div><div><div><div><p><div><div><div><div><div><div><p>Job Requirements*</p></div></div></div><br>
<div><div><div><ul><li>6&ndash;10 years in IAM with hands-on Auth0 operations and integrations.</li><li>Strong knowledge of SAML, OIDC/OAuth, MFA, conditional access, and B2C policy management.</li><li>Experience performing health checks, monitoring, SOP creation, reporting, and audit support.</li><li>Proven ability to resolve tickets, process provisioning requests, and deliver RCA for recurring issues.</li><li>Ability to execute minor enhancements (patches/upgrades, MFA policy creation, app onboarding).</li></ul>
</div>
</div></div></div><br>
</div></div></p></div></div><div><div><div><b>Location</b></div>
<div>Hyderabad</div>
</div><div><div><b>Job Function</b></div>
<div>TECHNOLOGY</div>
</div><div><div><b>Role</b></div>
<div>Engineer</div>
</div><div><div><b>Job Id</b></div>
<div>402864</div>
</div><div><div><b>Desired Skills</b></div>
<div>Cyber Security | IAM</div>
</div></div><p>Desired Candidate Profile
</p><div><div><b>Qualifications</b> : BACHELORS IN SYSTEMS ENGINEERING</div></div></div><div></div>

Okta Engineer

Search 10000+ Identity and access management engineer jobs near you this May. New roles added regularly across leading industries. Apply today.