Cyber Security Identity Engineer

The candidate will have responsibilities across the following functions:

Identity Platform Operations (SFIA: ITOP 4 ASUP 4):

• Provide operational support for Microsoft Entra ID, BeyondTrust Password Safe, and SailPoint ISC.
• Troubleshoot identity-related incidents, authentication failures, and service disruptions.
• Monitor identity services, authentication flows, and directory health; respond to alerts.
• Perform maintenance tasks including patching, configuration updates, and system health checks.

User Lifecycle and Access Management (SFIA: IAMT 4):

• Execute provisioning, deprovisioning, access changes, and entitlement updates.
• Support identity lifecycle processes across joiner-mover-leaver workflows.
• Assist application teams with SCIM, SSO, federation, and MFA integrations.

Privileged Access Support (SFIA: PEMT 4 SCTY 4):

• Support PAM tooling including JIT access, vaulting, and session controls.
• Assist with privileged identity troubleshooting and compliance checks.

Governance, Reviews and Compliance (SFIA: GOVN 4 GMCY 4 KNOW 4):

• Execute access reviews and certification campaigns in SailPoint ISC.

Requirements:

• Tertiary qualifications in Information Technology or Cybersecurity.
• Training or certifications in SailPoint, Microsoft Entra, or related cybersecurity areas.
• Experience in IAM engineering or identity operations (2-4 years).
• Hands-on experience with Entra ID, Active Directory, Microsoft Privileged Access Manager, BeyondTrust PasswordSafe and SailPoint ISC (or similar products).
• Exposure to access reviews or privileged access workflows.
• Identity governance principles including least privilege, RBAC, lifecycle management.
• Understanding of authentication protocols (SAML, OAuth2 OIDC, Kerberos, LDAP).
• Awareness of ITGC, NIST, ISO 27001 and identity compliance requirements.
• Highly proficient with Microsoft collaboration tools like MS Teams, Excel and reporting tools.