CSS Jr. IAM-PAM Analyst

Stefanini Group is seeking a proactive and detail-oriented Jr. IAM-PAM Security Analyst to join our Cyber Security Services Tower . This is an excellent opportunity for an individual eager to grow their career in Identity, Access management (IAM) - Privileged Access Management ( PAM) while supporting the security of our enterprise systems, data, and applications.

The Jr. IAM-PAM Security Analyst will play a key role in assisting with the implementation and management of IAM solutions to ensure that our organization's identity and access management processes are secure and efficient. This role will focus on supporting authentication, authorization, and identity governance frameworks while ensuring compliance with industry regulations and security best practices.

Success in this role requires analytical skills, a solid technical foundation, and the ability to work collaboratively with cross-functional teams to support security initiatives.

Job Responsibilities

• Support IAM Strategies: Assist in the development and implementation of comprehensive strategies for identity and access management.
• Integrate Identity Solutions: Help facilitate the integration of identity solutions across both cloud and on-premises environments.
• Enhance User Access Controls: Aid in the strengthening of user access controls to minimize security risks.
• Account Lifecycle Management : Onboard and maintain privileged accounts in the vault (admin, service, database and application accounts)
• Access Request Management: Process and review privileged access requests, including just-in-time and approval workflows
• Security Monitoring & Incident Escalation : Monitor PAM alerts, failed password rotations, and unusual privileged sessions, and escalate suspicious activity
• Credential & Session Management: Support password rotation, check-in/check-out and session recording or review
• Develop Security Frameworks: Support the establishment of secure frameworks for authentication, authorization, and identity governance.
• Ensure Compliance: Assist in maintaining adherence to industry regulations and security best practices.
• Conduct Risk Assessments: Participate in identifying and mitigating potential security threats through risk assessments.
• Service Management & Process Tracking: Use the ticketing system (e.g. ServiceNow, Jira) to track requests and incidents
• Collaborate with Teams: Work closely with cross-functional teams to help drive security initiatives forward.

Education:

• Preferred: Bachelor's degree in computer science, Information Technology, Engineering, or a related field.
• Minimum education requirement: High school studies completed with Baccalaureate diploma.

Language proficiency:

• Excellent English communication skills, both verbal and written, for professional communication and documentation.

Experience:

• Minimum: 12 months of experience working as a Support Engineer within Operations teams.

Mandatory Technical Skills:

• Strong ability to effectively interact with customers, analyze issues, troubleshoot problems, and implement resolution solutions.
• Good troubleshooting skills for user-facing technical issues, encompassing access problems, connectivity issues, and account-related queries.
• Proficiency in handling technical support topics across multiple electronic communication channels, ensuring timely and accurate responses
• Ability to follow structured operational procedures and document actions clearly and accurately
• Proficient in managing Incidents & Requests through ticketing systems, ensuring accurate documentation, timely resolution, and appropriate escalation in accordance with established procedures and SLAs.

Preferred / Nice-to-Have Qualifications:

• Basic understanding of authentication, authorization, identity governance, and privileged access management (PAM) concepts.
• Familiarity with IAM protocols or directory services.
• Basic knowledge of TCP/IP networking, proxy concepts, or web security principles.
• Exposure to email security concepts or platforms (e.g., Microsoft Defender for Office 365, spam filtering, phishing detection).
• Relevant certifications in cybersecurity or IT, such as:
  • ISC2 Certified in Cybersecurity (CC)
  • Microsoft SC-900 (Security, Compliance, and Identity Fundamentals)
  • Microsoft AZ-900 (Azure Fundamentals)
  • CompTIA IT Fundamentals (ITF+) or similar entry-level certifications.

Professional Skills:.

• Strong communication and collaboration skills, enabling effective interaction with a diverse range of technical and non-technical stakeholders and internal teams.
• A customer-focused mindset dedicated to delivering exceptional service.
• A collaborative mindset with an interest in internal operations and process improvement.
• Strong organizational, attention to detail, analytical, and problem-solving skills.
• Ability to quickly adapt to changes, new requirements, or sudden shifts in direction.
• A commitment to continuous learning and improvement, staying abreast of industry best practices, emerging technologies, and methodologies.
• Absolute discretion and integrity in handling sensitive customer information and critical infrastructure data.

Internal application deadline: the 3rd of November.

Should you have any questions, please reach out to Evelina Bévis or Alin Momeiu.

The application needs to be accompanied by the candidate's updated resume.

Education:

• Preferred: Bachelor's degree in computer science, Information Technology, Engineering, or a related field.
• Minimum education requirement: High school studies completed with Baccalaureate diploma.

Language proficiency:

• Excellent English communication skills, both verbal and written, for professional communication and documentation.

Experience:

• Minimum: 12 months of experience working as a Support Engineer within Operations teams.

Mandatory Technical Skills:

• Strong ability to effectively interact with customers, analyze issues, troubleshoot problems, and implement resolution solutions.
• Good troubleshooting skills for user-facing technical issues, encompassing access problems, connectivity issues, and account-related queries.
• Proficiency in handling technical support topics across multiple electronic communication channels, ensuring timely and accurate responses
• Ability to follow structured operational procedures and document actions clearly and accurately
• Proficient in managing Incidents & Requests through ticketing systems, ensuring accurate documentation, timely resolution, and appropriate escalation in accordance with established procedures and SLAs.

Preferred / Nice-to-Have Qualifications:

• Basic understanding of authentication, authorization, identity governance, and privileged access management (PAM) concepts.
• Familiarity with IAM protocols or directory services.
• Basic knowledge of TCP/IP networking, proxy concepts, or web security principles.
• Exposure to email security concepts or platforms (e.g., Microsoft Defender for Office 365, spam filtering, phishing detection).
• Relevant certifications in cybersecurity or IT, such as:
  • ISC2 Certified in Cybersecurity (CC)
  • Microsoft SC-900 (Security, Compliance, and Identity Fundamentals)
  • Microsoft AZ-900 (Azure Fundamentals)
  • CompTIA IT Fundamentals (ITF+) or similar entry-level certifications.

Professional Skills:.

• Strong communication and collaboration skills, enabling effective interaction with a diverse range of technical and non-technical stakeholders and internal teams.
• A customer-focused mindset dedicated to delivering exceptional service.
• A collaborative mindset with an interest in internal operations and process improvement.
• Strong organizational, attention to detail, analytical, and problem-solving skills.
• Ability to quickly adapt to changes, new requirements, or sudden shifts in direction.
• A commitment to continuous learning and improvement, staying abreast of industry best practices, emerging technologies, and methodologies.
• Absolute discretion and integrity in handling sensitive customer information and critical infrastructure data.

Internal application deadline: the 3rd of November.

Should you have any questions, please reach out to Evelina Bévis or Alin Momeiu.

The application needs to be accompanied by the candidate's updated resume.