Security Engineer II - Identity and Access Security

What success looks like in this role:

Wearelookingforanexperienced SeniorIAMEngineer to join our Identity & Access Security team. In this role, you will design, implement, and support enterprise Identity and Access Management (IAM), Privileged AccessManagement(PAM),IdentityGovernance(IGA),andMachineIdentitySecuritysolutions.Youwillworkcloselywithsecurity,infrastructure,andapplicationteamstoensuresecureandcompliantaccessacrosstheorganization.

KeyResponsibilities

• Design,implement,andsupportIAM,IGA,andPAMsolutionsusingplatformssuchasMicrosoftEntraID,MicrosoftIdentityManager(MIM),andDelineaPAM.
• Manageidentitylifecycleprocessesincludingonboarding,offboarding,accessprovisioning,rolechanges,andaccessreviews.
• AdministerprivilegedaccesscontrolsandsupportZeroTrustsecurityinitiatives.
• Supportmachineidentitysecurity,certificatelifecyclemanagement,PKIintegrations,andserviceaccountgovernance.
• DevelopautomationsolutionsusingPowerShell,Python,orsimilarscriptingtechnologies.
• Troubleshootcomplexidentity,authentication,andaccess-relatedissueswhileensuringcompliancewithsecuritystandardsandbestpractices.

You will be successful in this role if you have:

Must-Have Skills & Experience

• 8+ years of hands-on experience in Identity & Access Management (IAM) engineering and administration.
• Strong experience with IAM, Identity Governance (IGA), and Privileged Access Management (PAM) solutions.
• Hands-on experience with Microsoft Entra ID and Microsoft Identity Manager (MIM), or similar platforms such as SailPoint, Saviynt, or OneIdentity.
• Experience with identity lifecycle management, access provisioning, deprovisioning, role changes, and access reviews.
• Knowledge of Privileged Identity Management (PIM), RBAC, least-privilege principles, and Zero Trust architecture.
• Strong understanding of PKI, certificate lifecycle management, and machine identity security.
• Experience with service account governance, application identities, and secrets management.
• Scripting and automation skills using PowerShell, Python, or similar technologies.
• Strong troubleshooting, analytical, and communication skills.

Nice-to-Have Skills

• Experience with PAM solutions such as CyberArk, BeyondTrust, or Delinea.
• Experience with enterprise PKI and certificate management platforms such as Venafi, Keyfactor, or DigiCert Trust Lifecycle Manager.
• Familiarity with machine identity governance, workload identities, and advanced secrets management solutions.
• Understanding of AI Security, AI governance frameworks, non-human identities, and AI agent access controls.
• Experience integrating IAM/PAM solutions with SIEM or SOC platforms.
• Knowledge of programming languages such as Python, Java, or C#.
• Relevant certifications such as Microsoft SC-300, CISSP, Security+, Certified Identity Management Professional (CIMP), or PAM/PKI-related certifications.

What we offer

• Full-remote working conditions
• Monthly gross 44,200 HUF cafeteria, regardless of weekly working hours
• Home office allowance
• Private Health Insurance (Generali Premium Package) for all Unisys associates after 6 months
• And last but not least: a supportive, collaborative team with plenty of learning and development opportunities

Unisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law.

This commitment includes our efforts to provide for all those who seek to express interest in employment the opportunity to participate without barriers. If you are a US job seeker unable to review the job opportunities herein, or cannot otherwise complete your expression of interest, without additional assistance and would like to discuss a request for reasonable accommodation, please contact our Global Recruiting organization at [email protected] or alternatively Toll Free: 888-560-1782 (Prompt 4). US job seekers can find more information about Unisys’ EEO commitment here.