Requirements
The Specialist Identity & Privileged Access Management will implement and operate identity controls across Microsoft Entra ID, Active Directory, enterprise applications, and cloud platforms. Key responsibilities include managing joiner, mover, and leaver processes, configuring SSO and federation, administering MFA and Conditional Access, and supporting access requests. The role also involves onboarding privileged accounts into PAM, governing service principals, and investigating security incidents.
Description
JOB PURPOSEImplement and operate workforce, guest, vendor, privileged and non-human identity controls across Microsoft Entra ID, Active Directory, enterprise applications, cloud platforms and approved IAM/IGA/PAM technologies.PRIMARY RESPONSIBILITIESOperate joiner, mover and leaver controls, provisioning, deprovisioning, reconciliation and orphan-account remediation.Configure and support SSO and federation through SAML, OAuth 2.0, OpenID Connect and SCIM.Administer MFA, authentication strengths, passwordless methods, Conditional Access, Identity Protection and session controls.Support access requests, RBAC/ABAC, segregation of duties, entitlements and access reviews.Onboard privileged accounts into PAM and administer vaulting, credential rotation, approvals, JIT access and session controls.Operate Microsoft Entra PIM for directory and Azure roles, including eligible assignments and activation controls.Govern service principals, managed identities, service accounts, certificates, secrets and API permissions.Maintain and test break-glass accounts and secure operating procedures.Investigate risky sign-ins, token misuse, privilege escalation and anomalous privileged sessions.Maintain IAM/PAM evidence, metrics, runbooks and remediation tracking.JOB SPECIFICATIONSTechnical SkillsMicrosoft Entra ID, Active Directory, Conditional Access, MFA, PIM and Identity Governance.IAM/IGA lifecycle, SCIM, SSO, federation, access reviews, RBAC/ABAC and SoD.CyberArk, Delinea, BeyondTrust, One Identity, Sectona or equivalent PAM platform.PowerShell/Microsoft Graph, SIEM integration and identity incident response.CertificationsPreferred: SC-300 or current Microsoft identity equivalent.Preferred: recognized PAM product certification or formal administrator training.Preferred: Security+, SSCP, CISM, CISSP or equivalent.Preferred: CyberArk, SailPoint, Saviynt, NetIQ IGA, AZ-500 or ITIL Foundation.Minimum Work Experience5+ years of information-security or identity-security experience, including hands-on IAM/IGA administration and at least 2 years supporting PAM operations or engineering.EducationBachelor's degree in Cybersecurity, Information Security, Computer Science, IT, Engineering or an equivalent discipline.