Cyber Security Identity Engineer

The candidate will have responsibilities across the following functions:
Identity Platform Operations (SFIA: ITOP 4 ASUP 4):
Provide operational support for Microsoft Entra ID, BeyondTrust Password Safe, and SailPoint ISC.
Troubleshoot identity-related incidents, authentication failures, and service disruptions.
Monitor identity services, authentication flows, and directory health; respond to alerts.
Perform maintenance tasks including patching, configuration updates, and system health checks.
User Lifecycle and Access Management (SFIA: IAMT 4):
Execute provisioning, deprovisioning, access changes, and entitlement updates.
Support identity lifecycle processes across joiner-mover-leaver workflows.
Assist application teams with SCIM, SSO, federation, and MFA integrations.
Privileged Access Support (SFIA: PEMT 4 SCTY 4):
Support PAM tooling including JIT access, vaulting, and session controls.
Assist with privileged identity troubleshooting and compliance checks.
Governance, Reviews and Compliance (SFIA: GOVN 4 GMCY 4 KNOW 4):
Execute access reviews and certification campaigns in SailPoint ISC.
Requirements:
Tertiary qualifications in Information Technology or Cybersecurity.
Training or certifications in SailPoint, Microsoft Entra, or related cybersecurity areas.
Experience in IAM engineering or identity operations (2-4 years).
Hands-on experience with Entra ID, Active Directory, Microsoft Privileged Access Manager, BeyondTrust PasswordSafe and SailPoint ISC (or similar products).
Exposure to access reviews or privileged access workflows.
Identity governance principles including least privilege, RBAC, lifecycle management.
Understanding of authentication protocols (SAML, OAuth2 OIDC, Kerberos, LDAP).
Awareness of ITGC, NIST, ISO 27001 and identity compliance requirements.
Highly proficient with Microsoft collaboration tools like MS Teams, Excel and reporting tools.

Experience
11-15 yrs