Information Security Engineer (contract)

Key Responsibilities

• Provide day-to-day operational support for IAM platforms including CyberArk and in-house IAM applications.
• Perform BAU activities such as account unlocks/unsuspends, onboarding/offboarding, password rotations, health checks, and access lifecycle tasks.
• Analyze, create, validate, implement, and close change requests in alignment with established processes.
• Support requests from IAM integration teams and internal stakeholders.
• Perform operational hygiene tasks including human/non-human account cleanup, permissions reviews, and audit activities.
• Troubleshoot incidents, assist in root-cause analysis, and support platform upgrades, patching, and maintenance.
• Identify and implement automation opportunities using scripting and APIs.
• Participate in on-call rotations to ensure high availability of IAM services.

Key Requirements

• Experience in Information Security, with a strong emphasis on Identity and Access Management (IAM).
• Hands-on experience administering CyberArk or comparable Privileged Access Management (PAM) platforms.
• Demonstrated ability to manage change requests end-to-end, including analysis, build, validation, implementation, and closure.
• Prominent experience supporting production IAM environments with defined SLAs and operational support processes.
• Strong scripting and automation skills, including PowerShell, Python, and RESTful APIs.
• Solid understanding of IAM principles, including access lifecycle management, role-based access control, and operational security best practices.
• Ability and willingness to participate in on-call rotations to ensure high availability of critical IAM services.
• CyberArk certifications (Defender, Sentry, Guardian) or equivalent experience with other IAM/PAM solutions.
• Experience supporting custom-built or in-house IAM applications.
• Working knowledge of Active Directory, Windows and Linux administration, and cloud IAM integrations (AWS and/or Azure).