Role Overview
We are hiring a Mid-Level IAM Analyst to join our cybersecurity team. This role is responsible for support for orchestrating and responding to incidents, following processes, playbooks, and best practices create process, configurating tools and improving IAM subjects to company.
The professional will work closely with other security fronts, infrastructure, systems, and business teams, evaluating improvements and adjustments necessary for the effectiveness of the incident response process, as well as supporting the organization's Cyber Defence strategy of IAM Program.
Key Responsibilities
• Support, implement, and maintain identity and access management processes, including provisioning, revocation, and periodic privilege reviews;
• Management of IAM-related tools, ensuring functionality, reliability, and compliance with security requirements;
• Create, review, and optimize access rules, profiles, groups, and policies, ensuring the application of principles such as least privilege and SoD (Segregation of Duties) for on-premises and cloud environments;
• Support integrating systems and applications with IAM platforms;
• Collaborate with other teams to map access processes, identify risks, and recommend control implementations or automations;
• Support internal teams in understanding identity and access management practices and related security requirements;
• Support audit processes.
Required Skills & Experience
• At least 3 years of direct experience with IAM-related topics;
• Knowledge about AD/Entra ID, LDAP, SAML, OAuth, SSO, MFA, PAM, SoD, RBAC, Principle of Least Privilege and access reviews;
• Experience management IAM tools;
• Knowledge of Defender for Identity and other IAM tools for hybrid and multicloud environments (On-Prem, Azure, AWS, GCP);
• Fluency in English;
• Knowledge of information security standards and best practices (e.g., ISO 27001, NIST, etc.).
Preferred Qualifications
• Relevant certifications from IAM/PAM solution providers, for example: (CyberArk, Senha Segura, BeyondTrust, SailPoint, Okta, Microsoft EntraID, etc).