System Security Engineer

IAM / PAM Engineer

Riyadh

Job Summary:

Penta Consulting are supporting a major Saudi investment company that drives the development of Entertainment, Sports and Culture. We're seeking a Identity and Access Management / Privileged Access Management (IAM/PAM) Engineer who will be responsible for managing and supporting IAM and PAM solutions to secure our customers sensitive data and systems.

Key Responsibilities:

IAM/PAM Solutions Implementation: Design, deploy, and manageIAM and PAM solutions (such as SailPoint, BeyondTrust similar platforms) to ensure secure access to applications, systems, and data.

Access Control Management: Develop and enforce role-based access controls (RBAC), least-privilege access, and other access policies.

User Lifecycle Management: Automate processes for user onboarding, offboarding, and access modifications across various systems and applications.

Multi-Factor Authentication (MFA): Configure and manage MFA and single sign-on (SSO) integrations to strengthen access security.

Privileged Access Management: Implement and manage PAM solutions, ensuring secure storage, rotation, and auditing of privileged credentials.

Audit and Compliance: Conduct regular access reviews, compliance checks, and audits to ensure adherence to organizational security policies and regulatory requirements.

Incident Response and Troubleshooting: Investigate and resolve IAM/PAM-related issues, incidents, and alerts in a timelymanner.

Documentation and Training: Develop and maintain detailed documentation, including technical guides, process flows, and end-user training materials.

Collaboration: Work with cross-functional teams (security, IT, DevOps, application developers) to integrate IAM/PAM solutions across the organization.

Qualifications:

Education:

Bachelor's degree in computer science, Information Security, or a related field. Relevant certifications and equivalent experience may also be considered.

Experience:

5+ years of experience in Identity and Access Management or Privileged Access Management.

Experience with IAM/PAM tools and technologies (e.g., SailPoint, BeyondTrust).

Hands-on experience with Active Directory, LDAP, SSO, and MFA technologies.

Hands-on experience for Integrations between IAM and ERP systems.

Certifications (preferred):

Certified Identity and Access Manager (CIAM), Certified Information Systems Security Professional (CISSP), or other relevant certifications.

Skills:

Technical Proficiency: Strong understanding of IAM/PAM technologies, RBAC, LDAP, SAML, OAuth, and OpenID Connect.

Security Best Practices:In-depth knowledge of identitysecurity, least-privilege principles, and regulatory compliance standards such as SOX, GDPR, and HIPAA.

Scripting/Automation: Proficiency in scripting languages (e.g., PowerShell, Python) to automate IAM/PAM processes.

Analytical and Problem-Solving: Ability to troubleshoot complex access-related issues and resolve them efficiently.

Communication: Strong verbal and written communication skills for cross- functional collaboration and documentation.

Preferred Qualifications:

Familiarity with DevOps and cloud environments (Azure, GCP) and their IAM/PAM features.

Experience with data security, network security, and IT infrastructure.