Identity and Access Manager - IAM and PAM

Majid Al Futtaim; Dubai; On-site; AED 335,000 - 502,000; Full time

Job summary

Majid Al Futtaim seeks an experienced Identity and Access Manager to define and govern IAM and PAM strategy across global platforms. You will operate platforms such as SailPoint, CyberArk and Delinea, strengthening privileged access controls and automating identity processes.

Lead governance across lifecycle events, certifications, and access reviews while collaborating with technology teams, vendors, and auditors to ensure compliance with relevant security frameworks.

Qualifications

• 8+ years in identity and access management in large enterprise environments.
• 5+ years hands-on responsibility for global IDAM platforms.
• Bachelor’s or Master’s degree in Computer Science, Engineering, Technology or equivalent.

Responsibilities

• Define and maintain enterprise IAM and PAM strategy, roadmap, operating model, and priorities.
• Establish policies aligned with least-privilege principles.
• Govern the identity lifecycle: onboarding, provisioning, changes, certification, offboarding.
• Strengthen joiner/mover/leaver processes to minimize outdated access.
• Design and maintain RBAC and ABAC models.
• Implement and govern MFA, SSO, federation, authentication and authorization.

Skills

IAM

PAM

Identity Governance

SailPoint

CyberArk

Delinea

Lifecycle mgmt

Joiner-Leaver

RBAC

ABAC

MFA

SSO

Federation

Authentication

Access Certification

Least Privilege

Vaulting

Password Rotation

Session Monitoring

Just-In-Time

Break-glass

PowerShell

Python

Workflow automation

API Integration

IAM Incident Response

Threat Monitoring

NIST

ISO 27001

CIS Controls

GDPR

SOC 2

Security Audit

Vulnerability Remediation

Release Mgmt

KPI Reporting

Vendor Mgmt

MSP Governance

Service Level

Education

Bachelor's / Master’s in CS/Engineering/Tech

Tools

SailPoint

CyberArk

Delinea

Job description

Identity and Access Manager - IAM and PAM Job Snapshot Role: Identity and Access Manager - IAM and PAM Location: Dubai, United Arab Emirates Industry: Computer and Network Security Function: Computer-Network Security Experience: 8 years Job Type: Full-time Position Overview Identity and Access Manager - IAM and PAM in Dubai, United Arab Emirates is a Computer and Network Security opportunity focused on enterprise identity governance, privileged access security, authentication, authorization, and global access controls. Majid Al Futtaim is hiring an experienced identity security leader to define the IAM and PAM strategy, operate enterprise platforms such as SailPoint, CyberArk, and Delinea, strengthen privileged access controls, automate identity processes, and maintain alignment with international security and compliance frameworks.

Job Details Country: United Arab Emirates City: Dubai Industry: Computer and Network Security Function: Computer-Network Security Salary: 30000-45000 Estimated salary range based on similar jobs in the job city; please confirm the final offer with the employer. Gender: Any Candidate Nationality: Any Job Type: Full-time

Role Context The Identity and Access Manager owns a critical layer of enterprise cybersecurity by ensuring employees, contractors, systems, and privileged administrators receive appropriate access throughout the identity lifecycle. The role combines strategic ownership of IAM and PAM architecture with hands‑on governance, platform operations, automation, compliance, and incident response. Effective identity security reduces unauthorized access, limits privileged-account exposure, improves audit readiness, and enables secure access to business applications across a complex global technology environment. The manager will work with technology teams, business stakeholders, vendors, managed service providers, risk functions, and auditors to evolve identity controls while improving service performance and user experience.

Key Responsibilities

• Define and maintain the enterprise IAM and PAM strategy, roadmap, operating model, and implementation priorities.
• Establish identity and privileged access policies aligned with least-privilege principles and business requirements.
• Govern the complete identity lifecycle covering onboarding, provisioning, role changes, access modifications, certification, and offboarding.
• Strengthen joiner, mover, and leaver processes to minimize inappropriate or outdated access.
• Design and maintain Role-Based Access Control and Attribute-Based Access Control models.
• Implement and govern Multi-Factor Authentication, Single Sign-On, federation, authentication, and authorization capabilities.
• Coordinate periodic access certifications and ensure inappropriate entitlements are identified and remediated.
• Oversee privileged credential vaulting, password rotation, privileged account discovery, and secure credential management.
• Manage privileged session monitoring and recording for sensitive administrative activities.
• Implement Just-In-Time privileged access and tightly governed emergency or break-glass access procedures.
• Monitor IAM and PAM platforms for anomalous activity, operational failures, vulnerabilities, and security events.
• Lead investigation and remediation of identity-related incidents in coordination with cybersecurity and technology teams.
• Design, configure, and operate enterprise identity platforms including SailPoint, CyberArk, Delinea, and comparable IAM, IGA, or PAM technologies.
• Automate repetitive identity processes using workflows, PowerShell, Python, APIs, and platform-native capabilities.
• Manage IAM solution deployments, configuration changes, testing, upgrades, and releases across development and production environments.
• Coordinate activities across Dev, Pre-Prod, Prod, SIT, and UAT environments while maintaining controlled release practices.
• Establish identity-security logging, monitoring, KPIs, service metrics, and management reporting.
• Ensure IAM and PAM controls support NIST, ISO 27001, CIS Controls, GDPR, SOC 2, and applicable audit requirements.
• Coordinate audit evidence, risk remediation, control testing, and responses to identity-related findings.
• Lead vendors and managed service providers against agreed deliverables, service levels, security standards, and improvement targets.
• Deliver IAM awareness and technical guidance to stakeholders involved in identity governance and privileged access.
• Continuously assess emerging identity threats, technologies, automation opportunities, and control improvements.

Ideal Profile The successful candidate should have at least 8 years of experience working with multiple identity and access management technologies in large enterprise environments, including 5 or more years of hands‑on responsibility for global IDAM platforms. A bachelor 's or master 's degree in Computer Science, Engineering, Technology, or an equivalent discipline is expected. Certifications such as CIAM, CISM, CISSP, or ITIL would strengthen the candidate 's profile. Deep practical knowledge of identity lifecycle management, access governance, privileged access management, authentication technologies, RBAC, ABAC, MFA, SSO, federation, and access certification is essential. Candidates should have delivered IAM platform changes through structured development, system integration testing, user acceptance testing, pre-production, and production environments. Experience managing releases, platform upgrades, integrations, testing, and operational support is particularly valuable. The role also requires confident leadership, strong analytical judgment, and the ability to explain complex identity and cybersecurity concepts to technical and non-technical stakeholders. A proactive approach to security improvement, automation, vendor management, and service delivery is essential.

Skills Set

• Identity and Access Management
• Privileged Access Management
• Identity Governance and Administration
• SailPoint
• CyberArk
• Delinea
• Identity lifecycle management
• Joiner mover leaver processes
• Role-Based Access Control
• Attribute-Based Access Control
• Multi-Factor Authentication
• Single Sign-On
• Identity federation
• Authentication and authorization
• Access certification
• Access reviews
• Least privilege
• Privileged credential vaulting
• Password rotation
• Privileged session monitoring
• Just-In-Time access
• Break-glass access
• PowerShell
• Python
• Workflow automation
• API integration
• IAM incident response
• Identity threat monitoring
• NIST
• ISO 27001
• CIS Controls
• GDPR
• SOC 2
• Security audit support
• Vulnerability remediation
• Dev, SIT, UAT and production environments
• Release management
• IAM KPI reporting
• Vendor management
• Managed service provider governance
• Service level management

Why Join Us

Identity security is one of the most important control domains within modern enterprise technology, especially as organizations expand cloud platforms, digital services, privileged automation, and interconnected business applications. This position offers ownership of a global IAM and PAM capability with direct influence on cyber risk reduction, compliance, operational resilience, and secure digital transformation. Majid Al Futtaim Global Solutions provides the scale to work with enterprise identity platforms, international security frameworks, complex stakeholder groups, and evolving automation technologies while developing leadership experience across a strategically important cybersecurity function.

About the Company

Majid Al Futtaim is a leading regional group with businesses spanning retail, properties, communities, entertainment, and lifestyle operations. Majid Al Futtaim Global Solutions supports these businesses through shared technology and enterprise capabilities, including cybersecurity, digital platforms, infrastructure, and technology governance across the group 's regional operations.