Identity Security Engineer: Privileged Access & IAM Leader

Aer Lingus; Dublin; On-site; EUR 120,000 - 160,000; Full time

Job summary

Aer Lingus is seeking an Identity Security Engineer to govern and continuously improve our identity security posture, including privileged access. This hands-on role covers secure‑by‑design identity architectures, lifecycle management, access controls and processes within a large enterprise environment.

You will work with Cyber, technology and applications teams to implement identity controls, automate lifecycle workflows, and monitor identity health across platforms.

Qualifications

• 10+ years in security engineering or identity domains.
• Hands‑on with AD and/or Entra in large enterprises.
• Experience designing identity lifecycle and access workflows on an IGA platform.
• Experience implementing privileged access controls and governance.
• Experience with access governance and least privilege controls.
• Relevant certifications (Microsoft identity/security, CISSP/CISM/CIAM/CRISC).
• Strong IAM concepts: zero trust, RBAC, access reviews, lifecycle governance.
• Ability to translate secure identity architectures into standards and blueprints.
• Ability to document outcomes and implement identity standards consistently.
• Strong analytical and troubleshooting skills for identity and access issues.
• Excellent communication across tech, cyber and business teams.

Responsibilities

• Own identity and privileged security policies, standards and patterns across AD/Entra/IGA.
• Design and govern identity lifecycle workflows and access reviews using an IGA platform.
• Support implementation of a privileged access platform and controls.
• Automate identity governance processes and lifecycle workflows via scripts.
• Deliver identity posture monitoring and continuous improvements of controls.
• Provide SME support for identity-related security incidents and investigations.
• Build identity metrics and dashboards for centralized oversight.
• Collaborate with application/platform teams to embed secure-by-design identity patterns.
• Maintain documentation and blueprints for identity security platforms.
• Contribute to cross-domain security architecture reviews and compliance alignment.
• Coordinate with Cyber Defence to monitor identity telemetry and security events.
• Oversee third-party providers supporting identity services.

Skills

Active Directory

Entra

Identity lifecycle

Privileged access

Access governance

Least privilege

IAM concepts

Zero trust

RBAC

SailPoint

CyberArk

BeyondTrust

MS Defender for Identity

CrowdStrike Identity

PowerShell

Identity threat detection

Non-human identity governance

Tools

SailPoint

CyberArk

BeyondTrust

MS Defender for Identity

CrowdStrike Identity

SilverFort

Job description

Aer Lingus is seeking an Identity Security Engineer to govern and continuously improve our identity security posture, including privileged access. This hands-on role covers secure‑by‑design identity architectures, lifecycle management, access controls and processes within a large enterprise environment.

You will work with Cyber, technology and applications teams to implement identity controls, automate lifecycle workflows, and monitor identity health across platforms.