Security Engineer - Identity

Expleo; Chennai District; On-site; INR 1,500,000 - 2,100,000; Full time

Benefits offered by this job

Expleo Academy training

Competitive local benefits

Collaborative team culture

Global cybersecurity exposure

Job summary

Expleo is hiring a Security Engineer (Identity) in Chennai, India. You will contribute design, review and advisory work for privileged access management, identity and MFA controls, operating outside the client’s live environment.

You will work with an offshore consultancy team under Expleo’s UK Cybersecurity Practice, delivering designs and assurance to support UK-based security changes and governance.

Qualifications

• Degree in computer science, cybersecurity or related discipline or equivalent experience.
• Vendor PAM certification (CyberArk Defender/Sentry, BeyondTrust or Delinea) required.
• Microsoft SC-300, CompTIA Security+ or ISC2 SSCP would be advantageous.

Responsibilities

• Provide subject matter expertise on PAM architecture, configuration and policy and recommend improvements.
• Assess PAM change requests for security risk and design changes for implementation by UK personnel.
• Design access review approaches and analyse MFA allocation reporting within the service boundary.
• Report on PKI status, keys and certificates; track expiries and renewal plans.
• Support evaluation of PKI and secrets management tooling with senior architect.
• Maintain PAM, identity and PKI diagrams and policy documentation.
• Define audit logging requirements for remote access, PAM and PKI per design.
• Track PAM vendor support status and provide upgrade recommendations.
• Contribute to Expleo Cybersecurity Practice through knowledge sharing.

Skills

PAM platform expertise

Active Directory / Entra ID

PKI / certificate lifecycle

Identity governance concepts

PowerShell scripting

ITIL change processes

Data analysis / reporting

Education

Degree in CS / Cybersecurity or related field

Vendor PAM certification (CyberArk / BeyondTrust / Delinea)

Certifications: SC-300 / Security+ / SSCP (advantageous)

Tools

CyberArk / BeyondTrust / Delinea (PAM)

Microsoft AD CS / Venafi / Keyfactor

Job description

Overview

Expleo is a trusted partner for end-to-end, integrated engineering, quality services, and management consulting for digital transformation. We help businesses harness technological change to deliver innovation, improve resilience, and support the secure delivery of complex products, platforms, and systems.

As part of the Expleo UK Cybersecurity Practice, you will join a managed Cyber Operations service for a major UK energy network operator that forms part of the UK's Critical National Infrastructure (CNI). The service is governed by Expleo in the UK, with a 24/7 UK Security Operations Centre delivered by a specialist partner and an Expleo consultancy team in India providing design, engineering and assurance expertise across the client's security tooling estate.

As a Security Engineer | Identity, you will provide design, review, and analysis expertise across the client's privileged access management, identity and access management, multi-factor authentication, and PKI controls.

This is a design, review and advisory role. You will work within Expleo's offshore consultancy team, outside the client's operational environment. You will not have access to the client's operational systems or data and will not make live changes. Operational changes are implemented by UK-based, security-cleared personnel; your work provides the designs, analysis, recommendations and assurance that those changes depend on. You will work from information released to the team through Expleo's controlled UK service boundary.

Responsibilities

Responsibilities

• Provide subject matter expertise on privileged access management (PAM) architecture, configuration and policy, and recommend improvements.
• Assess PAM change requests for security risk and prepare change designs for implementation by UK-based personnel.
• Design access review approaches and analyse access review, joiner-mover-leaver and MFA allocation reporting released through the UK service boundary.
• Report on the status of PKI, keys and certificates; track expiries and produce renewal plans.
• Support the Senior Security Architect in evaluating PKI and secrets management tooling.
• Maintain PAM, identity and PKI diagrams, policy and configuration documentation.
• Define audit logging requirements for remote access, PAM and PKI in line with the logging design.
• Track PAM platform vendor support status and produce upgrade recommendations.
• Support the growth of Expleo's Cybersecurity Practice through knowledge sharing and technical contribution.

Qualifications

• Degree in computer science, cybersecurity or a related discipline, or equivalent professional experience.
• Vendor PAM certification, e.g. CyberArk Defender or Sentry, BeyondTrust or Delinea (at least one required).
• Microsoft SC-300, CompTIA Security+ or ISC2 SSCP would be advantageous.

Essential skills

Essential Skills

• PAM platform expertise (e.g. CyberArk, BeyondTrust, Delinea).
• Active Directory, Entra ID, conditional access and MFA technologies.
• Enterprise PKI and certificate lifecycle management (e.g. Microsoft AD CS, Venafi, Keyfactor).
• Identity governance and access certification concepts.
• PowerShell scripting, reporting and data analysis.
• ITIL change processes and clear technical documentation.

Desired skills

Desirable Skills and Experience

• Identity governance platforms (e.g. SailPoint, Saviynt).
• HSM concepts and secrets management tooling.
• Energy, utilities or other CNI sector experience.

Experience

Experience

• 4-7 years in identity and access management or PAM engineering.
• Experience with PAM policy design, access reviews and certificate lifecycle management in enterprise environments.

What do I need before I apply

What do I need before I apply

• Have the right to work in India.
• Be based in, or willing to relocate to, Chennai.
• Be willing to complete Expleo enhanced pre-employment background screening (equivalent in standard to the UK Baseline Personnel Security Standard) and any additional vetting the client requires.
• Be able to work hours that overlap with the UK business day, with occasional out-of-hours advisory support during major incidents.
• Have excellent written and spoken English, suitable for engagement with senior UK stakeholders.
• Be comfortable working within a strict security boundary, with no access to the client's operational systems or data.

Benefits

Benefits

• Collaborative working environment: we stand shoulder to shoulder with our clients and our peers through good times and challenges.
• We empower all passionate, technology-loving professionals to expand their skills and take part in inspiring projects.
• Expleo Academy enables you to acquire and develop the right skills by delivering a suite of accredited training courses.
• Competitive local company benefits [India HR to confirm the benefits package].
• Always working as one team, our people are not afraid to think big and challenge the status quo.

“We are an equal opportunities employer and welcome applications from all suitably qualified persons regardless of their race, sex, disability, religion/belief, sexual orientation or age.”