Senior Iam Engineer

Armel & Alina Technologies Llp; Hyderabad; On-site; INR 3,000,000 - 5,000,000; Full time

Job summary

Armel & Alina Technologies Llp in Hyderabad, India, seeks a Senior IAM Engineer to lead PAM optimization and IAM/IGA efforts. You will manage CyberArk Privilege Cloud, build integrations, and enforce security policies across AD, Azure Entra, Duo, and SailPoint.

You will document configurations, train IT staff, and pursue continuous improvements, staying current on security trends. The role reports to the Information Security team and offers a challenging path for experienced IAM/PAM

Qualifications

• 7+ years of experience with CyberArk Privilege Cloud, SailPoint, Azure Entra, AD, or similar IAM/PAM tools.
• Master’s or Bachelor’s degree in CS/IT/Cybersecurity or related field.
• CISSP, CISM or other relevant certifications are a plus.

Responsibilities

• Administer CyberArk PAM components (CPM, Password Vault, PSM).
• Build integrations between CyberArk and third-party apps for remote access and credential rotation.
• Manage IAM across AD/Azure Entra and Cisco Duo.
• Assist with SailPoint governance for mover/joiner/leaver scenarios.

Skills

IAM

CyberArk

SailPoint

Azure Entra

Active Directory

SSO

PowerShell

Python

REST APIs

Education

Master's degree

CISSP

CISM

Tools

CyberArk Privilege Cloud

SailPoint

Microsoft Entra / Azure AD

Active Directory

Cisco Duo

PowerShell

Python

Job description

Position: Senior IAM Engineer

Job Description Summary:

We are seeking a highly skilled and motivated Senior Identity and Access Management (IAM) Engineer to join our Information Security team. The ideal candidate will primarily be responsible for managing and optimizing our Privileged Access Management (PAM) solution to ensure the security and integrity of our organizations privileged accounts. This role will also involve a secondary focus on IAM and Identity Governance and Administration (IGA). Key responsibilities include the daily administration and continuous improvement of Zelis’s PAM environment, as well as collaboration with the IAM team for identity management through the Zelis IGA tool. Additionally, this role requires collaboration with the broader Security Engineering team, which oversees all security platforms across Zelis.

Key Responsibilities:

• CyberArk Administration: Manage the deployment, configuration, and maintenance of CyberArk Privilege Cloud, including the Central Policy Manager (CPM), Password Vault, and Privileged Session Manager (PSM).
• CyberArk Engineering: Build and maintain integrations between CyberArk and third-party applications to enable remote access (RDP, SSH, etc.) and credential rotation
• Identity and Access Management: Administer accounts, groups and services related to identity and access in Active Directory, Microsoft Azure/Entra, and Cisco Duo.
• Identity Governance: Assist with configuration and management of SailPoint for mover/joiner/leaver scenarios and governance of all Zelis applications and associates
• Policy Implementation: Implement and enforce policies and procedures for IAM to align with corporate guidelines, industry best practices and regulatory requirements.
• Documentation: Maintain documentation for IAM configurations and procedures.
• Training and Support: Provide training and support to other Zelis IT staff and business units on best practices for IAM and PAM.
• Continuous Improvement: Stay up to date with the latest security trends and product updates. Identify opportunities for process improvements and implement enhancements.

Required Qualifications:

• Education: Master’s or bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field.
• Experience: 7+ years of experience with CyberArk Privilege Cloud, SailPoint, Microsoft Azure/Entra, Active Directory, or similar IAM/PAM tools
• Certifications: CISSP, CISM or other relevant industry certifications are a plus.

Technical Skills:

• In-depth knowledge of CyberArk solutions and components.
• In-depth knowledge of Active Directory
• Experience with privileged access management, identity management, identity governance and security controls.
• Experience with Single Sign On (SSO) and related protocols.
• Familiarity with scripting languages (e.g., PowerShell, Python), REST APIs and API based authentication.

Desired Skills:

• Analytical Skills: Strong problem-solving abilities and attention to detail.
• Communication Skills: Excellent verbal and written communication skills, with the ability to convey technical concepts to non-technical stakeholders.
• Project Management: Ability to manage multiple tasks and projects simultaneously, prioritize effectively, and meet deadlines.