Cyber Security Expert – Identity & Access Management

UniCredit; Milano; In loco; EUR 65.000 - 85.000; Tempo pieno

Vantaggi offerti da questo lavoro

Professional development opportunities

Inclusive workplace culture

Descrizione del lavoro

A leading European Bank in Milan seeks a Cyber Security Expert specializing in Identity & Access Management (IAM). This role involves designing and implementing solutions for Identity Governance, Access Management, and Privileged Access Management. Candidates should have a minimum of 3 years of experience, with strong skills in cloud identity platforms and programming. The position offers opportunities for significant professional development within a supportive environment.

Competenze

• Minimum 3 years experience in IAM projects.
• Experience with cloud identity platforms including Microsoft Entra ID.
• Strong knowledge of PAM solutions.

Mansioni

• Design and implement Identity Governance solutions.
• Contribute to the design of enterprise access management solutions.
• Implement and manage solutions for privileged accounts.

Conoscenze

Identity & Access Management

Cloud architecture

Programming in Java

Scripting skills

Strumenti

Azure services

CyberArk

Google Cloud IAM

Descrizione del lavoro

We are looking for a highly motivated Cyber Security Expert specialized in Identity & Access Management (IAM) to strengthen our Group Security function. In this role, you will contribute to key security initiatives that support the Group’s digital transformation, ensuring secure access to critical assets, compliance with regulatory requirements, and a strong security-by-design posture across all environments.

What you can expect from us

Identity Governance (IGA)

• Design and implement Identity Governance solutions across the entire identity lifecycle (joiner/mover/leaver).
• Define and maintain role models (RBAC) and manage periodic access review campaigns.
• Oversee automated provisioning and reconciliation across multiple target systems.
• Implement and enhance password management processes and self-service capabilities.

Access Management & Authentication

• Contribute to the design and implementation of enterprise access management solutions, including SSO, MFA, biometric authentication, and federation (SAML, OAuth2, OIDC).
• Ensure secure integration of customer/employee applications through modern authentication patterns.

Privileged Access Management (PAM)

• Implement and manage solutions for secure administration of privileged accounts across critical infrastructures.
• Support continuous improvement of PAM controls, credential vaulting, session monitoring, and just-in-time access.

Cloud IAM & Architecture

• Design secure, high-performing cloud architectures leveraging services such as Application Gateway, API Management, Service Bus, Redis, Azure SQL.
• Implement and manage IAM solutions across multi-cloud environments (Microsoft Entra ID, Google Cloud Platform, AWS IAM).
• Apply CIEM principles to ensure least privilege in cloud ecosystems.

Automation & Development

• Contribute to automation initiatives leveraging scripting and development skills (Java, Python, PowerShell, Bash).
• Support integration projects across APIs, Web Services, and modern application architectures.

Key Success Indicators

• Improved automation and reduction of manual provisioning.
• Increased adoption of secure authentication mechanisms.
• Strengthened protection of privileged access.
• Successful delivery of IAM projects.

What we expect from you

• Minimum 3 years experience in IAM projects.
• Experience with cloud identity platforms including Microsoft Entra ID and Google Cloud IAM.
• Proven experience designing cloud architectures using Azure services.
• Strong knowledge of PAM solutions (CyberArk, One Identity, Delinea).
• Solid programming and scripting capabilities.

Nice to Have

• Knowledge of DevOps tools (Docker, Kubernetes, Ansible).
• Experience with LDAP directories and OS environments.
• Knowledge of relational databases.
• Experience with ETL technologies.
• Understanding of Web/Application Servers.
• Background in Application Security and API protection.
• Experience with API Gateway and API Management platforms.
• Understanding of modern Digital Identity frameworks.

Our offer to you

#UnlockYourPotential - People are our greatest asset, thanks to their diverse experiences, skills and perspectives. Our mission is to create the right environment and provide the tools that allow our talents to achieve challenging goals. UniCredit University is the framework developed to guarantee a common and transparent approach to development opportunities across the Group, through a customized offer for training and professional development.

About UniCredit Group

UniCredit is a pan-European Commercial Bank with a unique service offering in Italy, Germany, Central and Eastern Europe. Our purpose is to empower communities to progress, delivering the best-in-class for all stakeholders, unlocking a better tomorrow for our clients and our people across Europe. We serve over 15 million customers worldwide. They are at the heart of what we do in all our markets. Digitalisation and our commitment to ESG principles are key enablers for our service. They help us deliver excellence to our stakeholders and creating a sustainable future for our clients, our communities and our people.

We are an equal opportunity employer. We stand together in nurturing a workplace that welcomes diverse thinking and inclusive behaviors. Making all voices heard and leveraging "diversity of thought" regardless of gender identity, age, race, ethnicity, sexual orientation, ability, cultural background, we ensure sustainable growth and new business opportunities, a strong drive for innovation and creativity, as well as a general improvement of the work climate with positive impact on productivity, well-being and engagement of our people.