Senior IAM Architect - Entra ID & CyberArk Expert

Turtle Trax S.A.; México; Hybrid; MXN 900,000 - 1,500,000; Full time

Benefits offered by this job

Hybrid work policy

Job summary

Turtle Trax S.A. is seeking an IAM Engineer to design, implement, and manage enterprise IAM solutions using Microsoft Entra ID, Entra ID Protection, and CyberArk. You will own JML lifecycle management, governance workflows, and access reviews across cloud and on‑prem environments.

Responsibilities include enforcing Conditional Access, leading SSO integrations and adaptive authentication, and providing hands-on AD/Entra ID administration. Hybrid work policy applies; 2 days in-office weekly.

Qualifications

• 13–15+ years hands-on IAM/PAM in enterprise environments.
• Strong experience with Microsoft Entra ID, CyberArk, and Azure SSO.
• CyberArk Core PAS: Vault, CPM, PVWA, PSM.
• Active Directory, LDAP, SAML, OAuth 2.0, OIDC knowledge.
• Scripting with PowerShell and/or Python for IAM ops.
• Cloud/hybrid: Azure, AWS, GCP.
• Collaboration with HR/IT/Security for JML and access governance.
• Strong analytical, troubleshooting and communication skills.

Responsibilities

• Design, implement, and manage IAM solutions using Microsoft Entra ID, Entra ID Protection, CA, SSO, and CyberArk.
• Own JML lifecycle management for secure access provisioning and deprovisioning.
• Configure Entra ID Governance features: access packages, workflows, entitlement management, access reviews.
• Design and enforce Conditional Access and risk-based policies with Entra ID Protection.
• Lead SSO, MFA, and adaptive authentication across cloud and on‑prem apps.
• Administer and support AD, Entra ID, Identity Governance, Identity Protection, CyberArk.
• Troubleshoot authentication and access issues across CA, SSO, JML/IGA, CyberArk, On‑Prem AD.
• Maintain CyberArk CPM and PSM components for privileged access use cases.
• Run access reviews, certification campaigns, and RBAC reviews for audits.
• Monitor IAM incidents and service requests within SLAs; drive stability and security of IAM platforms.
• Drive automation, processes, SOPs, cross-team collaboration, and audit support.

Skills

IAM expertise

PAM experience

Entra ID / Azure AD

CyberArk

SAML / OAuth / OIDC

PowerShell / Python

Cloud & hybrid

Tools

CyberArk CPM

CyberArk PSM

PVWA

Entra ID Governance

SSO integrations

AD / LDAP

ServiceNow

Job description

Turtle Trax S.A. is seeking an IAM Engineer to design, implement, and manage enterprise IAM solutions using Microsoft Entra ID, Entra ID Protection, and CyberArk. You will own JML lifecycle management, governance workflows, and access reviews across cloud and on‑prem environments.

Responsibilities include enforcing Conditional Access, leading SSO integrations and adaptive authentication, and providing hands-on AD/Entra ID administration. Hybrid work policy applies; 2 days in-office weekly.