Iam Team Leader

Dellent; Viseu; Híbrido; EUR 70 000 - 100 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Onboarding program

Regular feedback

Prestigious client project

Competitive salary

Career development

Collaborative culture

Partner discounts

Team-building events

Resumo da oferta

Sysmatch is seeking an IAM Team Leader to design and govern end-to-end IAM architecture, including AD DS, AD FS, AD CS, and PKI, while leading a hybrid team across time zones.

You will drive Entra ID, MFA, SSO, and SCIM automation, manage PAM with CyberArk/SailPoint, and ensure governance with ServiceNow modules. Strong English communication is essential.

Qualificações

• Minimum 7 years in IAM with 2+ in leadership or architecture.
• Microsoft: Identity & Access Administrator Associate or equivalent.
• Expert knowledge of AD DS/AD FS/AD CS and Kerberos.
• Extensive experience with Microsoft Entra ID, CA, SSO, and SCIM automation.
• Strong authentication protocols: SAML, OAuth2, OIDC, RADIUS.
• Experience with CyberArk and SailPoint governance platforms.
• Scripting and automation with PowerShell and Python.
• ServiceNow experience in Incident/Change/Request/CMDB.

Responsabilidades

• Design and govern IAM architecture, AD DS/AD FS/AD CS and PKI.
• Oversee Entra ID, Conditional Access, PIM, MFA, SSO, B2B/B2C, SCIM.
• Lead PAM with CyberArk and SailPoint integrations.
• Coordinate identity lifecycle automation and governance.
• Guide architecture reviews, capacity planning and audits.

Conhecimentos

Identity & Access Management

Active Directory

Microsoft Entra ID

FIM/ PAM

Scripting (PowerShell)

Python

ServiceNow

SSO / MFA / PKI

Threat intelligence collaboration

English communication

Formação académica

Certifications in Identity & Access Management

Ferramentas

CyberArk

SailPoint

AD FS

AD CS

Descrição da oferta de emprego

IAM Team Leader – Hybrid (Lisbon) M/F

Who we are: With over 25 years of experience, Sysmatch is a well-established name in IT Consultancy and Outsourcing, involved in both national and international projects that promote excellence in technology and services.

Our secret? A team that blends talent, creativity, and experience to deliver robust, scalable, and tailored solutions. We're not just tech experts — we're partners who support our clients' transformation, anticipate trends, and drive their evolution.

Flexibility, innovation, and a forward-thinking mindset are part of our DNA. We're hiring: IAM Team Leader – Hybrid - (Lisbon 3x) M/F

Responsibilities

• Design and govern the end-to-end IAM architecture, including Active Directory Domain Services (AD DS) domain structure, FSMO roles, replication topology, Group Policy, DNS/DHCP integration, and forest trust relationships.
• Architect and oversee Active Directory Federation Services (AD FS), Single Sign-On (SSO) configurations, and trust relationships with external identity providers.
• Design and maintain the Active Directory Certificate Services (AD CS/PKI) architecture, including Certification Authority (CA) hierarchy, certificate templates, and auto-enrollment policies.
• Govern the Microsoft Entra ID architecture, including identity lifecycle management, Conditional Access policies, MFA and passwordless authentication strategies, SSO integrations, external identities (B2B/B2C), and SCIM automation.
• Define Identity Governance frameworks, including Privileged Identity Management (PIM) role lifecycle, Access Review schedules, access assignment policies, and privileged identity protection standards.
• Oversee the Privileged Access Management (PAM) architecture and integrations with CyberArk and SailPoint, ensuring least-privilege enforcement and privileged session monitoring.
• Lead identity security initiatives, including Identity Protection signals, risk-based access policies, threat correlation with the Security Operations Center (SOC), and audit evidence preparation.
• Conduct architecture reviews, capacity planning, and lifecycle governance across the entire IAM infrastructure.
• Act as the highest technical escalation point for complex identity-related incidents that cannot be resolved by IAM or PAM teams.
• Define and maintain automation frameworks using PowerShell and Python for identity lifecycle operations, compliance validation, and drift detection.
• Coordinate IAM workflow orchestration through ServiceNow, ensuring that Change, Request, Incident, and lifecycle processes are automated, auditable, and compliant.
• Produce architecture documentation, technical design decisions, compliance reports, and governance documentation for internal teams and customers.
• Support recruitment, onboarding, and training of new IAM team members.

Mandatory Requirements

• Minimum of 7 years of hands-on experience in Identity and Access Management, including at least 2 years in a team leadership, architecture, or supervisory role.
• Microsoft Certified: Identity and Access Administrator Associate certification (or equivalent).
• Expert knowledge of Active Directory (AD DS, AD FS, and AD CS), Kerberos, LDAP and Group Policy.
• Extensive experience with Microsoft Entra ID (Azure AD), Conditional Access, Privileged Identity Management (PIM), MFA and passwordless authentication strategies, SSO integrations, external identities (B2B/B2C), and SCIM automation.
• Strong understanding of authentication protocols, including SAML, OAuth 2.0, OpenID Connect (OIDC), and RADIUS.
• Experience with CyberArk Privileged Access Management and SailPoint identity governance platforms.
• Proven experience designing and governing Public Key Infrastructure (PKI) architectures and digital certificate services.
• Strong scripting and automation skills using PowerShell and Python.
• Familiarity with ServiceNow, including Incident, Change, Request and CMDB modules.
• Excellent analytical and structured problem-solving skills.
• Strong written and verbal communication skills in English (B2 level or above), with the ability to interact with customers and produce governance reports.
• Proven experience managing shift-based teams and coordinating distributed teams across multiple time zones.

Nice to Have

• Microsoft Certified: Security, Compliance, and Identity Fundamentals or Microsoft Cybersecurity Architect Expert certification.
• Previous experience in Managed Service Provider (MSP) environments or the financial services sector. Experience automating identity lifecycle processes using SCIM and API integrations.
• Knowledge of regulatory frameworks such as DORA, FCA, or PRA.
• Experience designing and implementing Zero Trust architectures.
• Familiarity with BeyondTrust or other Privileged Access Management (PAM) platforms in addition to CyberArk.
• Knowledge of Active Directory Domain Services (AD DS) decommissioning strategies and cloud identity migration.

What we offer

• A personalized onboarding experience that welcomes and supports you throughout your journey.
• Regular and constructive feedback to boost your growth and development.
• A dynamic project with a prestigious client.
• A competitive salary package, aligned with your experience and skills.
• Career development opportunities through ambitious and innovative tech projects.
• A collaborative culture that values creativity and individual progress.
• Access to exclusive discounts in a wide network of partners, including health, wellness, travel, culture, gastronomy, leisure and much more.
• Team-building events and initiatives that create memorable shared experiences.

Salary Range: ******€ - ******€ Gross Annual + Benefits