Identity & Access Management (IAM/PAM) Specialist

CCDS; Riyadh; On-site; SAR 180,000 - 240,000; Part time

Job summary

CCDS seeks an experienced IAM governance professional to operate and govern enterprise identity, access, and authentication services across the organization's environment. You will manage lifecycle processes, provisioning, and access reviews, aligning with Zero Trust and modern authentication principles.

You will also oversee privileged-access governance, audits, and incident investigations while coordinating with business owners to ensure timely reviews and compliance across Saudi regulatory

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• At least 6 years of experience in IAM governance, engineering, or operations.
• Hands-on experience with enterprise IAM, IGA, and PAM platforms.
• Strong understanding of identity lifecycle, access-control models, SSO, MFA, RBAC, least privilege, and segregation of duties.
• Experience integrating IAM solutions with enterprise applications and applying Zero Trust and modern authentication principles.
• Knowledge of Saudi regulatory requirements and international identity-security practices.

Responsibilities

• Operate and govern enterprise identity, access, authentication, IGA, and privileged-access services.
• Manage joiner, mover, and leaver identity lifecycle processes and automated account provisioning across connected systems.
• Review access requests, approvals, role assignments, segregation-of-duties conflicts, and least-privilege controls.
• Operate SSO and MFA services and investigate failed, suspicious, or anomalous authentication activity.
• Monitor identity synchronization, resolve provisioning failures, and maintain identity-data consistency.
• Run access-certification campaigns, coordinate with business owners, and elevate overdue reviews.
• Identify and remediate inactive, orphaned, excessive, or high-risk accounts and entitlements.
• Govern privileged access requests, session monitoring, recordings, shared accounts, and just-in-time access.
• Support audits, compliance evidence, IAM/PAM incident investigation, remediation tracking, and periodic operational reporting.

Skills

IAM governance

IAM engineering

IAM operations

Zero Trust

RBAC

SSO

MFA

Least privilege

Segregation of duties

Stakeholder coordination

Education

Bachelor's degree in Computer Science or Information Security

Job description

Location: On-site - Riyadh, Saudi Arabia

Contract/engagement: Project-based managed cybersecurity services (13-month RFP term)

Minimum experience: 6+ years

Role Purpose

Operate and govern enterprise identity, access, authentication, IGA, and privileged-access services across the entity's environment.

Key Responsibilities

• Manage joiner, mover, and leaver identity lifecycle processes and automated account provisioning across connected systems
• Review access requests, approvals, role assignments, segregation-of-duties conflicts, and least-privilege controls
• Operate SSO and MFA services and investigate failed, suspicious, or anomalous authentication activity
• Monitor identity synchronization, resolve provisioning failures, and maintain identity-data consistency
• Run access-certification campaigns, coordinate with business owners, and elevate overdue reviews
• Identify and remediate inactive, orphaned, excessive, or high-risk accounts and entitlements
• Govern privileged access requests, session monitoring, recordings, shared accounts, and just-in-time access
• Support audits, compliance evidence, IAM/PAM incident investigation, remediation tracking, and periodic operational reporting

Requirements

Technical and Professional Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field
• At least 6 years of experience in IAM governance, engineering, or operations
• Hands-on experience with enterprise IAM, IGA, and PAM platforms
• Strong understanding of identity lifecycle, access-control models, SSO, MFA, RBAC, least privilege, and segregation of duties
• Experience integrating IAM solutions with enterprise applications and applying Zero Trust and modern authentication principles
• Knowledge of Saudi regulatory requirements and international identity-security practices

Personal Requirements

• Strong stakeholder coordination and service ownership
• Careful, systematic, and able to handle sensitive access data responsibly
• Strong troubleshooting, reporting, and documentation skills
• Able to balance operational responsiveness with strict governance controls

Professional Certifications

Preferred: CIAM, CISSP, Microsoft Identity certification, or equivalent IAM-related certification.