Identity & Access Management (IAM) Support Engineer (m/f/d)

iC Consult; EE. UU.; Híbrido; USD 34.000 - 51.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible hours

Remote work

25 days annual leave

Private health insurance

Company mobile phone

Food vouchers

Descripción de la vacante

iC Consult seeks an IAM Specialist to provide second- and third-level support for enterprise identity and access platforms, ensuring reliability and rapid incident resolution across provisioning, credentials, and integrations.

You will focus on identity lifecycle management, access management, or privileged access management, depending on background, and collaborate with security and operations teams to improve platform processes. Remote/hybrid options available in Bulgaria.

Formación

• Hands-on experience operating IAM, access management, or PAM services.
• Familiarity with Active Directory, LDAP, SAML, SCIM, OAuth/OIDC, and related integrations.
• Strong troubleshooting skills, including working with logs, APIs, and relational databases.
• Understanding of least privilege, zero trust, and compliance needs.
• Fluent English and strong analytical and communication skills.

Responsabilidades

• Operate IAM, access management, or privileged access management platforms and investigate incidents involving provisioning, credentials, integrations, or system health.
• Maintain user lifecycle processes, directory services, authentication and federation; or manage access policies and authentication flows; or administer privileged accounts, vault policies, sessions, and just-in-time access.
• Monitor connectors, workflows, and integrations with directories, HR systems, applications, IT service management, and security monitoring tools.
• Analyze identity data, prepare reports, and support automation with databases and scripts.
• Implement patches and service improvements through change management, and keep runbooks and support documentation current.
• Work with customer security and operations teams to improve platform processes.

Conocimientos

IAM operations

Troubleshooting

Identity protocols

Analytical thinking

Communication

Educación

CS or Information Security degree

Herramientas

Active Directory

LDAP

SAML

SCIM

OAuth/OIDC

Descripción del empleo

Role overview

Provide second- and third-level support for enterprise identity and access platforms, keeping their services reliable and resolving operational issues. Depending on your background, the work may focus on identity lifecycle management, access management, or privileged access management.

Responsibilities

• Operate IAM, access management, or privileged access management platforms and investigate incidents involving provisioning, credentials, integrations, or system health.
• Maintain user lifecycle processes, directory services, authentication and federation; or manage access policies and authentication flows; or administer privileged accounts, vault policies, sessions, and just-in-time access.
• Monitor connectors, workflows, and integrations with directories, HR systems, applications, IT service management, and security monitoring tools.
• Analyze identity data, prepare reports, and support automation with databases and scripts.
• Implement patches and service improvements through change management, and keep runbooks and support documentation current.
• Work with customer security and operations teams to improve platform processes.

Requirements

• A degree in computer science or information security, or equivalent practical experience.
• Hands-on experience operating IAM, access management, or privileged access management services.
• Familiarity with Active Directory, LDAP, SAML, SCIM, OAuth/OIDC, and related integrations.
• Strong troubleshooting skills, including working with logs, APIs, and relational databases.
• Understanding of least privilege, zero trust, and compliance needs.
• Fluent English and strong analytical and communication skills.

Nice to have

• Scripting experience with PowerShell or Python, and relevant IAM, access management, or PAM certifications.
• Experience with platforms such as SailPoint, One Identity, Omada, Saviynt, Ping Identity, ForgeRock, CyberArk, Delinea, BeyondTrust, or HashiCorp Vault.
• Exposure to cloud identity services such as Entra ID, AWS, or Google Cloud; German is an advantage.

Benefits and work setup

• Bulgaria-based role, with remote or hybrid options in Sofia, Plovdiv, or Varna.
• Listed benefits include flexible hours, remote work, 25 days of annual leave, private health insurance, a company mobile phone, and food vouchers; availability may depend on location and working arrangements.