Identity And Access Management Specialist

Sasso Consulting; Johannesburg; Híbrido; ZAR 600.000 - 900.000; Jornada completa

Descripción de la vacante

Sasso Consulting is recruiting an Identity and Access Management Specialist for a 3-year hybrid contract in Gauteng, South Africa. The role focuses on designing, implementing, administering and maintaining IAM solutions across complex IT environments, with emphasis on lifecycle management, RBAC/ABAC, and secure authentication.

Responsibilities include configuring SSO, MFA and conditional access, integrating IAM with Active Directory and cloud platforms, and supporting governance, audits and

Descripción del empleo

What Jobs are available for Behrighetshantering in SouthAfrica?

Showing 1 Behrighetshantering jobs in SouthAfrica

Identity and Access Management Specialist

New

Posted today

Job Description

Location: Gauteng

Positions Available: 5

Salary: Market-related

Employment type: 3 Year contract, hybrid

We are seeking experienced and technically proficient Identity and Access Management (IAM) Specialists to design, implement, administer and maintain identity and access management solutions within complex enterprise IT environments.

Key Responsibilities Identity and Access Management

• Design, implement, configure and maintain enterprise identity and access management solutions.
• Administer user identities, access permissions, roles and security groups across enterprise systems.
• Manage the complete identity lifecycle, including user onboarding, transfers, role changes and termination.
• Implement and maintain automated user provisioning and deprovisioning processes.
• Configure and manage role-based access control (RBAC) and attribute-based access control (ABAC) mechanisms.
• Ensure access rights are assigned according to least-privilege and need-to-know principles.
• Maintain identity repositories, directory services and identity synchronisation processes.
• Investigate and resolve identity management and access-related incidents.

Authentication and Access Security

• Implement, configure and support single sign‑on (SSO) solutions.
• Manage multi‑factor authentication (MFA) and conditional access policies.
• Configure authentication and authorisation protocols, including SAML, OAuth 2.0 and OpenID Connect.
• Support federation services and secure identity integration between applications and platforms.
• Monitor and investigate suspicious authentication activities and unauthorised access attempts.
• Implement secure access controls for enterprise applications, cloud services and infrastructure.
• Support passwordless authentication and modern identity security initiatives.

Identity Governance and Compliance

• Implement and maintain identity governance and administration (IGA) processes.
• Conduct periodic user access reviews and access recertification exercises.
• Identify and remediate excessive, inappropriate or conflicting access permissions.
• Support segregation of duties (SoD) controls and privileged access reviews.
• Maintain accurate identity and access management records and audit trails.
• Ensure IAM controls comply with organisational policies and relevant security frameworks.
• Support internal and external audits by providing access control evidence and documentation.
• Assist with IAM risk assessments and remediation of identified security weaknesses.

Privileged Access and Enterprise Integration

• Support privileged access management processes and integration with dedicated PAM platforms.
• Assist with securing administrative accounts, service accounts and privileged identities.
• Integrate IAM solutions with Active Directory, Microsoft Entra ID, enterprise applications and cloud platforms.
• Collaborate with infrastructure, cybersecurity, application development and cloud teams.
• Support IAM automation through scripting, APIs and workflow integrations.
• Participate in identity security improvement projects and system upgrades.
• Maintain technical documentation, operational procedures and IAM architecture records.

Minimum Requirements

• Relevant diploma or degree in Information Technology, Computer Science, Information Systems, Cybersecurity or a related discipline.
• Typically 3–5 years of relevant experience in identity and access management, identity security or enterprise access administration.
• Proven hands‑on experience implementing, configuring or administering enterprise IAM solutions.
• Strong working knowledge of Microsoft Active Directory and Microsoft Entra ID (formerly Azure Active Directory).
• Practical experience with user provisioning, deprovisioning and identity lifecycle management.
• Experience implementing or supporting SSO, MFA and conditional access solutions.
• Strong understanding of authentication and authorisation protocols, including SAML, OAuth 2.0 and OpenID Connect.
• Experience managing role-based access controls, security groups and access permissions.
• Knowledge of identity governance, access certification and segregation of duties.
• Understanding of privileged access management principles and least-privilege security.
• Familiarity with identity management across on‑premises, cloud and hybrid environments.
• Knowledge of information security frameworks such as ISO 27001 and NIST.
• Strong troubleshooting, analytical and technical documentation skills.

Technical Skills and Competencies Identity and Access Management Platforms

• Microsoft Entra ID
• Microsoft Active Directory
• Microsoft Entra ID Governance
• SailPoint Identity Security Cloud / IdentityIQ
• Saviynt
• Okta
• One Identity Manager
• IBM Security Verify
• Ping Identity
• Oracle Identity Governance
• Authentication and Federation
• Single Sign‑On (SSO)
• Multi‑Factor Authentication (MFA)
• Conditional Access
• Security Assertion Markup Language (SAML 2.0)
• OAuth 2.0
• OpenID Connect (OIDC)
• Lightweight Directory Access Protocol (LDAP)
• Kerberos authentication
• Identity federation and trust relationships
• Identity Governance and Administration
• Identity lifecycle management
• Automated provisioning and deprovisioning
• Joiner, mover and leaver processes
• Role‑Based Access Control (RBAC)
• Attribute‑Based Access Control (ABAC)
• Access certification and recertification
• Segregation of Duties (SoD)
• Identity governance workflows
• Access request and approval management
• Privileged Access and Security
• Privileged Access Management (PAM) principles
• Privileged Identity Management (PIM)
• Least‑privilege access controls
• Administrative and service

This advertiser has chosen not to accept applicants from your region.