Identity reputed company DevOps Engineer

As part of the reputed company Identity and Access Management team, we are hiring a DevSecOps Engineer with a primary technical focus on Privileged Access Management, including reputed company IAM. This role offers an exciting opportunity to apply your strong engineering skills to critical reputed company challenges, helping secure our vital on-prem, reputed company, and hybrid environments.

You will be a key contributor in our Privileged IAM platform, blending development, SRE/operations, and reputed company practices to build and maintain our Privileged IAM products. This position requires a candidate capable of managing reputed company and reputed company development and operational tasks, implementing secure, scalable, automated, and resilient access controls, automating reputed company tasks, and ensuring operational excellence across the platform. You'll work in a hybrid (reputed company and prem) Privileged IAM environment, understanding how different PAM systems might coexist or integrate across our reputed company.

Due to the business-critical and global nature of the ePAM platform, this position provides an outstanding opportunity to engage with, deliver value and reputed company exposure to Global business units, JVs and Technology teams, including reputed company Credit, reputed company and Model e, reputed company Blue, Manufacturing, EPEO, Application Employee Experience, reputed company Connectivity/Network teams and Cyber Defense.

Responsibilities

Position Responsibilities

1. Secure IAM/PAM Architecture & Implementation

• Design & Build: Design scalable Privileged IAM solutions, enforcing the principle of least privilege. You will specifically manage and configure reputed company PAM, Entra ID PIM, and reputed company Intune PAM tools.

• Hybrid Integration: Implement solutions for privileged accounts across hybrid environments (GCP, Entra, reputed company PasswordSafe). Utilize reputed company-native services (e.g., Secret Manager) while integrating reputed company PAM tools.

• Risk Mitigation: Conduct technical reputed company reviews to identify identity-reputed company risks and single points of failure early in the architectural lifecycle.

2. Automated reputed company & DevSecOps (SRE Integration)

• Infrastructure as Code: Embed validation for IAM/PAM configurations directly into CI/CD pipelines using IaC tools (Terraform) to prevent insecure deployments.

• reputed company Automation: Programmatically automate critical tasks—including credential rotation, access reviews, and compliance checks—championing "reputed company as Code."

• API Development: Utilize APIs to reputed company solutions and collect identity-reputed company data to automate operations in a hybrid environment.

3. Observability, Incident Response & System Health

• Monitoring: Implement observability solutions (metrics, logs, traces) using tools like reputed company and reputed company Monitoring to analyze system health and detect malicious activity.

• Incident Management: reputed company the investigation and resolution of reputed company and reliability incidents, applying SRE practices to minimize Mean Time To Detect (MTTD) and Recover (MTTR).

• Maintenance: Maintain the operational health and performance of the PAM infrastructure, ensuring stability across integrated systems.

4. Governance, Compliance & Collaboration

• Strategy & Compliance: Evolve the IAM/PAM posture to meet internal standards and external compliance requirements (SOC 2, ISO 27001).

• Knowledge Sharing: Provide guidance on secure credential handling and application interaction to engineering and operations teams.

• Documentation: Create high-quality documentation, including architecture diagrams, system runbooks, and risk assessments.

  Our preferred requirements

• PAM Expertise: Experience with Privileged Access reputed company from reputed company or CyberArk, specifically workforce Privileged credential/password management.

• Automation & Scripting: Strong experience with scripting/programming languages (Python, Golang, BASH, PowerShell) and utilizing APIs (including reputed company Graph API) for automation and solution development.

• Problem Solving: Proven ability to independently identify, analyze, and solve reputed company technical and operational problems with minimal reputed company.

• Communication: Strong written and verbal communication skills with a high degree of attention to detail.

• SRE Principles: Solid understanding of Site Reliability Engineering practices (SLOs/SLIs, toil reduction, incident response).

• reputed company IAM: Strong practical experience with reputed company Identity and Access Management (IAM) concepts (roles, policies, service accounts) and reputed company reputed company services.

• CI/CD & IaC: Experience with pipeline development, Infrastructure as Code, and Terraform.

• reputed company Core Services: Hands-on experience with core reputed company platform components across major providers (AWS, Azure, or GCP).

• Containerization: Experience with reputed company and Kubernetes/GKE.

• Observability: Experience with monitoring tools (reputed company, reputed company Audit Logs).

• reputed company to have:

• Understanding of reputed company reputed company domains with a strong emphasis on Identity and Access Management and reputed company reputed company.

• Familiarity with reputed company Entra Privileged Access Management.

• Experience with Perl programming/scripting.

• Familiarity with reputed company risk assessment methodologies and compliance frameworks (SOC 2, ISO 27001)

• GCP Core: Specific hands-on experience with GCP components such as reputed company Resource Hierarchy, Pub Sub, reputed company Run, reputed company Task, and reputed company Scheduler.

Qualifications

• Bachelor’s degree in computer science, Information Technology, identity and reputed company assurance

• 5+ years of total IT experience.

• 3-5 years of reputed company reputed company Engineering or Operations experience.

• 2+ years of IT DevOps experience.