- Company Name
- Optimum
- Job Title
- System Engineer - Identity
- Job Description
-
**Job title**
System Engineer – Identity
**Role Summary**
Design, implement, and maintain the organization’s Identity and Access Management (IAM) and Privileged Access Management (PAM) platforms. Lead integration of privileged accounts with on‑premises and cloud systems, enforce security compliance, and provide technical expertise across business units.
**Expectations**
* Oversee end‑to‑end IAM/PAM lifecycle: onboarding, provisioning, de‑provisioning, and continuous improvement.
* Ensure solutions meet internal security standards and industry best practices.
* Act as subject‑matter expert on identity, access, and privilege management technologies.
**Key Responsibilities**
* Install and configure CyberArk components (EPV, CPM, PVWA, PSM, PSMP, EPAM, VPAM) and equivalent solutions.
* Engineer privileged account integration for on‑premises and cloud environments (Azure, AWS, GCP).
* Implement automated password rotation for service and privileged accounts.
* Conduct regular security assessments, audits, and remediation of privileged access.
* Develop and maintain security baselines, documentation (runbooks, procedures, manuals), and run‑time support.
* Provide information‑security consulting to business units and other departments.
* Manage vendor relationships and support tickets for engineering team.
**Required Skills**
* 3–5 years in Information Security focused on IAM/PAM, with hands‑on experience in CyberArk.
* Deep knowledge of RBAC, SSO, identity governance (e.g., SailPoint, Okta).
* Proficiency with Active Directory, LDAP, Oracle Identity, Unix/Linux identity.
* Cloud expertise (Microsoft Azure, AWS, GCP) and privileged account management in hybrid environments.
* Scripting/Programming: Unix/Linux shell, Perl, Windows batch/VBS, or MS Access.
* Strong analytical and troubleshooting abilities.
**Required Education & Certifications**
* Bachelor’s degree in Information Systems, IT Security, Cybersecurity, Computer Science or equivalent.
* Certifications such as CISSP, CISM, or CyberArk Certified Threat Analyst / CyberArk Certified Deployment Engineer highly preferred.