IAM Analyst - #1161105

Employment Type: Contract duration is 1 year but extendable for up till 3 years.

About the Role

We are seeking an experienced Identity & Access Management (IAM) Analyst to join our growing technology team. In this role, you will be responsible for designing, implementing, and supporting enterprise IAM solutions that secure access to systems, applications, and cloud environments.

You will work closely with IT Operations, Security, HR, and business stakeholders to deliver secure identity lifecycle management, access governance, authentication services, and privileged access controls across the organization.

Responsibilities

• Design, implement, and maintain enterprise IAM solutions across on-premises and cloud environments.

• Manage user lifecycle processes, including onboarding, transfers, and offboarding (JML).

• Conduct access reviews, user attestation campaigns, and Segregation of Duties (SoD) assessments.

• Administer and support Privileged Access Management (PAM) solutions.

• Configure and manage (SSO) and identity federation using SAML, OAuth 2.0, and OpenID Connect (OIDC).

• Implement and maintain Conditional Access, Multi-Factor Authentication (MFA), and passwordless authentication solutions.

• Support Active Directory, Microsoft Entra ID, and directory synchronization services.

• Monitor IAM-related security events and assist with incident response activities.

• Develop automation scripts and integrations using PowerShell, Python, or similar technologies.

• Support internal and external audits by providing evidence of identity and access controls.

• Collaborate with stakeholders to define and implement RBAC and ABAC access models.

• Evaluate and recommend emerging IAM and identity security technologies.

Skills & Experience

• Core Experience: Min 2 years of experience in Identity and Access Management (IAM) engineering or analysis within enterprise ICT environments.

• Platform Expertise: Hands-on experience with IAM/IGA tools (e.g., SailPoint, Saviynt, Okta) and Microsoft Entra ID (formerly Azure AD).

• Regulatory Knowledge: Familiarity with public sector cloud environments, GCC requirements, and data privacy laws (e.g., PDPA, GDPR) as they relate to identity.

• Protocols: Deep understanding of identity protocols including SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and SCIM.

• Directory Services: Strong proficiency in Active Directory (AD), LDAP, and Azure AD Connect.

• PAM Knowledge: Experience with Privileged Access Management (PAM) tools and managing "Just-In-Time" access is highly preferred.

• Automation: Experience using PowerShell, Bash, or Python for identity task automation and API integration.

• Infrastructure as Code: Experience managing identity configurations via Terraform or Bicep is an added advantage.

• Cloud Security: Familiarity with cloud-native security tools (AWS IAM, Azure Policy) and Zero Trust Architecture principles.

• Certifications: Professional certifications such as CIAM, CAMS, Microsoft Identity and Access Administrator (SC-300), Okta Certified Professional, or CISSP will be an added advantage.

• Soft Skills: Strong analytical skills for troubleshooting complex access issues and the ability to document technical identity workflows clearly.

• Education: Degree or Diploma in Computer Science, Cybersecurity, Information Technology, or related disciplines.