One Identity PAM Safeguard & IAM Engineer

About the role

We are looking for an experienced One Identity PAM Safeguard & IAM Engineer to design, implement, administer and support enterprise Identity and Access Management (IAM) and Privileged Access Management (PAM) solutions. The role will ensure secure identity lifecycle management, privileged account protection and compliance with security standards.

Key responsibilities

• Deploy, configure and administer One Identity Safeguard, including credential vaulting, password rotation, session monitoring and recording.
• Design and maintain One Identity Manager components such as Authentication Services, Password Manager, Safeguard and Starling Connect.
• Implement identity lifecycle processes – provisioning, de‑provisioning, role management, access certification and attestation campaigns.
• Develop and maintain connectors for Active Directory, Azure AD, LDAP, SAP, ServiceNow, SQL, CSV and other enterprise applications.
• Configure RBAC, Segregation of Duties, access request workflows and secure privileged access approvals.
• Generate audit, compliance and security reports; support security audits, compliance reviews and incident response.
• Perform system upgrades, patch management, troubleshooting and performance optimisation.

Required profile

• Bachelor’s degree in Computer Science, Information Security, IT or related field.
• 3–7 years of hands‑on experience with One Identity Manager and/or One Identity Safeguard.
• Strong experience with Active Directory, Azure AD, LDAP, Windows and Linux environments.
• Practical knowledge of IAM concepts (provisioning, RBAC, SoD) and PAM concepts (credential vaulting, session monitoring).

Required skills

• One Identity Manager
• One Identity Safeguard
• Active Directory
• Azure AD
• LDAP
• Windows
• Linux
• SAP
• ServiceNow
• SQL
• CSV
• RBAC
• Segregation of Duties (SoD)
• API‑based integrations