One Identity PAM Safeguard & IAM Engineer

About the role

We are looking for an experienced One Identity PAM Safeguard & IAM Engineer to design, implement, administer and support enterprise Identity and Access Management (IAM) and Privileged Access Management (PAM) solutions. The role focuses on securing identity lifecycle, privileged account protection and ensuring compliance with security standards.

Key responsibilities

• Deploy, configure and administer One Identity Safeguard, including credential vaulting, password rotation, session monitoring and recording.
• Integrate Safeguard with Active Directory, LDAP, Azure AD and enterprise applications.
• Design, implement and maintain One Identity Manager components, covering provisioning, de‑provisioning, role management and access certification.
• Develop and maintain connectors for AD, Azure AD, SAP, ServiceNow, SQL, CSV and other systems.
• Implement RBAC, Segregation of Duties and access request workflows.
• Generate audit, compliance and security reports; support security audits and incident response.
• Ensure compliance with ISO 27001, SOX, GDPR, SOC 2 and internal policies.

Required profile

• Bachelor’s degree in Computer Science, Information Security, IT or related field.
• 3–7 years of hands‑on experience with One Identity Manager and/or One Identity Safeguard.
• Strong experience with Active Directory, Azure AD, LDAP, Windows and Linux environments.
• Proven knowledge of IAM concepts (provisioning, RBAC, SoD) and PAM concepts (credential vaulting, session monitoring).

Required skills

• One Identity Manager
• One Identity Safeguard
• Active Directory
• Azure AD
• LDAP
• Windows
• Linux
• SAP
• ServiceNow
• SQL
• CSV
• Role‑Based Access Control (RBAC)
• Segregation of Duties (SoD)