Identity & Access Management - Testing Engineer

Role & responsibilities

• Manage end-to-end Identity and Access Management (IAM) processes including Joiner-Mover-Leaver (JML) lifecycle.
• Design, implement, and support user provisioning/de-provisioning workflows.
• Implement and maintain Role-Based Access Control (RBAC) models.
• Perform access certification reviews, entitlement governance, and segregation of duties (SoD) analysis.
• Manage end-to-end Application Onboarding into the IAM platform, including defining access models, configuring role-based provisioning, and establishing authentication standards.
• Manage and troubleshoot SSO, MFA, SAML, OAuth 2.0, OpenID Connect, and LDAP integrations.
• Support Privileged Access Management (PAM) solutions and privileged account governance.
• Govern and manage Non-Human Identities (NHIs) including service accounts, API keys, bots, and machine credentials, ensuring proper lifecycle management, least-privilege access, and periodic attestation to reduce security risk.
• Design, configure, and maintain IAM connectors (including SC2 and REST-based connectors) to enable automated provisioning, deprovisioning, and reconciliation between the identity governance platform and target applications or directories
• Conduct access reviews, audits, and compliance assessments.
• Collaborate with security, application, infrastructure, and business teams to define access requirements.
• Analyze security risks and implement appropriate identity controls.
• Develop IAM reports, dashboards, and metrics for audit and compliance purposes.
• Participate in incident management, problem management, and change management activities.
• Create and maintain technical documentation, SOPs, and knowledge articles.

Preferred candidate profile

• Strong experience with one or more IAM platforms:
• Saviynt
• SailPoint IdentityIQ / IdentityNow
• Azure AD / Microsoft Entra ID

Authentication & Authorization

• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• SAML
• OAuth 2.0
• OpenID Connect
• LDAP / Active Directory

Access Governance

• User Access Management
• Role Management
• Access Certification
• RBAC
• SoD Controls
• Identity Governance & Administration (IGA)

Security & Compliance

• ISO 27001
• NIST
• SOX
• GDPR
• ITGC Controls

Preferred Skills

• Experience with CyberArk or other PAM tools.
• Knowledge of cloud security, Azure/AWS IAM services.
• Experience in automation using PowerShell, Python, or REST APIs.
• Familiarity with ServiceNow integration and ticket workflows.
• Understanding of Zero Trust security principles.