Identity & Access Management Security Engineer Senior

Identity Security Engineer

The Identity Security Engineer is a pivotal member of the Identity and Access Management team, responsible for ensuring efficient and secure user access across the organization. This role focuses on improving the user onboarding experience, streamlining employee transfers, and guaranteeing compliance with termination policies to maintain the highest level of security and operational efficiency. The engineer is the main owner of the Bank’s Identity Governance and Administration platform (IGA), acting as a subject matter expert on Identity and Access Management (IAM) technologies and processes, implementing solutions and providing support to the organization.

A key aspect of this role is creating and maintaining robust IAM workflows and automations, establishing clear service level agreements (SLAs) for onboarding new users and other key IAM processes. The engineer will develop key performance indicators (KPIs) to measure the effectiveness of IAM processes and drive continuous improvement, collaborating closely with Cyber Security, Human Resources, RPA, and Lines of Business (LoBs) to implement and optimize user‑friendly IAM solutions.

• Onboarding and User Lifecycle Management
  • Develop and implement streamlined processes for new user setup, ensuring a positive and efficient onboarding experience that meets defined SLAs.
  • Oversee user access modifications and transfers, ensuring appropriate permissions are maintained throughout employee lifecycle changes.
  • Implement and strictly enforce procedures for user access termination, minimizing security risks associated with departing employees.
• IAM System Management
  • Manage the lifecycle of IAM solutions, including releases and integrations with other systems.
  • Work with the design, implementation, maintenance, and troubleshooting of the organization’s automated access control and identity management systems.
  • Utilize programming skills to customize and enhance IGA platforms, ensuring they meet the organization’s business and compliance requirements.
  • Develop and maintain scripts and automation for IAM processes.
  • Troubleshoot and resolve technical issues related to IAM platforms and services.
• Collaboration and Improvement
  • Work closely with Cyber Security, Human Resources, RPA, and LOB teams to create efficient and frictionless IAM and SSO solutions.
  • Identify and address process deficiencies, implementing improvements to enhance the overall efficiency and effectiveness of IAM operations.
  • Support development and implementation of IAM KPIs and KRIs, including the development of scorecards and dashboards.
• Security and Compliance
  • Ensure IAM solutions comply with relevant security standards, policies, and regulations.
  • Assist with internal and external audit and regulatory bodies during security assessments and audits of IAM systems.
  • As a backup for other IAM professionals, conduct re‑certifications of special user access reviews to ensure ongoing compliance with security policies and regulations.
• Continuous Learning
  • Stay abreast of technological and threat environment changes that impact the IAM function, assisting with creating and executing a comprehensive IAM vision to meet those challenges.

• 5-7 years of prior experience in IAM technologies: IAM, IGA, SSO, MFA, Active Directory, Digital Certificates, and Certificate Authority.
• Experience leading IAM delivery processes to ensure automation, security, and governance best practices; has led or participated in enterprise rollout of an IAM platform solution.
• Expert knowledge of IAM concepts such as Least Privilege, Privilege Access, Roles and Data Mining, Segregation of Duty (SoD), and Role Based Access Control.
• Comfortable working within IAM/IGA platforms, including building customer workflows, connectors, and other customization required to manage across multiple systems.
• Proficiency in programming languages such as Java, Python, or Power Shell, particularly in the context of IGA platforms.
• Strong knowledge of IAM and security best practices and guidelines; implementation based on risk, criticality, and complexity.
• Knowledge and experience with Identity Management…