Platform Security Engineer - Privilege Access Management (10-15 yrs)

Key Responsibilities :

- Design, implement, and manage PAM solutions (CyberArk, BeyondTrust) to secure privileged accounts.

- Implement and enforce least privilege principles across the organization.

- Monitor privileged access activity and investigate suspicious behavior.

- Conduct regular PAM audits and compliance reviews.

- Design, implement, and maintain IAM solutions, including identity providers (IDPs), single sign-on (SSO), and access control lists (ACLs).

- Manage user identities and access rights across various systems and applications.

- Implement and enforce multi-factor authentication (MFA) and other strong authentication mechanisms.

- Integrate IAM systems with other security tools and platforms.

- Design and implement security controls for various platforms, including cloud environments (AWS, Azure, GCP), on-premises servers, and endpoints.

- Conduct security assessments and vulnerability scans to identify and mitigate security risks.

- Implement and maintain security hardening procedures for servers and applications.

Security Monitoring & Response :

- Monitor security logs and alerts for suspicious activity.

- Investigate and respond to security incidents related to access control and identity management.

- Contribute to the development and improvement of security incident response plans.

- Stay up-to-date on the latest security threats, vulnerabilities, and best practices in PAM and IAM.

- Research and evaluate new security technologies and tools.

- Contribute to the development and improvement of security policies and procedures.

Qualifications & Experience :

Education : Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.

Experience : 5-10 years of professional experience in cybersecurity with a strong focus on PAM and IAM.

Skills :

Essential :

- Strong understanding of PAM and IAM principles and best practices.

- Experience with implementing and managing PAM solutions (CyberArk, BeyondTrust).

- Experience with IAM solutions (Active Directory, Azure AD, Okta).

- Experience with scripting languages (Python, PowerShell).

- Strong analytical and problem-solving skills.

- Excellent communication and interpersonal skills.

- Ability to work independently and as part of a team.

Preferred :

- Experience with cloud security and cloud-based IAM solutions.

- Experience with security orchestration and automation platforms (SOAR).

- Relevant security certifications (CISSP, CISM, CISA, CEH, Security+)