Senior IAM Engineer

Role :

IAM Senior Engineer (CIAM & PAM – CyberArk)

Overview

The IAM Senior Engineer will be responsible for the design, build, deployment, and support of Customer Identity & Access Management (CIAM) and Privileged Access Management (PAM) solutions within a global enterprise environment. This role plays a key part in securing customer identities, privileged accounts, and critical infrastructure by leveraging industry-leading platforms such as

CyberArk Cloud PAM, Azure AD, and Okta .

The IAM Senior Engineer will ensure secure, compliant, and efficient access across the organization while maintaining consistency, adherence to standards, and seamless integration with enterprise applications and infrastructure.

Key Responsibilities

CIAM (Customer Identity & Access Management)

Design and implement CIAM platforms leveraging solutions such as

Azure AD B2C

and

Okta .

Configure and support

MFA, SSO, Conditional Access, RBAC, and risk-based authentication

for large-scale customer environments.

Develop automation and scripting for

user lifecycle management, directory synchronization, and identity verification workflows .

Implement fraud prevention controls and identity verification algorithms.

Integrate CIAM platforms with enterprise and SaaS applications via

APIs, OAuth, OpenID Connect, and SAML .

PAM (Privileged Access Management – CyberArk)

Engineer, configure, and manage

CyberArk Cloud PAM

solutions, ensuring secure management of privileged accounts across servers, databases, and applications.

Automate onboarding of privileged accounts and endpoints.

Monitor and analyze privileged session activity to ensure compliance with security policies.

Implement

certificate management, secrets management, and password rotation policies .

Collaborate with infrastructure and application teams to integrate CyberArk into enterprise environments.

Integration, Security & Compliance

Develop and maintain

automation scripts

(Java, PowerShell, Python) to improve CIAM and PAM processes.

Ensure IAM solutions comply with

SOX, PCI, GDPR, and other regulatory frameworks .

Support audit, logging, and monitoring policies across CIAM and PAM platforms.

Participate in

change management, incident response, and 24 / 7 global support rotations .

Collaboration & Leadership

Partner with IAM architects, DevOps, and cloud teams to support

CI / CD pipelines

for IAM deployments.

Provide mentorship to junior engineers and act as a subject-matter expert for IAM initiatives.

Participate in Agile ceremonies, managing deliverables and aligning with IAM strategy and roadmap.

Qualifications & Skills

Experience :

6–8 years in IAM with expertise in both

CIAM

(Azure AD, Okta) and

PAM

(CyberArk Cloud PAM).

Authentication & Access :

Strong knowledge of MFA, SSO, RBAC, Conditional Access, OAuth, OpenID, SAML, and REST APIs.

Privileged Access :

Proven hands-on experience with CyberArk PAM for securing privileged accounts, secrets management, and certificate lifecycle management.

Scripting & Automation :

Strong coding skills in

Java, PowerShell, Python ; experience with

Ansible or Chef

for automation.

Cloud & Integrations :

Familiarity with cloud platforms (Azure, AWS, GCP) and SaaS integrations.

Security & Compliance :

Experience implementing audit, compliance, fraud prevention, and identity verification solutions.

Methodology :

Strong background in Agile and DevOps practices.