About the Job:
The Senior IAM Engineer is responsible for overseeing and controlling enterprise access to resources by effectively managing user and system identities, keys, rights, and restrictions. This role involves implementing and maintaining identity and access management (IAM) processes and tools across all critical applications, ensuring that access aligns with established security principles of confidentiality, integrity, and availability. The engineer plays a crucial role in safeguarding sensitive information and ensuring that only authorized users have access to essential resources, thereby enhancing the organization's overall security posture.
Responsibilities:
- Manage and optimize enterprise access to resources using technologies such as Active Directory, SAML, ADFS, FIM, Azure, Enterprise Authentication, Single Sign-On (SSO), and provisioning systems.
- Review and validate key lifecycle management workflows and ensure appropriate key assignment and usage.
- Oversee provisioning and de-provisioning of access to applications, infrastructure, and operating systems in line with established policies, standards, and procedures.
- Update and resolve access request tickets, ensuring timely responses that align with Service Level Agreements (SLAs).
- Demonstrate proficiency in processes related to new hire onboarding, employee offboarding, department transfers, access remediation, and privileged access management.
- Collaborate with cross-functional teams, vendors, and users to troubleshoot and resolve access issues efficiently.
- Assist in managing complex security access requests, including those for internal and external audits and disaster recovery testing.
- Enforce compliance with necessary controls and information security policies, procedures, and practices within departmental activities.
Qualifications:
- A tertiary-level qualification from an internationally recognized institution.
- Industry-recognized certifications in PKI, HSM, and Key Management solutions.
- 5 to 7 years of experience in user provisioning and de-provisioning.
- Strong interpersonal and organizational skills, with the ability to meet deadlines and provide superior customer service.
- Experience with IAM technologies such as Active Directory Federation Services (ADFS) and MS Identity Management (FIM/MIM).
- Strong knowledge of authentication protocols, including Kerberos, LDAP, RADIUS, SAML, and OAuth.
- Experienced in project implementation and Key Protection HSM (Hardware Security Module) design and administration.
- Proficient in Certificate and Encryption Management solutions (i.e., PKI, CA, Trusted Certificate Providers Management).
Technical Competencies:
- Extensive experience with IAM technologies.
- Knowledge of authentication protocols.
Behavioral Competencies:
- Adaptability
- Complex Reasoning
- Analytical Thinking
- Trust & Transparency
Location: Riyadh, Saudi Arabia
Work Conditions: On-site, Full-time
About the Company:
D360 Bank is a shariah-compliant digital bank that aims to provide the best financial experience in the Kingdom. The bank's vision is to reinvent finance through innovation and technology, making it convenient, accessible, and fair to all. The Technology team at D360 Bank is dedicated to leading advancements in applications and services while ensuring security and customer satisfaction.
