The IAM/PAM Design Expert is responsible for designing, architecting, and implementing enterprise‑grade Identity and Access Management (IAM) and Privileged Access Management (PAM) solutions. This role plays a critical part in safeguarding the organization’s most sensitive systems by ensuring secure identity lifecycle management, strong authentication mechanisms, and robust privileged access controls. The ideal candidate brings deep technical expertise with leading IAM/PAM platforms such as CyberArk and BeyondTrust, along with a strong understanding of modern authentication protocols and directory services.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Key Responsibilities
- Design, architect, and implement end‑to‑end IAM and PAM solutions across the enterprise.
- Develop, document, and enforce policies and procedures related to identity lifecycle management, access governance, access certification, and privileged session controls.
- Integrate IAM/PAM platforms with on‑premises, cloud, and hybrid applications—including infrastructure, enterprise systems, and SaaS platforms.
- Serve as the subject matter expert on IAM and PAM, advising technical teams and business stakeholders on best practices, security models, and compliance requirements.
- Conduct periodic reviews of user access rights and privileged accounts to ensure adherence to security policies and regulatory frameworks.
- Troubleshoot and resolve complex identity‑related issues, including authentication, authorization, and system integration challenges.
- Monitor industry trends, emerging threats, and new technologies within the IAM/PAM space to continuously strengthen security posture.
- Maintain documentation, architecture diagrams, and operational runbooks associated with IAM/PAM services.
Requirements
- Bachelor’s degree in Computer Science, Information Security, or a related technical discipline, or equivalent hands‑on experience.
- Minimum of 5 years of experience designing and implementing IAM and PAM solutions at enterprise scale.
- Hands‑on experience with CyberArk and/or BeyondTrust (mandatory).
- Strong understanding of authentication and authorization standards including SAML, OAuth, and OpenID Connect.
- Experience with directory services such as Active Directory, Azure AD, and LDAP.
- Relevant certifications such as CyberArk Certified Delivery Engineer (CDE) or BeyondTrust Certified Professional.
- Experience with scripting languages such as PowerShell or Python for automation and system integration.
- Knowledge of cloud identity solutions such as Azure AD, Okta, or other IAM cloud providers.
- Excellent problem‑solving abilities and strong communication skills, with the ability to articulate complex identity concepts to diverse stakeholders.
Workplace Type
On-site Working
Location
Riyadh, Saudi Arabia
