Provide Secured Remote Operational Support for IAM and Vulnerability Management

Provide secured remote operational support across identity and access management and vulnerability management. The role performs approved technical activities and tracking; access approvals, security policy, risk acceptance, and regulatory accountability.

Responsibilities

• Support user, privileged, and service-account administration through approved requests and access workflows.
• Assist with periodic access reviews, joiner/mover/leaver controls, and evidence preparation.
• Operate approved vulnerability scanning and reporting tools and validate findings with system owners.
• Maintain vulnerability, exception, and remediation trackers and coordinate technical follow-up.
• Support IAM, MFA, privileged-access, and directory-service incidents within authorized access boundaries.
• Provide metrics, evidence, and trend analysis for security reporting and governance reviews.
• Escalate overdue, critical, or policy-related matters to the onsite Security Engineer.
• Maintain operational procedures, access-control records, and vulnerability-management documentation.

Requirements

• Minimum 5 years of relevant IAM and/or vulnerability-management experience, with credible practical exposure to both domains.
• Experience with Microsoft identity services, SailPoint, CyberArk, or equivalent IAM/PAM platforms.
• Experience with enterprise vulnerability-scanning and remediation-tracking platforms.
• Microsoft Identity, SailPoint, CyberArk, CEH, OSCP, GPEN, or equivalent certification preferred.
• Strong understanding of privileged access, least privilege, remediation governance, and audit evidence.

Preferred Profile

• Previous experience supporting UAE government or regulated cybersecurity environments.
• Working knowledge of TDRA-hosted environments and related security-access processes.
• Experience operating through secured remote-access and privileged-session controls.

Expected Contribution

• Access and vulnerability activities are completed only through approved workflows.
• Critical findings and overdue actions are escalated with clear ownership.
• Evidence and trackers remain accurate, current, and audit-ready.