Define and lead the implementation of the organization’s security strategy, focusing on Cloud Security, Identity Access Management, and Cybersecurity.
Architect and oversee the deployment of IAM solutions across on-premise and cloud environments, ensuring they meet high security standards.
Lead complex security assessments, including threat modeling, red teaming, and cloud security reviews.
Collaborate with executive leadership to align security initiatives with the organization’s strategic goals.
Act as the technical lead for large-scale security projects, coordinating cross-functional teams.
Architect and implement solutions across workforce IAM, PAM, and customer IAM ecosystems.
Provide thought leadership in adopting passwordless authentication, passkeys, adaptive MFA, and AI-driven access orchestration strategies.
Engineer integrations with Agentic AI tools for intelligent decisioning, policy enforcement, and autonomous identity lifecycle operations.
Develop and implement automated provisioning/deprovisioning workflows.
Ensure integration of IAM with cloud platforms (Azure, AWS, GCP) and SaaS applications.
Mentor and develop senior security engineers, fostering a culture of continuous improvement and innovation.

Bachelor’s degree in Computer Science, Cybersecurity, or related discipline; Master’s degree is highly preferred.
Minimum of 10 years in security engineering, with significant expertise in Identity and Access Management (IAM).
Demonstrated success in leading large-scale IAM initiatives and formulating security strategies for complex organizations.
Design and hands-on engineering across IAM: Identity Providers (such as Microsoft Entra ID, Okta, Ping, ForgeRock), Identity Governance & Administration (SailPoint, Saviynt), Privileged Access Management (CyberArk, Delinea, HashiCorp Vault), and Customer IAM (Auth0, PingOne—preferred).
Deep understanding of federation protocols (SAML, OAuth2.0, OIDC), SCIM, and RESTful APIs.
Hands-on experience with Active Directory, LDAP, and cloud IAM solutions (Azure, AWS, GCP).
Solid foundation in Zero Trust architecture and contemporary security standards.
Proficient in scripting and automation using PowerShell, Python, Java, or RESTful APIs.
Recognized industry certifications such as CISSP, CCSP, AWS Certified Security – Specialty, or equivalent credentials.
Exceptional leadership and communication abilities, capable of influencing executive decision-makers and directing cross-functional teams.

Principal Security Engineer – IAM

Key skills