Kualitatem Inc. تعلن عن وظيفة أخصائي إدارة الهويات والصلاحيات في الرياض

Role: Identity and Entitlement Management Specialist (IAM / PAM)

Headcount: 2

Minimum Qualification: Bachelor’s degree

Minimum Experience: 6 years

Location: Ministry of Culture, Al-Diriyah, Riyadh

Role Summary

We are seeking an experienced Identity and Entitlement Management Specialist (IAM / PAM) to manage and govern identity lifecycle, access controls, authentication, identity governance, and privileged access across enterprise systems.

The role will focus on ensuring secure and compliant identity management, implementing least-privilege access, monitoring privileged activities, supporting access reviews, and coordinating with cybersecurity and business stakeholders.

Minimum Qualifications

• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field.
• Minimum 6 years of experience in IAM governance, engineering, or operations.
• Certification in IAM, PAM, CISSP, Microsoft Identity, or an equivalent certification is an advantage.

Key Requirements

• Strong experience with Identity Governance and Administration (IGA) and Privileged Access Management (PAM) platforms.
• Strong understanding of identity lifecycle management, access control models, and entitlement management.
• Experience integrating IAM solutions with enterprise applications, directories, HR systems, and other business systems.
• Practical experience with SSO, MFA, modern authentication, and Zero Trust principles.
• Experience implementing least privilege and segregation of duties.
• Understanding of security standards, regulatory requirements, and access governance practices.
• Strong stakeholder management, analytical, documentation, and reporting skills.

Key Responsibilities - Identity and Access Management

• Manage the complete identity lifecycle, including Joiner, Mover, and Leaver (JML) processes.
• Manage identity provisioning and deprovisioning across connected systems.
• Investigate provisioning failures, synchronization issues, and identity inconsistencies.
• Review and track access requests and ensure appropriate approvals are obtained.
• Manage authentication services, including SSO and MFA.
• Investigate abnormal login behavior, authentication failures, and suspicious access attempts.
• Monitor synchronization between HR systems, directories, identity sources, and connected applications.
• Support periodic access certification and entitlement review campaigns.
• Identify and remediate inactive, orphan, excessive, or inappropriate accounts and privileges.
• Monitor IAM-related security alerts and coordinate with cybersecurity teams on identity-related incidents.
• Prepare IAM reports covering access reviews, authentication activities, identity risks, and policy compliance.
• Track identity-related security findings and coordinate corrective actions through closure.
• Prepare periodic reports on identity governance, access reviews, and identity-related risk indicators.

Key Responsibilities - Privileged Access Management

• Govern privileged accounts and entitlements across systems, applications, databases, and infrastructure.
• Review privileged access requests and ensure appropriate approvals and business justifications are provided.
• Monitor privileged sessions and identify unauthorized or suspicious administrative activities.
• Investigate alerts related to abnormal privileged activity and policy violations.
• Implement and govern Just-in-Time (JIT) and on-demand privileged access.
• Ensure appropriate controls are applied to shared and generic privileged accounts.
• Review privileged session logs and recordings to support investigations and risk assessments.
• Identify and remediate unnecessary, inactive, or over-privileged accounts.
• Enforce least privilege and segregation of duties (SoD) principles.
• Coordinate periodic reviews of privileged accounts and entitlements with system and business owners.
• Ensure privileged access activities are properly monitored, controlled, and traceable.

Preferred Technical Exposure

• IAM / IGA platforms
• PAM platforms
• Microsoft Entra ID / Active Directory
• SSO and MFA solutions
• Identity provisioning and lifecycle management
• Access certification and entitlement management
• Privileged session management
• Just-in-Time access
• Role-Based Access Control (RBAC)
• Security monitoring and identity-related incident response

Core Competencies

• IAM & PAM Governance
• Identity Lifecycle Management
• Access Governance
• Privileged Access Management
• Authentication & Authorization
• Risk & Compliance
• Stakeholder Management
• Security Monitoring
• Reporting & Documentation
• Problem Solving