{ "count" : 199003, "data" : [ { "id" : "6a2c8bea74d8ee00a0974153", "title" : "Privileged Access Management(PAM) Engineer", "company" : "Müller`s Solutions", "industry" : "Information Technology and Services", "salary" : { "min" : 300000.0, "max" : 450000.0, "currency" : "AED", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior PAM Engineer in Dubai, UAE, adjusted for the cybersecurity industry and a mid-size company." }, "location" : "Dubai, Dubai, United Arab Emirates", "locations" : [ "Dubai, Dubai, United Arab Emirates" ], "certifications" : [ "Delinea Certified Administrator", "Delinea Secret Server Certification", "Delinea Privilege Manager Certification", "Microsoft Certified Certifications", "CISSP", "CISM", "Security+" ], "timestamp" : "2026-06-15T21:47:28.753", "fingerprint" : "e75fab2e9e267497e7a8aa743d0fdab80b210e23cb95f69921c8c03d654a547c", "source" : "workable", "language" : "en", "applyUrl" : "https://apply.workable.com/j/DE6F5FCDB3/apply", "externalId" : "DE6F5FCDB3", "industryFunction" : { }, "locationPoint" : "25.07725,55.30927", "structuredLocations" : [ { "city" : "Dubai", "state" : "Dubai", "country" : "United Arab Emirates", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "25.0742823,55.1885387" } ], "locationText" : "Dubai, Dubai, United Arab Emirates", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's Degree", "experienceMinYears" : 5, "experienceMaxYears" : 8, "experienceLevel" : "Senior", "technicalSkills" : "Delinea PAM, Secret Server, Privilege Manager, Remote Access Service, Password management, Active Directory, Entra ID, LDAP, MFA, SIEM, ITSM, APIs, Connectors", "professionalSkills" : [ "Privileged account governance", "Access controls", "Security incidents", "Risk mitigation", "Technical support", "Knowledge transfer", "Account onboarding", "PAM administration", "Platform performance" ], "hardSkillsList" : [ "PAM solutions", "Privileged access policies", "Access monitoring", "Log analysis", "Security standards", "Cybersecurity best practices", "Audit compliance", "Scripting" ], "hardSkills" : [ { "name" : "PAM solutions", "level" : "intermediate" }, { "name" : "Privileged access policies", "level" : "intermediate" }, { "name" : "Access monitoring", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Security standards", "level" : "intermediate" }, { "name" : "Cybersecurity best practices", "level" : "intermediate" }, { "name" : "Audit compliance", "level" : "intermediate" }, { "name" : "Scripting", "level" : "intermediate" } ], "majorSkills" : "Privileged Access Management, Delinea PAM, Cybersecurity", "majorSkillsList" : [ "Privileged Access Management", "Delinea PAM", "Cybersecurity" ], "coreResponsibilities" : "Design Delinea PAM solutions, Deploy Delinea PAM solutions, Maintain Delinea PAM solutions, Secure privileged accounts, Develop privileged access policies, Enforce privileged access policies, Monitor access activities, Analyze logs, Respond to security incidents, Collaborate IT, security, audit teams, Implement access controls, Implement access workflows, Perform audits privileged accounts, Identify risks, Mitigate risks, Provide technical support, Provide training, Provide documentation, Integrate Delinea PAM, Automate account onboarding, Configure APIs, Configure connectors, Support scripting, Conduct discovery accounts, Onboard privileged accounts, Migrate privileged accounts, Implement PAM controls, Support audit efforts, Support compliance efforts, Provide Level 2/3 support, Troubleshoot issues, Monitor platform performance, Participate on-call duties, Develop HLD documentation, Develop LLD documentation, Develop implementation guides, Develop SOPs, Conduct knowledge transfer sessions", "teamCollaboration" : "Infrastructure teams; Security teams; Application teams; Operations teams; IT teams; Audit teams", "domainKnowledge" : "Privileged Access Management; Cybersecurity best practices; Identity integrations; MFA; SIEM; ITSM", "domainList" : [ "privileged-access-management", "cybersecurity-best-practices", "identity-integrations", "mfa", "siem", "itsm" ], "domainSpecificKnowledge" : [ "Privileged Access Management", "Cybersecurity best practices", "Identity integrations", "MFA", "SIEM", "ITSM" ], "toolProficiency" : [ "Delinea Secret Server", "Delinea Privilege Manager", "Microsoft Active Directory", "Entra ID", "SIEM platforms", "ITSM platforms" ], "documentationSkills" : "HLD documentation; LLD documentation; Implementation guides; SOPs", "problemSolvingSkills" : "Troubleshoot issues", "specialRequirements" : "On-call duties", "qualificationsBasic" : "5-8 years IT/Cybersecurity experience, 3 years hands-on Delinea PAM, Implement PAM solutions enterprise, Experience Active Directory, MFA, Identity, Onboard privileged accounts Windows, Linux, databases, network devices, applications", "qualificationsPreferred" : "Delinea Certified Administrator, Delinea Secret Server Certification, Delinea Privilege Manager Certification, Microsoft Certified Certifications, CISSP, CISM, Security+", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Müller's Solutions is seeking a skilled Privileged Access Management (PAM) Engineer to design, implement, and manage PAM solutions, ensuring secure access to critical systems and compliance with policies. The ideal candidate has hands-on experience with Delinea products such as Secret Server, Privilege Manager (EPM), Remote Access Service (PRA), and capabilities in password management, session monitoring, and privileged account governance. They will collaborate with infrastructure, security, application, and operations teams to maintain PAM controls aligned with cybersecurity best practices. **Key Responsibilities:** * Design, deploy, and maintain Delinea PAM solutions to secure privileged accounts across the enterprise. * Develop and enforce privileged access policies ensuring compliance with security standards. * Monitor access activities, analyze logs, and respond to security incidents. * Collaborate with IT, security, and audit teams to implement access controls and workflows. * Perform regular audits of privileged accounts to identify and mitigate risks. * Provide technical support, training, and documentation for PAM tools and best practices. * Integrate Delinea PAM with Microsoft Active Directory, Entra ID, LDAP, MFA, SIEM, and ITSM platforms. * Automate account onboarding, configure APIs, connectors, and support scripting for PAM administration. * Conduct discovery, onboarding, and migration of privileged accounts from legacy systems. * Implement PAM controls aligned with cybersecurity frameworks; support audit and compliance efforts. * Provide Level 2/3 support, troubleshoot issues, monitor platform performance, and participate in on-call duties. * Develop HLD/LLD documentation, implementation guides, SOPs, and conduct knowledge transfer sessions. **Requirements** **Requirements:** * Mandatory * • Minimum 5-8 years of IT/Cybersecurity experience. * • Minimum 3 years hands-on experience with Delinea PAM solutions. * • Experience implementing PAM solutions in large enterprise environments. * • Experience with Active Directory, MFA, and Identity integrations. * • Experience onboarding privileged accounts across Windows, Linux, databases, network devices, and * applications. * Education * • Bachelor's Degree in Computer Science, Information Technology, Cyber Security, or related field. **Certifications (Preferred)** At least one of the following: • Delinea Certified Administrator (Preferred) • Delinea Secret Server Certification • Delinea Privilege Manager Certification • Microsoft Certified Certifications • CISSP (Preferred) • CISM (Preferred) • Security+ (Preferred) **Benefits** 1- Attractive Package. 2- Family Benefits. 3- Visa. 4-Air Tickets.", "summaryDescription" : "Privileged Access Management(PAM) Engineer at Müller`s Solutions. Skills: Privileged Access Management, Delinea PAM, Cybersecurity. Design Delinea PAM solutions. Deploy Delinea PAM solutions", "postedDate" : "2026-06-12T00:00:00.000", "createdAt" : "2026-06-14T19:15:30.212", "lastUpdated" : "2026-06-15T21:47:28.753", "ingestTimestamp" : "2026-06-14T19:15:30.212", "mongoId" : "6a2c8bea74d8ee00a0974153", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://apply.workable.com/j/DE6F5FCDB3", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "PAM solutions", "Privileged access policies", "Access monitoring", "Log analysis", "Security standards", "Cybersecurity best practices", "Audit compliance", "Scripting", "Privileged Access Management", "Delinea PAM", "Cybersecurity", "Privileged account governance", "Access controls", "Security incidents", "Risk mitigation", "Technical support", "Knowledge transfer", "Account onboarding", "PAM administration", "Platform performance", "Identity integrations", "MFA", "SIEM", "ITSM", "Delinea Certified Administrator", "Delinea Secret Server Certification", "Delinea Privilege Manager Certification", "Microsoft Certified Certifications", "CISSP", "CISM", "Security+", "Delinea Secret Server", "Delinea Privilege Manager", "Microsoft Active Directory", "Entra ID", "SIEM platforms", "ITSM platforms" ], "skillCount" : 37, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "mid", "dataQualityScore" : 1.0, "_score" : 2147.0017, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c5f4074d8ee00a08ea5bc", "title" : "Staff Security Engineer, Privileged Access (PAM)", "company" : "Nscale", "industry" : "AI infrastructure", "salary" : { "min" : 175000.0, "max" : 225000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "AMER", "locations" : [ "AMER" ], "timestamp" : "2026-06-14T23:57:18.877", "fingerprint" : "f5893c0f8994039b11ba2026e3b98c93d4db2ad3a08eecafeab89d42fc06b2b5", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/nscaleoperationsukltd/jobs/4860940101", "externalId" : "4860940101", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" }, { "country" : "Canada", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States; Canada", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Staff", "technicalSkills" : "Python, AWS, Terraform, Docker, Kubernetes, API integration", "professionalSkills" : [ "Access automation", "Access governance", "Least privilege", "Risk assessment", "System design" ], "hardSkillsList" : [ "Privileged access management", "Access control", "Identity management", "Automation", "API integration", "Scripting" ], "hardSkills" : [ { "name" : "Privileged access management", "level" : "intermediate" }, { "name" : "Access control", "level" : "intermediate" }, { "name" : "Identity management", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" }, { "name" : "API integration", "level" : "intermediate" }, { "name" : "Scripting", "level" : "intermediate" } ], "majorSkills" : "Privileged Access Management, Identity Security, Access Automation", "majorSkillsList" : [ "Privileged Access Management", "Identity Security", "Access Automation" ], "coreResponsibilities" : "Build privileged access workflows, Design access patterns, Define practical controls, Establish clean audit trails, Implement JIT access patterns, Create privileged access baseline, Drive entitlement cleanup, Reduce stale privilege, Design break-glass access standards, Test emergency access workflows, Validate break-glass readiness, Develop tiering model, Identify highest-risk privileges, Create remediation paths, Define telemetry requirements, Establish privileged access detections, Source-health requirements, Track metrics", "teamCollaboration" : "Identity control plane; Identity; Endpoint; Security Data; Network Security; Platform Engineering; IT; Service owners", "domainKnowledge" : "Privileged Access Management; Identity and Access Management; Cloud security; SaaS administration; Infrastructure security; Source control security; Data platform security; Endpoint security; Break-glass procedures; Tiering model; JIT access", "domainList" : [ "privileged-access-management", "identity-and-access-management", "cloud-security", "saas-administration", "infrastructure-security", "source-control-security", "data-platform-security", "endpoint-security", "break-glass-procedures", "tiering-model", "jit-access" ], "domainSpecificKnowledge" : [ "Privileged Access Management", "Identity and Access Management", "Cloud security", "SaaS administration", "Infrastructure security", "Source control security", "Data platform security", "Endpoint security", "Break-glass procedures", "Tiering model", "JIT access" ], "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Standing privilege reduction; JIT adoption; Stale admin cleanup; Break-glass test success; Approval SLA; Access review closure", "qualificationsBasic" : "7+ years identity security, 7+ years privileged access, 7+ years security engineering, 7+ years infrastructure security, Hands-on designing privileged access, Hands-on operating privileged access, Hands-on designing JIT access, Hands-on operating JIT access, Hands-on designing break-glass access, Hands-on operating break-glass access, Hands-on designing access request workflows, Hands-on operating access request workflows, Hands-on designing approval workflows, Hands-on operating approval workflows, Hands-on designing access review workflows, Hands-on operating access review workflows, Understanding authentication, Understanding authorization, Understanding RBAC, Understanding SSO, Understanding MFA, Understanding access governance, Understanding admin tiering, Understanding least privilege, Experience automating access workflows, Experience automating entitlement cleanup, Experience automating evidence collection, Experience automating revocation, Scripting skills, Workflow automation skills, API integration skills, Platform engineering skills, Ability translate access risk, Experience with service accounts, Experience with non-human identities, Experience with workload identities, Experience with API tokens, Experience with automation accounts, Experience with secrets governance, Experience securing production access, Experience securing source control administration, Experience securing data platforms, Experience securing cloud administration, Experience securing endpoint admin, Experience designing access evidence", "qualificationsPreferred" : "Experience with Kubernetes", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "About Nscale Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility. We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future. About the Role We’re hiring a Staff Security Engineer focused on Privileged Access and Access Automation to build Nscale’s privileged access operating model across enterprise systems, SaaS administration, infrastructure, production environments, source control, data platforms, and emergency access paths. This role sits inside the identity control plane and is intentionally execution-focused. You’ll work across Identity, Endpoint, Security Data, Network Security, Platform Engineering, IT, and service owners to turn privileged access into a practical engineering mechanism with request, approval, justification, time-bound elevation, session or event evidence, automated revocation, break-glass, and clean audit trails. This role is critical because standing privilege is one of the highest-risk patterns in a fast-growing infrastructure company. Your work will help make privileged access secure, fast, measurable, and recoverable so engineers can move quickly without relying on manual reviews, tribal knowledge, or permanent admin rights. What you'll be doing Privileged Access Workflows Build privileged access workflows across enterprise SaaS admin roles, production systems, cloud consoles, infrastructure management systems, source control, data platforms, endpoint admin, and emergency access paths Design access patterns that support request, approval, justification, time-bound elevation, and automated revocation Define practical controls that reduce reliance on permanent admin rights across high-risk environments Establish clean audit trails for privileged access activity across critical systems JIT Access and Governance Controls Implement JIT access patterns with approval, justification, expiry, revocation, and evidence collection Create a privileged access baseline that defines who can approve access, what justification is required, how long access lasts, what evidence is captured, and how revocation works Own exception governance for access paths that cannot yet meet the standard Drive entitlement cleanup and stale privilege reduction through automation Break-Glass and Tiering Model Design break-glass access standards, ownership models, monitoring, and recovery procedures Test emergency access workflows and validate break-glass readiness Develop a tiering model for privileged access covering Tier 0 and Tier 1 systems, admin paths, sensitive groups, service-owner roles, and high-risk workflows Identify the top 10 highest-risk standing privileges and create remediation paths Telemetry, Detection, and Measurement Define privileged access telemetry requirements for detection, investigations, audit, compliance, and executive reporting Partner with Security Data to establish privileged access detections and source-health requirements Track metrics including standing privilege reduction, JIT adoption, stale admin cleanup, break-glass test success, approval SLA, and access review closure Build an inventory of top admin paths, owners, approvers, access methods, logging, expiry, and current risk KPIs Standing privilege reduction JIT adoption Stale admin cleanup Break-glass test success About You 7+ years in identity security, privileged access, security engineering, infrastructure security, or related engineering roles Hands-on experience designing or operating privileged access, JIT, break-glass, access request, approval, or access review workflows Strong understanding of authentication, authorization, RBAC, SSO, MFA, access governance, admin tiering, and least privilege Experience automating access workflows, entitlement cleanup, evidence collection, or revocation processes Strong scripting, workflow automation, API integration, or platform engineering skills Ability to translate access risk into practical controls that engineering and operations teams will adopt Ability to work across enterprise systems, production environments, SaaS platforms, IT, infrastructure, and compliance stakeholders Experience with service accounts, non-human identities, workload identities, API tokens, automation accounts, or secrets governance Experience securing production access, source control administration, data platforms, cloud administration, or endpoint admin workflows Experience designing access evidence for audit, customer assurance, or incident response What we can offer you At Nscale, you'll find a collaborative, supportive, and innovative environment where your contributions spark real impact. We're building something extraordinary, and we want you at the core. Highly competitive US compensation package (base + bonus + equity), with performance reviews every 12 months. \uD83D\uDE80 Join one of the fastest-growing AI infrastructure companies — your chance to directly shape how global AI capacity is planned and deployed. ✨ Expect a dynamic progression plan tailored to your ambitions. Grow by leading critical cross-functional initiatives and shaping capital strategy — always with our full support. Human-First Flexibility: We treat you as humans first. \uD83E\uDEF6\uD83C\uDFFD Our flexible workplace trusts Nscalers to deliver, giving you the autonomy to shape your day around life's moments. Equal Opportunities Statement We strongly encourage applications from people of colour, the LGBTQ+ community, people with disabilities, neurodivergent people, parents, carers, and people from lower socio-economic backgrounds. If there’s anything we can do to accommodate your specific situation, please let us know. The responsibilities outlined in this job description are not exhaustive and are intended to provide a general overview of the position. The employee may be required to perform additional duties, tasks, and responsibilities as assigned by management, consistent with the skills and qualifications required for the role. For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here. Salary Range The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation. The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation. Salary Range $175,000—$225,000 USD For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.", "summaryDescription" : "Staff Security Engineer, Privileged Access (PAM) at Nscale. Skills: Privileged Access Management, Identity Security, Access Automation. Build privileged access workflows. Design access patterns", "postedDate" : "2026-06-12T22:22:23.596", "createdAt" : "2026-06-12T22:22:23.596", "lastUpdated" : "2026-06-14T23:57:18.877", "ingestTimestamp" : "2026-06-12T22:22:23.596", "mongoId" : "6a2c5f4074d8ee00a08ea5bc", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 175000, "salaryAnnualMax" : 225000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Privileged access management", "Access control", "Identity management", "Automation", "API integration", "Scripting", "Privileged Access Management", "Identity Security", "Access Automation", "Access automation", "Access governance", "Least privilege", "Risk assessment", "System design", "Identity and Access Management", "Cloud security", "SaaS administration", "Infrastructure security", "Source control security", "Data platform security", "Endpoint security", "Break-glass procedures", "Tiering model", "JIT access" ], "skillCount" : 24, "jobCategory" : "other", "jobSubcategory" : "security", "dataQualityScore" : 0.8888889, "_score" : 1956.6624, "daysOld" : 2, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "AI infrastructure" }, { "id" : "6a30554df292fd229cf1ed69", "title" : "Senior Professional System Platform Engineer (w/m/d) Privileged Access Management", "company" : "R+V Allgemeine Versicherung AG", "industry" : "Insurance", "salary" : { "min" : 85000.0, "max" : 115000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "The estimated salary is based on 2024-2025 market data for a Senior Professional System Platform Engineer in the Insurance industry in Wiesbaden, Germany, with adjustments for seniority and company size." }, "location" : "Wiesbaden, HE, Germany", "locations" : [ "Wiesbaden", "HE", "Germany" ], "certifications" : [ "Defender Level", "Sentry Level" ], "timestamp" : "2026-06-16T07:33:05.892", "fingerprint" : "95dd0642966645a26df391eae721b57e1f089d058c749598852d3bd3a511092d", "source" : "smartrecruiters", "language" : "de", "applyUrl" : "https://jobs.smartrecruiters.com/RVAllgemeineVersicherungenAG/744000132129294-senior-professional-system-platform-engineer-w-m-d-privileged-access-management", "externalId" : "744000132129294", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Wiesbaden", "state" : "Hesse", "country" : "Germany", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "50.0820384,8.2416556" } ], "locationText" : "Wiesbaden, Hesse, Germany", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "mid", "technicalSkills" : "MS Windows, Linux, Active Directory, GPOs, PKI, Zertifikaten, CyberArk, Selenium, AutoIT, PowerShell, HTML, Java-Script", "professionalSkills" : [ "System design", "Market observation" ], "hardSkillsList" : [ "Privileged Access Management", "CyberArk Vault", "CyberArk PSM", "CyberArk CPM", "Hardening mechanisms" ], "softSkillsList" : [ "Innovationsvermögen", "Konzeptionelle Stärke" ], "hardSkills" : [ { "name" : "Privileged Access Management", "level" : "intermediate" }, { "name" : "CyberArk Vault", "level" : "intermediate" }, { "name" : "CyberArk PSM", "level" : "intermediate" }, { "name" : "CyberArk CPM", "level" : "intermediate" }, { "name" : "Hardening mechanisms", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Innovationsvermögen" }, { "name" : "Konzeptionelle Stärke" } ], "majorSkills" : "Privileged Access Management, CyberArk, System platform engineering", "majorSkillsList" : [ "Privileged Access Management", "CyberArk", "System platform engineering" ], "coreResponsibilities" : "Develop solutions for IT infrastructure, Develop solutions for high-availability IT infrastructure, Develop strategic direction for Privileged Access Management, Develop CyberArk System, Integrate CyberArk components, Integrate critical applications, Advise internal customers, Clarify customer requirements, Manage external service providers, Expand CyberArk infrastructure, Operate CyberArk infrastructure", "teamCollaboration" : "Agile Release Train Plattform; Agile Release Train Infrastruktur", "projectManagementSkills" : [ "Agile" ], "domainKnowledge" : "Privileged Access Management; CyberArk architecture; On-prem environments", "domainList" : [ "privileged-access-management", "cyberark-architecture", "on-prem-environments" ], "domainSpecificKnowledge" : [ "Privileged Access Management", "CyberArk architecture", "On-prem environments" ], "toolProficiency" : [ "CyberArk" ], "communicationSkills" : "Customer consulting", "continuousLearning" : "External qualification measures", "innovationCreativity" : "Neuentwicklungen; Innovationen", "problemSolvingSkills" : "Abstraktionsvermögen", "qualificationsBasic" : "Studienabschluss in Informatik/Wirtschaftsinformatik, Vergleichbare Berufserfahrung, Berufserfahrung im Bereich Privileged Access Management, Kenntnisse in MS Windows, Kenntnisse in Linux", "qualificationsPreferred" : "Knowhow bzgl. Active Directory, Knowhow bzgl. GPOs, Knowhow bzgl. PKI, Knowhow bzgl. Zertifikaten, Zertifizierung auf Defender Level, Zertifizierung auf Sentry Level, Erfahrungen in der Entwicklung von CyberArk CPM Plugins, Erfahrungen in der Entwicklung von PSM Connection Components", "remoteFriendly" : false, "workSiteFlexibility" : "Flexible", "rawDescription" : "Lass uns gemeinsam neue Wege gehen! Denn genau das tun wir bei der R+V, einem der größten Versicherer Deutschlands. Willkommen im Ressort Operations und IT, in dem die R+V alle kundennahen Operations-Einheiten und die IT bündelt. Ziel ist es, Prozesse und technische Voraussetzungen so zu verbessern, dass die R+V Kundenanliegen schneller, effizienter und digitaler bearbeiten kann. Innovative Technologien und unsere vielfältige Systemlandschaft bieten Möglichkeiten für fachliche und persönliche Entwicklung. * Du bist Teil des Agile Release Trains „Plattform und Infrastruktur“, der die Konzeption, Umsetzung, Wartung und Optimierung unserer Basisinfrastruktur, Cloud Plattform und Middleware verantwortet. * Gekonnt erarbeitest Du Lösungen für eine komplexe und hochverfügbare IT-Infrastruktur. * Als verantwortlicher System Platform Engineer arbeitest Du an der strategischen Weiterentwicklung des Privileged Access Management System CyberArk. Der Schwerpunkt Deiner Tätigkeit sind dabei Aufbau, Pflege und Erweiterung von CPM- und PSM-Komponenten zur Integration von Umsystemen und kritisch-wichtigen Anwendungen. * Zu Deinen Aufgaben gehört zudem die Beratung und Klärung von Anforderungen interner Kunden sowie die Steuerung externer Dienstleister. * Ein weiterer wichtiger Baustein Deiner Tätigkeit ist der konzeptionelle Ausbau und der Betrieb der CyberArk Infrastruktur. * Deine Expertise in puncto Technik und Kooperation wendest Du versiert an und kannst idealerweise auf Erfahrung in technischen Veränderungsprozessen zurückgreifen und durch Marktbeobachtung entsprechende Ableitungen für Neuentwicklungen und Innovationen tätigen. ## Qualifications * Du verfügst über einen Studienabschluss in Informatik/Wirtschaftsinformatik oder einem ähnlichen Fachgebiet oder bringst vergleichbare Berufserfahrung mit. * Du kannst relevante Berufserfahrung im Bereich Privileged Access Management vorweisen. * Fundierte Kenntnisse in den Betriebssystemen MS Windows und Linux zeichnen Dich aus. Idealerweise bringst Du darüber hinaus Knowhow bzgl.Active Directory, GPOs, PKI und Zertifikaten mit. * Deine Kenntnisse und Betriebserfahrungen mit der Software CyberArk (Vault-, PSM- und CPM-Architektur, Hardening-Mechanismen, Plattformen) konntest du ggf. sogar auf „Defender“ oder „Sentry“ Level“ für on-prem Umgebungen zertifizieren. * Bestenfalls konntest du in der Vergangenheit bereits Erfahrungen in der Entwicklung von CyberArk CPM Plugins und PSM Connection Components und den dafür benötigten Technologien (Selenium, CyberArk Plugin Frameworks, AutoIT, PowerShell, Webbrowser-Technologien wie HTML und Java-Script) sammeln. * Eine eigenverantwortliche und strukturierte Arbeitsweise kombiniert mit Abstraktions- und Innovationsvermögen ist für Dich genauso selbstverständlich wie deine konzeptionelle Stärke. * Du verfügst über sehr gute Deutsch- und Englischkenntnisse in Wort und Schrift (mindestens B2). ## Additional Information Homeoffice: Flexible Arbeitszeiten im Homeoffice und Büro. Mehr Infos zu unserem hybriden Arbeiten findest Du [hier](https://www.ruv.de/karriere/blog/HomeOffice-bei-ruv). Arbeitszeiten: Standardmäßig 38h-Woche, Zeiterfassungssystem, Gleitzeit & Lebensarbeitszeitkonto. Urlaub: 30 Tage Urlaub & zusätzliche arbeitsfreie Tage (24.12. und 31.12.). Vergütung: 14 Monatsgehälter (inkl. Weihnachts- & Urlaubsgeld) oder Teilnahme am variablen Vergütungssystem, Sonderzahlungen, Mitarbeitertarife & Rabattaktionen. Gesundheit: Betriebliche Altersvorsorge & Gesundheitsmanagement mit vielfältigen Angeboten. Unser hauseigenes Fitnessstudio und ein breites Netzwerk von Sportangeboten (Wellpass) stehen Dir zudem online und bundesweit zur Verfügung. Mobilität: Jobticket, Jobrad/Fahrradleasing, verkehrsgünstige Lage mit überdachten Fahrradparkplätzen. Familie & Beruf: Eltern-Kind-Büros, Kindernotfallbetreuung, eigene Kindertagespflege „Raiffeisenzwerge“ sowie Pflegenetzwerk & Unterstützung durch die R+V-Sozialberatung. Kulinarik: Gesunde & ausgewogene Speisen in unserem Betriebsrestaurant. Weiterentwicklung: Förderung & Weiterentwicklung durch die R+V Akademie. Die Übernahme externer Qualifizierungsmaßnahmen komplettiert Deine persönliche sowie fachliche Entwicklung. Kultur: Wir leben Gemeinschaft. Unser Motto „Was einer nicht schafft, schaffen viele“ spiegelt sich auch in unseren Teams und dem täglichen Miteinander wider.", "summaryDescription" : "Senior Professional System Platform Engineer (w/m/d) Privileged Access Management at R+V Allgemeine Versicherung AG. Skills: Privileged Access Management, CyberArk, System platform engineering. Develop solutions for IT infrastructure. Develop solutions for high-availability IT infrastructure", "postedDate" : "2026-06-15T07:36:06.000", "createdAt" : "2026-06-15T23:41:59.223", "lastUpdated" : "2026-06-16T07:33:05.892", "ingestTimestamp" : "2026-06-15T23:41:59.223", "mongoId" : "6a30554df292fd229cf1ed69", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Privileged Access Management", "CyberArk Vault", "CyberArk PSM", "CyberArk CPM", "Hardening mechanisms", "Innovationsvermögen", "Konzeptionelle Stärke", "CyberArk", "System platform engineering", "System design", "Market observation", "Agile", "CyberArk architecture", "On-prem environments", "Defender Level", "Sentry Level" ], "skillCount" : 16, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1367.2808, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Insurance", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2aa22674d8ee00a06ac2cf", "title" : "Senior Engineer - Privileged Access Management", "company" : "AHEAD", "industry" : "MS Engineering Support Services", "salary" : { "min" : 150000.0, "max" : 170000.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "United States", "locations" : [ "United States" ], "certifications" : [ "PAM certifications", "BeyondTrust-specific certifications" ], "timestamp" : "2026-06-15T02:43:06.725", "fingerprint" : "ba4de78473e40b5120726dbfb4ce21d00c5eb5e00376e69aa0ba0bedc6315838", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/thinkahead/d03a5b7c-325c-4142-981a-4626e800df91/apply", "externalId" : "d03a5b7c-325c-4142-981a-4626e800df91", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Chicago", "state" : "Illinois", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "41.8755616,-87.6244212" }, { "city" : "Tel Aviv", "country" : "Israel", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "32.0852997,34.7818064" }, { "country" : "United States", "continent" : "na", "workMode" : "onsite" } ], "locationText" : "Chicago, Illinois, United States; Tel Aviv, Israel; United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "PowerShell, Python, REST APIs, Active Directory, Entra ID, LDAP, SAML, OIDC, OAuth2, Windows, Linux, Unix, Bash", "professionalSkills" : [ "Privileged access controls", "Risk assessment", "Customer onboarding", "Service offerings", "ITSM tools", "Compliance", "Audit support" ], "hardSkillsList" : [ "Privileged access workflows", "Password rotation policies", "Session brokering", "Just-in-time access", "Policy design", "Disaster recovery", "Automation tooling", "Lifecycle management", "Configuration standards", "Risk management", "Troubleshooting" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Privileged access workflows", "level" : "intermediate" }, { "name" : "Password rotation policies", "level" : "intermediate" }, { "name" : "Session brokering", "level" : "intermediate" }, { "name" : "Just-in-time access", "level" : "intermediate" }, { "name" : "Policy design", "level" : "intermediate" }, { "name" : "Disaster recovery", "level" : "intermediate" }, { "name" : "Automation tooling", "level" : "intermediate" }, { "name" : "Lifecycle management", "level" : "intermediate" }, { "name" : "Configuration standards", "level" : "intermediate" }, { "name" : "Risk management", "level" : "intermediate" }, { "name" : "Troubleshooting", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Privileged Access Management, BeyondTrust PAM, Cloud infrastructure, Automation", "majorSkillsList" : [ "Privileged Access Management", "BeyondTrust PAM", "Cloud infrastructure", "Automation" ], "coreResponsibilities" : "Lead architecture and design, Architect secure privileged access workflows, Implement and maintain BeyondTrust Password Safe, Implement and maintain BeyondTrust Privilege Management, Design and maintain BeyondTrust infrastructure, Integrate PAM with identity platforms, Develop and maintain automation and tooling, Accelerate onboarding and lifecycle management, Enforce configuration standards and policies, Generate reports and dashboards, Lead end-to-end customer onboarding, Define and maintain standardized PAM policies, Conduct security and risk assessments, Recommend remediation plans, Serve as subject matter expert, Troubleshoot BeyondTrust platform issues, Collaborate with security teams, Develop and maintain documentation, Provide mentoring and guidance, Communicate with customers and stakeholders, Complete training and certification", "teamCollaboration" : "Cross-functional projects; Internal and customer teams; Security, infrastructure, network teams; Application teams", "projectManagementSkills" : [ "Scrum/Agile environments", "Backlog grooming", "Sprint planning" ], "domainKnowledge" : "Privileged Access Management; Least privilege principles; Regulatory requirements; Cloud platforms; Network devices; Identity and access management; SOX; PCI DSS; HIPAA; ISO 27001", "domainList" : [ "privileged-access-management", "least-privilege-principles", "regulatory-requirements", "cloud-platforms", "network-devices", "identity-and-access-management", "sox", "pci-dss", "hipaa", "iso-27001" ], "domainSpecificKnowledge" : [ "Privileged Access Management", "Least privilege principles", "Regulatory requirements", "Cloud platforms", "Network devices", "Identity and access management", "SOX", "PCI DSS", "HIPAA", "ISO 27001" ], "toolProficiency" : [ "BeyondTrust PAM", "BeyondTrust Password Safe", "BeyondTrust Privilege Management", "ServiceNow", "Elastic", "LogicMonitor" ], "communicationSkills" : "Written communication; Verbal communication; Technical recommendations; Status updates", "documentationSkills" : "Platform architectures; Configuration standards; Customer-specific runbooks; Operational procedures; Onboarding playbooks; Migration playbooks; Knowledge base articles; FAQs", "continuousLearning" : "Cross department training; Sponsoring certifications; Credentials for continued learning", "problemSolvingSkills" : "Analytical skills; Problem-solving skills; Troubleshoot complex issues", "outcomesObjectives" : "Drive culture at AHEAD; Contribute to diversification and enrichment", "qualificationsBasic" : "7 years of related experience, 3+ years PAM solutions experience, Experience delivering managed services, Experience leading technical initiatives, Experience mentoring junior team members, Experience with regulated environments", "qualificationsPreferred" : "BeyondTrust experience strongly preferred, CyberArk or Delinea experience a plus", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Description AHEAD builds platforms for digital business. By weaving together advances in cloud infrastructure, automation and analytics, and software delivery, we help enterprises deliver on the promise of digital transformation. At AHEAD, we prioritize creating a culture of belonging, where all perspectives and voices are represented, valued, respected, and heard. We create spaces to empower everyone to speak up, make change, and drive the culture at AHEAD. We are an equal opportunity employer, and do not discriminate based on an individual's race, national origin, color, gender, gender identity, gender expression, sexual orientation, religion, age, disability, marital status, or any other protected characteristic under applicable law, whether actual or perceived. We embrace all candidates that will contribute to the diversification and enrichment of ideas and perspectives at AHEAD. ## Duties & Responsibilities Lead architecture and design of multi-tenant BeyondTrust PAM services for MSP customers, including onboarding of new tenants and standardization of service offerings. Architect secure privileged access workflows for infrastructure, applications, databases, cloud platforms, and network devices, aligned to least-privilege principles and regulatory requirements. Implement and maintain BeyondTrust Password Safe and related components, including: Discovery and onboarding of privileged accounts and systems Password rotation policies and check-in/check-out workflows Session brokering, recording, and real-time monitoring Approval workflows and just-in-time (JIT) access Implement and maintain BeyondTrust Privilege Management for endpoints and servers (Windows and Linux/Unix), including policy design, deployment, and tuning to minimize user/admin friction while enforcing least privilege. Design and maintain highly available and secure BeyondTrust infrastructure, including clustering, scaling, upgrades, patching, and disaster recovery strategies across customer environments. Integrate PAM with identity and security platforms, including: Active Directory / Entra ID / LDAP and other directories for authentication and group-based access MFA/SSO platforms using SAML/OIDC/OAuth2 SIEM and logging platforms for monitoring and alerting on privileged activity ServiceNow and other ITSM tools for request, approval, and ticket correlation workflows Develop and maintain automation and tooling (e.g., PowerShell, Python, REST APIs) to: Accelerate onboarding and lifecycle management of privileged accounts and systems Enforce configuration standards and policies at scale Generate reports and dashboards for compliance and operational KPIs Lead end-to-end customer onboarding to the PAM service, including: Requirements gathering, use case definition, and risk assessment Designing onboarding playbooks and standard reference architectures Coordinating with internal and customer teams to implement and validate PAM controls Define and maintain standardized PAM policies and baselines across customer environments, including credential management, access approval patterns, session monitoring, and privileged elevation rules. Conduct security and risk assessments of existing privileged access practices, recommend remediation plans, and track execution to closure. Serve as subject matter expert and escalation point for PAM-related incidents and service requests, including troubleshooting BeyondTrust platform issues and complex access problems. Collaborate with security, infrastructure, network, and application teams (internal and customer) to ensure PAM controls are aligned with broader security architecture and operational requirements. Develop and maintain comprehensive documentation, including: Platform architectures and configuration standards Customer-specific runbooks and operational procedures Onboarding and migration playbooks Knowledge base articles and FAQs for internal and customer use Provide mentoring and guidance to team members on PAM concepts, BeyondTrust best practices, and secure operations in a managed services context. Communicate with customers and internal stakeholders with transparency, providing regular status updates, risk/issue visibility, and technical recommendations. Complete training and certification as assigned to further skills and knowledge, including PAM and BeyondTrust-specific certifications where applicable. *Other job duties as assigned ## Education & Experience Minimum Required – A college degree or equivalent in Information Systems, Computer Science, Cybersecurity, or a related field. Unique education, specialized experience, skills, knowledge, training, or certification may be substituted for formal education. Minimum of 7 years of related experience in IT operations, infrastructure engineering, or cybersecurity, with significant hands-on responsibility for privileged access controls in enterprise environments. 3+ years of direct experience designing, implementing, and operating PAM solutions (BeyondTrust strongly preferred; experience with platforms such as CyberArk or Delinea is a plus). Experience delivering services in a managed services or consulting capacity, including direct customer engagement and multi-tenant or multi-customer environments. Demonstrated experience leading technical initiatives, driving cross-functional projects, and mentoring junior team members. Experience working with regulated or compliance-driven environments (e.g., SOX, PCI DSS, HIPAA, ISO 27001) and supporting audit and evidence collection for privileged access controls. ## Knowledge, Skills & Abilities Excellent written and verbal communication skills and ability to build and maintain collaborative, positive working relationships at all levels (technical and business stakeholders). Strong understanding of information security principles, including least privilege, separation of duties, identity and access management, and secure system design. Deep knowledge of PAM concepts and practices, including privileged account discovery, credential vaulting, session management, just-in-time access, and privileged elevation. Hands-on experience with BeyondTrust products in production environments, ideally including: BeyondTrust Password Safe (or BeyondInsight platform) BeyondTrust Privilege Management for Windows and Unix BeyondTrust Remote Support or similar tools Strong understanding of authentication and authorization protocols (e.g., Kerberos, NTLM, LDAP, RADIUS, SAML, OAuth2/OIDC, API key management) and their application in PAM architectures. Experience integrating PAM platforms with: Active Directory / Entra ID / LDAP and group-based access models MFA/SSO solutions SIEM and logging tools for monitoring privileged activity ServiceNow or similar ITSM systems for request and approval workflows Strong scripting and automation skills (e.g., PowerShell, Python, Bash) and experience using REST APIs to integrate and automate PAM workflows. Experience with Windows and Linux operating systems, including server and workstation platforms, and common administrative tools used by privileged users. Knowledge of enterprise IT systems including Active Directory, networking, firewalls, storage, compute, virtualization, and cloud services, and how privileged access is managed across these domains. Familiarity with monitoring and observability platforms (e.g., Elastic, LogicMonitor or similar) to track PAM infrastructure health and performance. Experience working in Scrum/Agile environments and contributing to structured delivery processes, including backlog grooming, sprint planning, and tracking work against clear acceptance criteria. Strong analytical and problem-solving skills, with the ability to troubleshoot complex issues across application, infrastructure, and security layers. Demonstrated ability to prioritize and manage multiple concurrent efforts in a fast-paced managed services environment. ## Additional Information The compensation range indicated in this posting reflects the On-Target Earnings (“OTE”) for this role, which includes a base salary and any applicable target bonus amount. This OTE range may vary based on the candidate’s relevant experience, qualifications, and geographic location. Why AHEAD: Through our daily work and internal groups like Moving Women AHEAD and RISE AHEAD, we value and benefit from diversity of people, ideas, experience, and everything in between. We fuel growth by stacking our office with top-notch technologies in a multi-million-dollar lab, by encouraging cross department training and development, sponsoring certifications and credentials for continued learning. USA Employment Benefits include: - Medical, Dental, and Vision Insurance - 401(k) - Paid company holidays - Paid time off - Paid parental and caregiver leave - Plus more! See benefits https://www.aheadbenefits.com/ for additional details. Use of AI: We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, assessing responses, or to capture recordings and create transcriptions or summaries during interviews. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please refer to the Candidate Privacy Notice or contact us at privacy@ahead.com. You may opt-out of the review or analysis of your application and resume by AI tools by using the General Application. Please include the role you wish to apply for in the Additional Information field. You may also choose to opt-out of recording and transcription at any time, including after joining an interview. Candidates will not be penalized for choosing to opt-out.", "summaryDescription" : "Senior Engineer - Privileged Access Management at AHEAD. Skills: Privileged Access Management, BeyondTrust PAM, Cloud infrastructure, Automation. Lead architecture and design. Architect secure privileged access workflows", "postedDate" : "2026-06-09T22:17:42.705", "createdAt" : "2026-06-09T22:17:42.705", "lastUpdated" : "2026-06-15T02:43:06.725", "ingestTimestamp" : "2026-06-12T07:44:31.530", "mongoId" : "6a2aa22674d8ee00a06ac2cf", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 150000, "salaryAnnualMax" : 170000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Privileged access workflows", "Password rotation policies", "Session brokering", "Just-in-time access", "Policy design", "Disaster recovery", "Automation tooling", "Lifecycle management", "Configuration standards", "Risk management", "Troubleshooting", "Leadership", "Mentoring", "Privileged Access Management", "BeyondTrust PAM", "Cloud infrastructure", "Automation", "Privileged access controls", "Risk assessment", "Customer onboarding", "Service offerings", "ITSM tools", "Compliance", "Audit support", "Scrum/Agile environments", "Backlog grooming", "Sprint planning", "Least privilege principles", "Regulatory requirements", "Cloud platforms", "Network devices", "Identity and access management", "SOX", "PCI DSS", "HIPAA", "ISO 27001", "PAM certifications", "BeyondTrust-specific certifications", "BeyondTrust Password Safe", "BeyondTrust Privilege Management", "ServiceNow", "Elastic", "LogicMonitor" ], "skillCount" : 43, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 1299.8406, "daysOld" : 5, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2c62f974d8ee00a08f7cf6", "title" : "Professional System Platform Engineer (w/m/d) Privileged Access Management", "company" : "R+V Allgemeine Versicherung AG", "industry" : "Insurance", "salary" : { "min" : 65000.0, "max" : 85000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level System Platform Engineer in the Insurance industry in Wiesbaden, Germany, adjusted for company size and specific role." }, "location" : "Wiesbaden, HE, Germany", "locations" : [ "Wiesbaden", "HE", "Germany" ], "timestamp" : "2026-06-15T06:35:05.182", "fingerprint" : "4eb5fecae8839bd6b6c8c125181efea7a52591fb9dcc8b25fad9641bcdfa53cb", "source" : "smartrecruiters", "language" : "de", "applyUrl" : "https://jobs.smartrecruiters.com/RVAllgemeineVersicherungenAG/744000131880988-professional-system-platform-engineer-w-m-d-privileged-access-management", "externalId" : "744000131880988", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Wiesbaden", "state" : "Hesse", "country" : "Germany", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "50.0820384,8.2416556" } ], "locationText" : "Wiesbaden, Hesse, Germany", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "mid", "technicalSkills" : "CyberArk", "professionalSkills" : [ "System design", "Konzeptionelle Stärke" ], "hardSkillsList" : [ "Privileged Access Management" ], "softSkillsList" : [ "Eigenverantwortliche Arbeitsweise", "Strukturierte Arbeitsweise", "Innovationsvermögen" ], "hardSkills" : [ { "name" : "Privileged Access Management", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Eigenverantwortliche Arbeitsweise" }, { "name" : "Strukturierte Arbeitsweise" }, { "name" : "Innovationsvermögen" } ], "majorSkills" : "Privileged Access Management, CyberArk", "majorSkillsList" : [ "Privileged Access Management", "CyberArk" ], "coreResponsibilities" : "Verantworten Basisinfrastruktur, Verantworten Cloud Plattform, Verantworten Middleware, Erarbeiten Lösungen IT-Infrastruktur, Arbeiten betriebliche Aufgaben, Aufbau CPM Komponenten, Pflege CPM Komponenten, Erweiterung CPM Komponenten, Aufbau PSM Komponenten, Pflege PSM Komponenten, Erweiterung PSM Komponenten, Integration Umsystemen, Integration kritisch-wichtigen Anwendungen, Beratung interne Kunden, Klärung Anforderungen interne Kunden, Zusammenarbeit externe Dienstleister, Mitarbeit konzeptionellen Ausbau CyberArk Infrastruktur", "teamCollaboration" : "Agile Release Train; Plattform und Infrastruktur", "projectManagementSkills" : [ "Agile" ], "domainKnowledge" : "Privileged Access Management; IT-Infrastruktur; CyberArk Infrastruktur", "domainList" : [ "privileged-access-management", "it-infrastruktur", "cyberark-infrastruktur" ], "domainSpecificKnowledge" : [ "Privileged Access Management", "IT-Infrastruktur", "CyberArk Infrastruktur" ], "toolProficiency" : [ "CyberArk" ], "continuousLearning" : "Weiterentwicklung; Externe Qualifizierungsmaßnahmen", "innovationCreativity" : "Innovationsvermögen", "problemSolvingSkills" : "Abstraktionsvermögen", "qualificationsBasic" : "Studienabschluss in Informatik, Vergleichbare Berufserfahrung, Erste Berufserfahrung Privileged Access Management, Kenntnisse MS Windows, Kenntnisse Linux, Sehr gute Deutschkenntnisse, Sehr gute Englischkenntnisse", "qualificationsPreferred" : "Knowhow Active Directory, Knowhow GPOs, Knowhow PKI, Knowhow Zertifikaten", "remoteFriendly" : false, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Lass uns gemeinsam neue Wege gehen! Denn genau das tun wir bei der R+V, einem der größten Versicherer Deutschlands. Willkommen im Ressort Operations und IT, in dem die R+V alle kundennahen Operations-Einheiten und die IT bündelt. Ziel ist es, Prozesse und technische Voraussetzungen so zu verbessern, dass die R+V Kundenanliegen schneller, effizienter und digitaler bearbeiten kann. Innovative Technologien und unsere vielfältige Systemlandschaft bieten Möglichkeiten für fachliche und persönliche Entwicklung. * Du bist Teil des Agile Release Trains „Plattform und Infrastruktur“, der die Konzeption, Umsetzung, Wartung und Optimierung unserer Basisinfrastruktur, Cloud Plattform und Middleware verantwortet. * Gekonnt erarbeitest Du Lösungen für eine komplexe und hochverfügbare IT-Infrastruktur. * Als verantwortlicher System Platform Engineer arbeitest Du an betrieblichen Aufgaben rund um das Privileged Access Management System CyberArk. Der Schwerpunkt Deiner Tätigkeit sind dabei Aufbau, Pflege und Erweiterung von CPM- und PSM-Komponenten zur Integration von Umsystemen und kritisch-wichtigen Anwendungen. * Zu Deinen Aufgaben gehört zudem die Beratung und Klärung von Anforderungen interner Kunden sowie die Zusammenarbeit mit externen Dienstleistern. * Ein weiterer wichtiger Baustein Deiner Tätigkeit ist die Mitarbeit bei dem konzeptionellen Ausbau der CyberArk Infrastruktur. ## Qualifications * Du verfügst über einen Studienabschluss in Informatik/Wirtschaftsinformatik oder einem ähnlichen Fachgebiet oder bringst vergleichbare Berufserfahrung mit. * Du kannst erste Berufserfahrung im Bereich Privileged Access Management vorweisen. * Kenntnisse in den Betriebssystemen MS Windows und Linux zeichnen Dich aus. Idealerweise bringst Du darüber hinaus Knowhow bzgl.Active Directory, GPOs, PKI und Zertifikaten mit. * Eine eigenverantwortliche und strukturierte Arbeitsweise kombiniert mit Abstraktions- und Innovationsvermögen ist für Dich genauso selbstverständlich wie deine konzeptionelle Stärke. * Du verfügst über sehr gute Deutsch- und Englischkenntnisse in Wort und Schrift (mindestens B2). ## Additional Information Homeoffice: Flexible Arbeitszeiten im Homeoffice und Büro. Mehr Infos zu unserem hybriden Arbeiten findest Du [hier](https://www.ruv.de/karriere/blog/HomeOffice-bei-ruv). Arbeitszeiten: Standardmäßig 38h-Woche, Zeiterfassungssystem, Gleitzeit & Lebensarbeitszeitkonto. Urlaub: 30 Tage Urlaub & zusätzliche arbeitsfreie Tage (24.12. und 31.12.). Vergütung: 14 Monatsgehälter (inkl. Weihnachts- & Urlaubsgeld) oder Teilnahme am variablen Vergütungssystem, Sonderzahlungen, Mitarbeitertarife & Rabattaktionen. Gesundheit: Betriebliche Altersvorsorge & Gesundheitsmanagement mit vielfältigen Angeboten. Unser hauseigenes Fitnessstudio und ein breites Netzwerk von Sportangeboten (Wellpass) stehen Dir zudem online und bundesweit zur Verfügung. Mobilität: Jobticket, Jobrad/Fahrradleasing, verkehrsgünstige Lage mit überdachten Fahrradparkplätzen. Familie & Beruf: Eltern-Kind-Büros, Kindernotfallbetreuung, eigene Kindertagespflege „Raiffeisenzwerge“ sowie Pflegenetzwerk & Unterstützung durch die R+V-Sozialberatung. Kulinarik: Gesunde & ausgewogene Speisen in unserem Betriebsrestaurant. Weiterentwicklung: Förderung & Weiterentwicklung durch die R+V Akademie. Die Übernahme externer Qualifizierungsmaßnahmen komplettiert Deine persönliche sowie fachliche Entwicklung. Kultur: Wir leben Gemeinschaft. Unser Motto „Was einer nicht schafft, schaffen viele“ spiegelt sich auch in unseren Teams und dem täglichen Miteinander wider.", "summaryDescription" : "Professional System Platform Engineer (w/m/d) Privileged Access Management at R+V Allgemeine Versicherung AG. Skills: Privileged Access Management, CyberArk. Verantworten Basisinfrastruktur. Verantworten Cloud Plattform", "postedDate" : "2026-06-12T11:44:24.000", "createdAt" : "2026-06-13T21:12:39.719", "lastUpdated" : "2026-06-15T06:35:05.182", "ingestTimestamp" : "2026-06-13T21:12:39.719", "mongoId" : "6a2c62f974d8ee00a08f7cf6", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Privileged Access Management", "Eigenverantwortliche Arbeitsweise", "Strukturierte Arbeitsweise", "Innovationsvermögen", "CyberArk", "System design", "Konzeptionelle Stärke", "Agile", "IT-Infrastruktur", "CyberArk Infrastruktur" ], "skillCount" : 10, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 1268.5356, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Insurance", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cb20c74d8ee00a09df4fc", "title" : "Identity & PAM Security Engineer", "industry" : "IT", "salary" : { "min" : 55000.0, "max" : 75000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Identity & PAM Security Engineer in France, adjusted for the technology industry and full-time onsite role." }, "location" : "France", "locations" : [ "France" ], "certifications" : [ "SC-300", "AZ-500", "CISSP", "CCSP" ], "timestamp" : "2026-06-16T05:40:41.003", "fingerprint" : "5e99a9cae2559cdaac9e3552183ba9ab9a07bdc875cd13fe1e3e5e369e32e950", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/jobgether/2980a36c-496a-4ff9-9cc0-01399436385a/apply", "externalId" : "2980a36c-496a-4ff9-9cc0-01399436385a", "industryFunction" : { }, "structuredLocations" : [ { "country" : "France", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "France", "employmentType" : "FULL_TIME", "experienceMinYears" : 4, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Microsoft Entra ID, Google Cloud IAM, PowerShell, Python, APIs, HashiCorp Vault, Azure Key Vault, Google Secret Manager, SIEM tools, Log analysis", "professionalSkills" : [ "Access controls", "Access processes", "Access review", "Access certification", "Service accounts", "Machine identities", "Secrets management", "Credential rotation", "Conditional access", "MFA enforcement", "Risk-based security", "Identity workflows", "Access provisioning", "Identity security", "PAM strategies", "Security operations", "Identity governance" ], "hardSkillsList" : [ "Privileged Identity Management", "Just-in-time access", "Approval workflows", "Role assignments", "Least-privilege principles", "Service account lifecycle", "Machine identity lifecycle", "Secrets lifecycle", "API key lifecycle", "Credential lifecycle", "Identity security controls", "Automation design", "Automation implementation", "Cloud environments", "Enterprise environments", "Security audits", "Compliance requirements", "Incident response", "Identity investigations", "Tool improvement", "Operational processes" ], "hardSkills" : [ { "name" : "Privileged Identity Management", "level" : "intermediate" }, { "name" : "Just-in-time access", "level" : "intermediate" }, { "name" : "Approval workflows", "level" : "intermediate" }, { "name" : "Role assignments", "level" : "intermediate" }, { "name" : "Least-privilege principles", "level" : "intermediate" }, { "name" : "Service account lifecycle", "level" : "intermediate" }, { "name" : "Machine identity lifecycle", "level" : "intermediate" }, { "name" : "Secrets lifecycle", "level" : "intermediate" }, { "name" : "API key lifecycle", "level" : "intermediate" }, { "name" : "Credential lifecycle", "level" : "intermediate" }, { "name" : "Identity security controls", "level" : "intermediate" }, { "name" : "Automation design", "level" : "intermediate" }, { "name" : "Automation implementation", "level" : "intermediate" }, { "name" : "Cloud environments", "level" : "intermediate" }, { "name" : "Enterprise environments", "level" : "intermediate" }, { "name" : "Security audits", "level" : "intermediate" }, { "name" : "Compliance requirements", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Identity investigations", "level" : "intermediate" }, { "name" : "Tool improvement", "level" : "intermediate" }, { "name" : "Operational processes", "level" : "intermediate" } ], "majorSkills" : "Privileged Access Management, Cloud Security, Security Engineering", "majorSkillsList" : [ "Privileged Access Management", "Cloud Security", "Security Engineering" ], "coreResponsibilities" : "Design privileged access controls, Implement privileged access controls, Manage privileged access controls, Define secure administrative access processes, Maintain secure administrative access processes, Lead access review processes, Lead access certification processes, Ensure remediation actions completed, Manage service account lifecycle, Manage machine identity lifecycle, Manage secrets lifecycle, Manage API key lifecycle, Manage credential lifecycle, Configure conditional access policies, Configure MFA enforcement, Configure identity risk-based security controls, Design automation for identity workflows, Implement automation for identity workflows, Collaborate with Security teams, Collaborate with Infrastructure teams, Collaborate with Engineering teams, Support security audits, Support compliance requirements, Support incident response, Support identity-related investigations, Contribute to identity governance evolution, Contribute to PAM strategies evolution, Contribute to security operations best practices, Improve identity security tooling, Improve identity security documentation, Improve operational processes", "teamCollaboration" : "Security teams; Infrastructure teams; Engineering teams; Globally distributed team", "domainKnowledge" : "Identity security principles; Least privilege; RBAC; MFA; Conditional access; Privileged access management; Service accounts; Machine identities; Secrets management; Credential rotation; Identity governance; PAM strategies; Security operations; Cloud identity; Enterprise security architectures", "domainList" : [ "identity-security-principles", "least-privilege", "rbac", "mfa", "conditional-access", "privileged-access-management", "service-accounts", "machine-identities", "secrets-management", "credential-rotation", "identity-governance", "pam-strategies", "security-operations", "cloud-identity", "enterprise-security-architectures" ], "domainSpecificKnowledge" : [ "Identity security principles", "Least privilege", "RBAC", "MFA", "Conditional access", "Privileged access management", "Service accounts", "Machine identities", "Secrets management", "Credential rotation", "Identity governance", "PAM strategies", "Security operations", "Cloud identity", "Enterprise security architectures" ], "toolProficiency" : [ "Microsoft Entra ID", "Google Cloud IAM", "HashiCorp Vault", "Azure Key Vault", "Google Secret Manager", "SIEM tools" ], "communicationSkills" : "Documentation; Stakeholder management", "documentationSkills" : "Documentation", "continuousLearning" : "Continuous improvement", "problemSolvingSkills" : "Analytical skills; Problem-solving skills", "outcomesObjectives" : "Increase scalability; Increase resilience", "qualificationsBasic" : "4+ years IAM experience, 4+ years Cloud Security experience, 4+ years Infrastructure Security experience, 4+ years Security Engineering experience, Hands-on Microsoft Entra ID experience, Hands-on Google Cloud IAM experience, Understand least privilege, Understand RBAC, Understand MFA, Understand conditional access, Understand privileged access management, Manage service accounts, Manage machine identities, Manage secrets management, Manage credential rotation at scale, Design PAM processes, Operate PAM processes, Design identity governance processes, Operate identity governance processes, Build automation using PowerShell, Build automation using Python, Build automation using APIs, Build automation using workflow platforms, Analytical skills, Problem-solving skills, Security-first mindset", "qualificationsPreferred" : "Experience with SIEM tools, Experience with log analysis platforms, Experience with security monitoring systems, Familiarity with HashiCorp Vault, Familiarity with Azure Key Vault, Familiarity with Google Secret Manager, SC-300 certification, AZ-500 certification, CISSP certification, CCSP certification", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Accountabilities Design, implement, and manage privileged access controls including Privileged Identity Management (PIM), just-in-time (JIT) access, approval workflows, and role assignments. Define and maintain secure administrative access processes for high-risk roles, privileged sessions, and emergency break-glass accounts. Lead access review and certification processes, ensuring remediation actions are completed and access remains aligned with least-privilege principles. Manage the lifecycle of service accounts, machine identities, secrets, API keys, and credentials, including rotation, monitoring, and decommissioning. Configure and maintain conditional access policies, MFA enforcement, and identity risk-based security controls. Design and implement automation for identity workflows, including approvals, access provisioning, reporting, and remediation processes. Collaborate with Security, Infrastructure, and Engineering teams to enhance identity security across cloud and enterprise environments. Support security audits, compliance requirements, incident response, and identity-related investigations. Contribute to the evolution of identity governance, PAM strategies, and security operations best practices. Improve identity security tooling, documentation, and operational processes to increase scalability and resilience. Requirements 4+ years of experience in Identity & Access Management (IAM), Cloud Security, Infrastructure Security, or Security Engineering roles. Hands-on experience with identity platforms such as Microsoft Entra ID and Google Cloud IAM. Strong understanding of identity security principles including least privilege, RBAC, MFA, conditional access, and privileged access management. Experience managing service accounts, machine identities, secrets management, and credential rotation at scale. Proven ability to design or operate PAM or identity governance processes in complex environments. Experience building automation using tools such as PowerShell, Python, APIs, or workflow orchestration platforms. Strong analytical and problem-solving skills with a security-first mindset. Experience working with SIEM tools, log analysis platforms, or security monitoring systems is a plus. Familiarity with tools such as HashiCorp Vault, Azure Key Vault, or Google Secret Manager is advantageous. Relevant certifications such as SC-300, AZ-500, CISSP, or CCSP are considered a strong plus. Excellent communication, documentation, and stakeholder management skills. Ability to work effectively in distributed, fast-paced, and collaborative engineering environments. Benefits Competitive salary with performance-based quarterly bonuses. Remote-first working model with flexibility across working hours. 28 days of paid annual leave. Core working hours with flexibility outside of defined collaboration windows. Top-tier equipment provided to support your work. Referral bonuses and performance-based flash bonuses. Annual company retreats with international team collaboration opportunities. Opportunity to work in a highly technical, security-focused environment. Exposure to modern cloud identity, PAM, and enterprise security architectures. Strong emphasis on autonomy, ownership, and continuous improvement. Collaborative and globally distributed team culture. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Identity & PAM Security Engineer. Skills: Privileged Access Management, Cloud Security, Security Engineering. Design privileged access controls. Implement privileged access controls", "postedDate" : "2026-06-11T04:41:47.834", "createdAt" : "2026-06-11T04:41:47.834", "lastUpdated" : "2026-06-16T05:40:41.003", "ingestTimestamp" : "2026-06-14T21:30:39.425", "mongoId" : "6a2cb20c74d8ee00a09df4fc", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Privileged Identity Management", "Just-in-time access", "Approval workflows", "Role assignments", "Least-privilege principles", "Service account lifecycle", "Machine identity lifecycle", "Secrets lifecycle", "API key lifecycle", "Credential lifecycle", "Identity security controls", "Automation design", "Automation implementation", "Cloud environments", "Enterprise environments", "Security audits", "Compliance requirements", "Incident response", "Identity investigations", "Tool improvement", "Operational processes", "Privileged Access Management", "Cloud Security", "Security Engineering", "Access controls", "Access processes", "Access review", "Access certification", "Service accounts", "Machine identities", "Secrets management", "Credential rotation", "Conditional access", "MFA enforcement", "Risk-based security", "Identity workflows", "Access provisioning", "Identity security", "PAM strategies", "Security operations", "Identity governance", "Identity security principles", "Least privilege", "RBAC", "MFA", "Privileged access management", "Cloud identity", "Enterprise security architectures", "SC-300", "AZ-500", "CISSP", "CCSP", "Microsoft Entra ID", "Google Cloud IAM", "HashiCorp Vault", "Azure Key Vault", "Google Secret Manager", "SIEM tools" ], "skillCount" : 58, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 1233.4302, "daysOld" : 5, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cb20c74d8ee00a09df4fe", "title" : "Identity & PAM Security Engineer", "industry" : "IT", "salary" : { "min" : 45000.0, "max" : 65000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level Identity & PAM Security Engineer in Spain, adjusted for seniority and industry." }, "location" : "Spain", "locations" : [ "Spain" ], "certifications" : [ "SC-300", "AZ-500", "CISSP", "CCSP" ], "timestamp" : "2026-06-16T02:46:34.381", "fingerprint" : "b3bc2c83f46f8027cb73381a84231f966428c291f718249b37397cd2a32bf363", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/jobgether/4cf3044d-09c1-4eec-98ff-166f30dccfab/apply", "externalId" : "4cf3044d-09c1-4eec-98ff-166f30dccfab", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Spain", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "Spain", "employmentType" : "FULL_TIME", "experienceMinYears" : 4, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Microsoft Entra ID, Google Cloud IAM, PowerShell, Python, APIs", "professionalSkills" : [ "Analytical skills", "Problem-solving skills", "Stakeholder management" ], "hardSkillsList" : [ "Privileged access controls", "Privileged Identity Management", "Just-in-time access", "Approval workflows", "Role assignments", "Administrative access processes", "Access review processes", "Certification processes", "Service accounts management", "Machine identities management", "Secrets management", "API keys management", "Credentials management", "Conditional access policies", "MFA enforcement", "Identity risk-based controls", "Identity workflows automation", "Access provisioning automation", "Reporting automation", "Remediation processes automation", "Least privilege principles", "Identity governance", "PAM strategies", "Security operations", "Identity security tooling", "Operational processes" ], "hardSkills" : [ { "name" : "Privileged access controls", "level" : "intermediate" }, { "name" : "Privileged Identity Management", "level" : "intermediate" }, { "name" : "Just-in-time access", "level" : "intermediate" }, { "name" : "Approval workflows", "level" : "intermediate" }, { "name" : "Role assignments", "level" : "intermediate" }, { "name" : "Administrative access processes", "level" : "intermediate" }, { "name" : "Access review processes", "level" : "intermediate" }, { "name" : "Certification processes", "level" : "intermediate" }, { "name" : "Service accounts management", "level" : "intermediate" }, { "name" : "Machine identities management", "level" : "intermediate" }, { "name" : "Secrets management", "level" : "intermediate" }, { "name" : "API keys management", "level" : "intermediate" }, { "name" : "Credentials management", "level" : "intermediate" }, { "name" : "Conditional access policies", "level" : "intermediate" }, { "name" : "MFA enforcement", "level" : "intermediate" }, { "name" : "Identity risk-based controls", "level" : "intermediate" }, { "name" : "Identity workflows automation", "level" : "intermediate" }, { "name" : "Access provisioning automation", "level" : "intermediate" }, { "name" : "Reporting automation", "level" : "intermediate" }, { "name" : "Remediation processes automation", "level" : "intermediate" }, { "name" : "Least privilege principles", "level" : "intermediate" }, { "name" : "Identity governance", "level" : "intermediate" }, { "name" : "PAM strategies", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Identity security tooling", "level" : "intermediate" }, { "name" : "Operational processes", "level" : "intermediate" } ], "majorSkills" : "Cloud Security, Privileged Access Management, Identity Governance", "majorSkillsList" : [ "Cloud Security", "Privileged Access Management", "Identity Governance" ], "coreResponsibilities" : "Design privileged access controls, Implement privileged access controls, Manage privileged access controls, Define secure administrative access processes, Maintain secure administrative access processes, Lead access review processes, Lead certification processes, Ensure remediation actions completed, Manage service accounts lifecycle, Manage machine identities lifecycle, Manage secrets lifecycle, Manage API keys lifecycle, Manage credentials lifecycle, Configure conditional access policies, Configure MFA enforcement, Configure identity risk-based security controls, Design automation for identity workflows, Implement automation for identity workflows, Collaborate with Security teams, Collaborate with Infrastructure teams, Collaborate with Engineering teams, Support security audits, Support compliance requirements, Support incident response, Support identity-related investigations, Contribute to identity governance evolution, Contribute to PAM strategies evolution, Contribute to security operations best practices evolution, Improve identity security tooling, Improve documentation, Improve operational processes", "teamCollaboration" : "Security teams; Infrastructure teams; Engineering teams; Globally distributed team", "domainKnowledge" : "Identity security principles; Least privilege; RBAC; MFA; Conditional access; Privileged access management; Service accounts; Machine identities; Secrets management; Credential rotation; PAM; Identity governance; Cloud identity; Enterprise security architectures", "domainList" : [ "identity-security-principles", "least-privilege", "rbac", "mfa", "conditional-access", "privileged-access-management", "service-accounts", "machine-identities", "secrets-management", "credential-rotation", "pam", "identity-governance", "cloud-identity", "enterprise-security-architectures" ], "domainSpecificKnowledge" : [ "Identity security principles", "Least privilege", "RBAC", "MFA", "Conditional access", "Privileged access management", "Service accounts", "Machine identities", "Secrets management", "Credential rotation", "PAM", "Identity governance", "Cloud identity", "Enterprise security architectures" ], "toolProficiency" : [ "Microsoft Entra ID", "Google Cloud IAM", "HashiCorp Vault", "Azure Key Vault", "Google Secret Manager", "SIEM tools", "Log analysis platforms", "Security monitoring systems" ], "communicationSkills" : "Documentation; Stakeholder management", "documentationSkills" : "Documentation", "continuousLearning" : "Continuous improvement", "problemSolvingSkills" : "Analytical; Problem-solving; Security-first mindset", "qualificationsBasic" : "4+ years IAM experience, 4+ years Cloud Security experience, 4+ years Infrastructure Security experience, 4+ years Security Engineering experience, Hands-on identity platforms experience, Understand identity security principles, Manage service accounts experience, Manage machine identities experience, Manage secrets management experience, Manage credential rotation experience, Design PAM processes experience, Operate PAM processes experience, Design identity governance processes experience, Operate identity governance processes experience, Build automation experience", "qualificationsPreferred" : "Experience with SIEM tools a plus, Experience with log analysis platforms a plus, Experience with security monitoring systems a plus, Familiarity with HashiCorp Vault advantageous, Familiarity with Azure Key Vault advantageous, Familiarity with Google Secret Manager advantageous, SC-300 certification a plus, AZ-500 certification a plus, CISSP certification a plus, CCSP certification a plus", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Accountabilities Design, implement, and manage privileged access controls including Privileged Identity Management (PIM), just-in-time (JIT) access, approval workflows, and role assignments. Define and maintain secure administrative access processes for high-risk roles, privileged sessions, and emergency break-glass accounts. Lead access review and certification processes, ensuring remediation actions are completed and access remains aligned with least-privilege principles. Manage the lifecycle of service accounts, machine identities, secrets, API keys, and credentials, including rotation, monitoring, and decommissioning. Configure and maintain conditional access policies, MFA enforcement, and identity risk-based security controls. Design and implement automation for identity workflows, including approvals, access provisioning, reporting, and remediation processes. Collaborate with Security, Infrastructure, and Engineering teams to enhance identity security across cloud and enterprise environments. Support security audits, compliance requirements, incident response, and identity-related investigations. Contribute to the evolution of identity governance, PAM strategies, and security operations best practices. Improve identity security tooling, documentation, and operational processes to increase scalability and resilience. Requirements 4+ years of experience in Identity & Access Management (IAM), Cloud Security, Infrastructure Security, or Security Engineering roles. Hands-on experience with identity platforms such as Microsoft Entra ID and Google Cloud IAM. Strong understanding of identity security principles including least privilege, RBAC, MFA, conditional access, and privileged access management. Experience managing service accounts, machine identities, secrets management, and credential rotation at scale. Proven ability to design or operate PAM or identity governance processes in complex environments. Experience building automation using tools such as PowerShell, Python, APIs, or workflow orchestration platforms. Strong analytical and problem-solving skills with a security-first mindset. Experience working with SIEM tools, log analysis platforms, or security monitoring systems is a plus. Familiarity with tools such as HashiCorp Vault, Azure Key Vault, or Google Secret Manager is advantageous. Relevant certifications such as SC-300, AZ-500, CISSP, or CCSP are considered a strong plus. Excellent communication, documentation, and stakeholder management skills. Ability to work effectively in distributed, fast-paced, and collaborative engineering environments. Benefits Competitive salary with performance-based quarterly bonuses. Remote-first working model with flexibility across working hours. 28 days of paid annual leave. Core working hours with flexibility outside of defined collaboration windows. Top-tier equipment provided to support your work. Referral bonuses and performance-based flash bonuses. Annual company retreats with international team collaboration opportunities. Opportunity to work in a highly technical, security-focused environment. Exposure to modern cloud identity, PAM, and enterprise security architectures. Strong emphasis on autonomy, ownership, and continuous improvement. Collaborative and globally distributed team culture. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Identity & PAM Security Engineer. Skills: Cloud Security, Privileged Access Management, Identity Governance. Design privileged access controls. Implement privileged access controls", "postedDate" : "2026-06-11T04:41:30.186", "createdAt" : "2026-06-11T04:41:30.186", "lastUpdated" : "2026-06-16T02:46:34.381", "ingestTimestamp" : "2026-06-14T21:39:26.140", "mongoId" : "6a2cb20c74d8ee00a09df4fe", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "30k-50k", "hasSalary" : false, "allSkills" : [ "Privileged access controls", "Privileged Identity Management", "Just-in-time access", "Approval workflows", "Role assignments", "Administrative access processes", "Access review processes", "Certification processes", "Service accounts management", "Machine identities management", "Secrets management", "API keys management", "Credentials management", "Conditional access policies", "MFA enforcement", "Identity risk-based controls", "Identity workflows automation", "Access provisioning automation", "Reporting automation", "Remediation processes automation", "Least privilege principles", "Identity governance", "PAM strategies", "Security operations", "Identity security tooling", "Operational processes", "Cloud Security", "Privileged Access Management", "Identity Governance", "Analytical skills", "Problem-solving skills", "Stakeholder management", "Identity security principles", "Least privilege", "RBAC", "MFA", "Conditional access", "Privileged access management", "Service accounts", "Machine identities", "Credential rotation", "PAM", "Cloud identity", "Enterprise security architectures", "SC-300", "AZ-500", "CISSP", "CCSP", "Microsoft Entra ID", "Google Cloud IAM", "HashiCorp Vault", "Azure Key Vault", "Google Secret Manager", "SIEM tools", "Log analysis platforms", "Security monitoring systems" ], "skillCount" : 56, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 1233.4, "daysOld" : 4, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cb20c74d8ee00a09df500", "title" : "Identity & PAM Security Engineer", "industry" : "IT", "salary" : { "min" : 85000.0, "max" : 125000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Identity & PAM Security Engineer in Bulgaria, adjusted for the technology industry and remote work." }, "location" : "UK", "locations" : [ "UK" ], "certifications" : [ "SC-300", "AZ-500", "CISSP", "CCSP" ], "timestamp" : "2026-06-16T05:43:26.341", "fingerprint" : "bbe6c0d0977b0734232a18b975380d139505f94d41c97ed639c634488636a1c6", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/jobgether/6d9135b0-ca4c-417b-9df4-3f3f437d7c16/apply", "externalId" : "6d9135b0-ca4c-417b-9df4-3f3f437d7c16", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Bulgaria", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "Bulgaria", "employmentType" : "FULL_TIME", "experienceMinYears" : 4, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Microsoft Entra ID, Google Cloud IAM, PowerShell, Python, APIs, HashiCorp Vault, Azure Key Vault, Google Secret Manager", "professionalSkills" : [ "Access controls", "Access processes", "Access review", "Access certification", "Identity lifecycle management", "Conditional access", "MFA enforcement", "Risk-based security", "Identity workflows", "Identity security", "PAM strategies", "Security operations", "Identity governance" ], "hardSkillsList" : [ "Privileged Identity Management", "Just-in-time access", "Role assignments", "Service accounts management", "Machine identities management", "Secrets management", "API keys management", "Credentials management", "Conditional access policies", "MFA enforcement", "Identity risk controls", "Automation", "Access provisioning", "Reporting", "Remediation processes", "Cloud environments", "Enterprise environments", "Security audits", "Compliance requirements", "Incident response", "Identity investigations", "Security tooling", "Operational processes" ], "hardSkills" : [ { "name" : "Privileged Identity Management", "level" : "intermediate" }, { "name" : "Just-in-time access", "level" : "intermediate" }, { "name" : "Role assignments", "level" : "intermediate" }, { "name" : "Service accounts management", "level" : "intermediate" }, { "name" : "Machine identities management", "level" : "intermediate" }, { "name" : "Secrets management", "level" : "intermediate" }, { "name" : "API keys management", "level" : "intermediate" }, { "name" : "Credentials management", "level" : "intermediate" }, { "name" : "Conditional access policies", "level" : "intermediate" }, { "name" : "MFA enforcement", "level" : "intermediate" }, { "name" : "Identity risk controls", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" }, { "name" : "Access provisioning", "level" : "intermediate" }, { "name" : "Reporting", "level" : "intermediate" }, { "name" : "Remediation processes", "level" : "intermediate" }, { "name" : "Cloud environments", "level" : "intermediate" }, { "name" : "Enterprise environments", "level" : "intermediate" }, { "name" : "Security audits", "level" : "intermediate" }, { "name" : "Compliance requirements", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Identity investigations", "level" : "intermediate" }, { "name" : "Security tooling", "level" : "intermediate" }, { "name" : "Operational processes", "level" : "intermediate" } ], "majorSkills" : "Privileged Access Management, Cloud Security, Security Engineering", "majorSkillsList" : [ "Privileged Access Management", "Cloud Security", "Security Engineering" ], "coreResponsibilities" : "Design privileged access controls, Implement privileged access controls, Manage privileged access controls, Define secure administrative access, Maintain secure administrative access, Lead access review processes, Lead access certification processes, Ensure remediation actions completed, Manage service account lifecycle, Manage machine identity lifecycle, Manage secrets lifecycle, Manage API keys lifecycle, Manage credentials lifecycle, Configure conditional access policies, Configure MFA enforcement, Configure identity risk-based controls, Design automation for identity workflows, Implement automation for identity workflows, Collaborate with Security teams, Collaborate with Infrastructure teams, Collaborate with Engineering teams, Support security audits, Support compliance requirements, Support incident response, Support identity investigations, Contribute to identity governance evolution, Contribute to PAM strategies evolution, Contribute to security operations evolution, Improve identity security tooling, Improve identity security documentation, Improve operational processes", "teamCollaboration" : "Security teams; Infrastructure teams; Engineering teams; Globally distributed team", "domainKnowledge" : "Identity and Access Management; Cloud Security; Infrastructure Security; Privileged Access Management; Identity Governance; Least privilege; RBAC; MFA; Conditional access; Service accounts; Machine identities; Secrets management; Credential rotation; Cloud identity; Enterprise security architectures", "domainList" : [ "identity-and-access-management", "cloud-security", "infrastructure-security", "privileged-access-management", "identity-governance", "least-privilege", "rbac", "mfa", "conditional-access", "service-accounts", "machine-identities", "secrets-management", "credential-rotation", "cloud-identity", "enterprise-security-architectures" ], "domainSpecificKnowledge" : [ "Identity and Access Management", "Cloud Security", "Infrastructure Security", "Privileged Access Management", "Identity Governance", "Least privilege", "RBAC", "MFA", "Conditional access", "Service accounts", "Machine identities", "Secrets management", "Credential rotation", "Cloud identity", "Enterprise security architectures" ], "toolProficiency" : [ "Microsoft Entra ID", "Google Cloud IAM", "HashiCorp Vault", "Azure Key Vault", "Google Secret Manager" ], "communicationSkills" : "Documentation; Stakeholder management", "documentationSkills" : "Documentation", "continuousLearning" : "Continuous improvement", "problemSolvingSkills" : "Analytical; Problem-solving", "qualificationsBasic" : "4+ years IAM experience, 4+ years Cloud Security experience, 4+ years Infrastructure Security experience, 4+ years Security Engineering experience, Hands-on identity platforms experience, Microsoft Entra ID experience, Google Cloud IAM experience, Understand identity security principles, Manage service accounts at scale, Manage machine identities at scale, Manage secrets management at scale, Manage credential rotation at scale, Design PAM processes, Operate PAM processes, Design identity governance processes, Operate identity governance processes, Build automation using PowerShell, Build automation using Python, Build automation using APIs, Build automation using workflow platforms, Analytical skills, Problem-solving skills, Security-first mindset", "qualificationsPreferred" : "Experience with SIEM tools, Experience with log analysis platforms, Experience with security monitoring systems, Familiarity with HashiCorp Vault, Familiarity with Azure Key Vault, Familiarity with Google Secret Manager, SC-300 certification, AZ-500 certification, CISSP certification, CCSP certification", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Accountabilities Design, implement, and manage privileged access controls including Privileged Identity Management (PIM), just-in-time (JIT) access, approval workflows, and role assignments. Define and maintain secure administrative access processes for high-risk roles, privileged sessions, and emergency break-glass accounts. Lead access review and certification processes, ensuring remediation actions are completed and access remains aligned with least-privilege principles. Manage the lifecycle of service accounts, machine identities, secrets, API keys, and credentials, including rotation, monitoring, and decommissioning. Configure and maintain conditional access policies, MFA enforcement, and identity risk-based security controls. Design and implement automation for identity workflows, including approvals, access provisioning, reporting, and remediation processes. Collaborate with Security, Infrastructure, and Engineering teams to enhance identity security across cloud and enterprise environments. Support security audits, compliance requirements, incident response, and identity-related investigations. Contribute to the evolution of identity governance, PAM strategies, and security operations best practices. Improve identity security tooling, documentation, and operational processes to increase scalability and resilience. Requirements 4+ years of experience in Identity & Access Management (IAM), Cloud Security, Infrastructure Security, or Security Engineering roles. Hands-on experience with identity platforms such as Microsoft Entra ID and Google Cloud IAM. Strong understanding of identity security principles including least privilege, RBAC, MFA, conditional access, and privileged access management. Experience managing service accounts, machine identities, secrets management, and credential rotation at scale. Proven ability to design or operate PAM or identity governance processes in complex environments. Experience building automation using tools such as PowerShell, Python, APIs, or workflow orchestration platforms. Strong analytical and problem-solving skills with a security-first mindset. Experience working with SIEM tools, log analysis platforms, or security monitoring systems is a plus. Familiarity with tools such as HashiCorp Vault, Azure Key Vault, or Google Secret Manager is advantageous. Relevant certifications such as SC-300, AZ-500, CISSP, or CCSP are considered a strong plus. Excellent communication, documentation, and stakeholder management skills. Ability to work effectively in distributed, fast-paced, and collaborative engineering environments. Benefits Competitive salary with performance-based quarterly bonuses. Remote-first working model with flexibility across working hours. 28 days of paid annual leave. Core working hours with flexibility outside of defined collaboration windows. Top-tier equipment provided to support your work. Referral bonuses and performance-based flash bonuses. Annual company retreats with international team collaboration opportunities. Opportunity to work in a highly technical, security-focused environment. Exposure to modern cloud identity, PAM, and enterprise security architectures. Strong emphasis on autonomy, ownership, and continuous improvement. Collaborative and globally distributed team culture. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Identity & PAM Security Engineer. Skills: Privileged Access Management, Cloud Security, Security Engineering. Design privileged access controls. Implement privileged access controls", "postedDate" : "2026-06-11T04:41:14.529", "createdAt" : "2026-06-11T04:41:14.529", "lastUpdated" : "2026-06-16T05:43:26.341", "ingestTimestamp" : "2026-06-14T21:08:58.513", "mongoId" : "6a2cb20c74d8ee00a09df500", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Privileged Identity Management", "Just-in-time access", "Role assignments", "Service accounts management", "Machine identities management", "Secrets management", "API keys management", "Credentials management", "Conditional access policies", "MFA enforcement", "Identity risk controls", "Automation", "Access provisioning", "Reporting", "Remediation processes", "Cloud environments", "Enterprise environments", "Security audits", "Compliance requirements", "Incident response", "Identity investigations", "Security tooling", "Operational processes", "Privileged Access Management", "Cloud Security", "Security Engineering", "Access controls", "Access processes", "Access review", "Access certification", "Identity lifecycle management", "Conditional access", "Risk-based security", "Identity workflows", "Identity security", "PAM strategies", "Security operations", "Identity governance", "Identity and Access Management", "Infrastructure Security", "Identity Governance", "Least privilege", "RBAC", "MFA", "Service accounts", "Machine identities", "Credential rotation", "Cloud identity", "Enterprise security architectures", "SC-300", "AZ-500", "CISSP", "CCSP", "Microsoft Entra ID", "Google Cloud IAM", "HashiCorp Vault", "Azure Key Vault", "Google Secret Manager" ], "skillCount" : 58, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1233.3734, "daysOld" : 5, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.97 }, { "id" : "6a2cb20c74d8ee00a09df4fd", "title" : "Identity & PAM Security Engineer", "industry" : "IT", "salary" : { "min" : 75000.0, "max" : 105000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Identity & PAM Security Engineer in Germany, adjusted for mid-seniority, technology industry, and onsite work mode." }, "location" : "Germany", "locations" : [ "Germany" ], "certifications" : [ "SC-300", "AZ-500", "CISSP", "CCSP" ], "timestamp" : "2026-06-16T01:48:04.601", "fingerprint" : "14616371812e0be42c5e20d29ca7a00f3052bee5ab93db912b5d90e1779e174d", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/jobgether/33499503-0724-412e-8866-e8ba47f99ce1/apply", "externalId" : "33499503-0724-412e-8866-e8ba47f99ce1", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Germany", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "Germany", "employmentType" : "FULL_TIME", "experienceMinYears" : 4, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Microsoft Entra ID, Google Cloud IAM, PowerShell, Python, APIs, HashiCorp Vault, Azure Key Vault, Google Secret Manager", "professionalSkills" : [ "Security engineering", "Cloud security", "Infrastructure security", "Identity management", "Access management", "Security operations" ], "hardSkillsList" : [ "Privileged access controls", "Just-in-time access", "Role assignments", "Service account lifecycle", "Machine identity lifecycle", "Secret rotation", "Credential rotation", "Conditional access policies", "MFA enforcement", "Identity risk controls", "Identity workflows", "Access provisioning", "Reporting processes", "Remediation processes", "Identity governance", "PAM strategies", "Security tooling", "Operational processes", "Least privilege", "RBAC", "MFA", "Privileged access management", "Secrets management", "PAM processes", "Identity governance processes", "Workflow orchestration" ], "softSkillsList" : [ "Documentation", "Stakeholder management" ], "hardSkills" : [ { "name" : "Privileged access controls", "level" : "intermediate" }, { "name" : "Just-in-time access", "level" : "intermediate" }, { "name" : "Role assignments", "level" : "intermediate" }, { "name" : "Service account lifecycle", "level" : "intermediate" }, { "name" : "Machine identity lifecycle", "level" : "intermediate" }, { "name" : "Secret rotation", "level" : "intermediate" }, { "name" : "Credential rotation", "level" : "intermediate" }, { "name" : "Conditional access policies", "level" : "intermediate" }, { "name" : "MFA enforcement", "level" : "intermediate" }, { "name" : "Identity risk controls", "level" : "intermediate" }, { "name" : "Identity workflows", "level" : "intermediate" }, { "name" : "Access provisioning", "level" : "intermediate" }, { "name" : "Reporting processes", "level" : "intermediate" }, { "name" : "Remediation processes", "level" : "intermediate" }, { "name" : "Identity governance", "level" : "intermediate" }, { "name" : "PAM strategies", "level" : "intermediate" }, { "name" : "Security tooling", "level" : "intermediate" }, { "name" : "Operational processes", "level" : "intermediate" }, { "name" : "Least privilege", "level" : "intermediate" }, { "name" : "RBAC", "level" : "intermediate" }, { "name" : "MFA", "level" : "intermediate" }, { "name" : "Privileged access management", "level" : "intermediate" }, { "name" : "Secrets management", "level" : "intermediate" }, { "name" : "PAM processes", "level" : "intermediate" }, { "name" : "Identity governance processes", "level" : "intermediate" }, { "name" : "Workflow orchestration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Documentation" }, { "name" : "Stakeholder management" } ], "coreResponsibilities" : "Design privileged access controls, Implement privileged access controls, Manage privileged access controls, Define secure administrative access, Maintain secure administrative access, Lead access review processes, Lead access certification processes, Ensure remediation actions completed, Manage service account lifecycle, Manage machine identity lifecycle, Manage secrets lifecycle, Manage API key lifecycle, Manage credential lifecycle, Configure conditional access policies, Configure MFA enforcement, Configure identity risk controls, Design automation for identity workflows, Implement automation for identity workflows, Collaborate with Security teams, Collaborate with Infrastructure teams, Collaborate with Engineering teams, Support security audits, Support compliance requirements, Support incident response, Support identity investigations, Contribute to identity governance evolution, Contribute to PAM strategies evolution, Contribute to security operations evolution, Improve identity security tooling, Improve identity security documentation, Improve operational processes", "teamCollaboration" : "Security teams; Infrastructure teams; Engineering teams; Globally distributed team", "domainKnowledge" : "Identity security principles; Least privilege; RBAC; MFA; Conditional access; Privileged access management; Identity governance; PAM strategies; Cloud identity; Enterprise security architectures", "domainList" : [ "identity-security-principles", "least-privilege", "rbac", "mfa", "conditional-access", "privileged-access-management", "identity-governance", "pam-strategies", "cloud-identity", "enterprise-security-architectures" ], "domainSpecificKnowledge" : [ "Identity security principles", "Least privilege", "RBAC", "MFA", "Conditional access", "Privileged access management", "Identity governance", "PAM strategies", "Cloud identity", "Enterprise security architectures" ], "toolProficiency" : [ "Microsoft Entra ID", "Google Cloud IAM", "HashiCorp Vault", "Azure Key Vault", "Google Secret Manager", "SIEM tools", "Log analysis platforms" ], "communicationSkills" : "Stakeholder management", "documentationSkills" : "Documentation", "continuousLearning" : "Continuous improvement", "problemSolvingSkills" : "Problem-solving skills; Analytical skills", "qualificationsBasic" : "4+ years IAM experience, 4+ years Cloud Security experience, 4+ years Infrastructure Security experience, 4+ years Security Engineering experience, Hands-on Microsoft Entra ID experience, Hands-on Google Cloud IAM experience, Understanding identity security principles, Understanding least privilege, Understanding RBAC, Understanding MFA, Understanding conditional access, Understanding privileged access management, Experience managing service accounts, Experience managing machine identities, Experience managing secrets management, Experience managing credential rotation, Proven ability design PAM processes, Proven ability operate PAM processes, Proven ability design identity governance processes, Proven ability operate identity governance processes, Experience building automation, Analytical skills, Problem-solving skills, Security-first mindset", "qualificationsPreferred" : "Experience with SIEM tools a plus, Experience with log analysis platforms a plus, Experience with security monitoring systems a plus, Familiarity with HashiCorp Vault advantageous, Familiarity with Azure Key Vault advantageous, Familiarity with Google Secret Manager advantageous, SC-300 certification a plus, AZ-500 certification a plus, CISSP certification a plus, CCSP certification a plus", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Accountabilities Design, implement, and manage privileged access controls including Privileged Identity Management (PIM), just-in-time (JIT) access, approval workflows, and role assignments. Define and maintain secure administrative access processes for high-risk roles, privileged sessions, and emergency break-glass accounts. Lead access review and certification processes, ensuring remediation actions are completed and access remains aligned with least-privilege principles. Manage the lifecycle of service accounts, machine identities, secrets, API keys, and credentials, including rotation, monitoring, and decommissioning. Configure and maintain conditional access policies, MFA enforcement, and identity risk-based security controls. Design and implement automation for identity workflows, including approvals, access provisioning, reporting, and remediation processes. Collaborate with Security, Infrastructure, and Engineering teams to enhance identity security across cloud and enterprise environments. Support security audits, compliance requirements, incident response, and identity-related investigations. Contribute to the evolution of identity governance, PAM strategies, and security operations best practices. Improve identity security tooling, documentation, and operational processes to increase scalability and resilience. Requirements 4+ years of experience in Identity & Access Management (IAM), Cloud Security, Infrastructure Security, or Security Engineering roles. Hands-on experience with identity platforms such as Microsoft Entra ID and Google Cloud IAM. Strong understanding of identity security principles including least privilege, RBAC, MFA, conditional access, and privileged access management. Experience managing service accounts, machine identities, secrets management, and credential rotation at scale. Proven ability to design or operate PAM or identity governance processes in complex environments. Experience building automation using tools such as PowerShell, Python, APIs, or workflow orchestration platforms. Strong analytical and problem-solving skills with a security-first mindset. Experience working with SIEM tools, log analysis platforms, or security monitoring systems is a plus. Familiarity with tools such as HashiCorp Vault, Azure Key Vault, or Google Secret Manager is advantageous. Relevant certifications such as SC-300, AZ-500, CISSP, or CCSP are considered a strong plus. Excellent communication, documentation, and stakeholder management skills. Ability to work effectively in distributed, fast-paced, and collaborative engineering environments. Benefits Competitive salary with performance-based quarterly bonuses. Remote-first working model with flexibility across working hours. 28 days of paid annual leave. Core working hours with flexibility outside of defined collaboration windows. Top-tier equipment provided to support your work. Referral bonuses and performance-based flash bonuses. Annual company retreats with international team collaboration opportunities. Opportunity to work in a highly technical, security-focused environment. Exposure to modern cloud identity, PAM, and enterprise security architectures. Strong emphasis on autonomy, ownership, and continuous improvement. Collaborative and globally distributed team culture. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Identity & PAM Security Engineer. Design privileged access controls. Implement privileged access controls", "postedDate" : "2026-06-11T04:12:29.830", "createdAt" : "2026-06-11T04:12:29.830", "lastUpdated" : "2026-06-16T01:48:04.601", "ingestTimestamp" : "2026-06-14T21:06:54.320", "mongoId" : "6a2cb20c74d8ee00a09df4fd", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Privileged access controls", "Just-in-time access", "Role assignments", "Service account lifecycle", "Machine identity lifecycle", "Secret rotation", "Credential rotation", "Conditional access policies", "MFA enforcement", "Identity risk controls", "Identity workflows", "Access provisioning", "Reporting processes", "Remediation processes", "Identity governance", "PAM strategies", "Security tooling", "Operational processes", "Least privilege", "RBAC", "MFA", "Privileged access management", "Secrets management", "PAM processes", "Identity governance processes", "Workflow orchestration", "Documentation", "Stakeholder management", "Security engineering", "Cloud security", "Infrastructure security", "Identity management", "Access management", "Security operations", "Identity security principles", "Conditional access", "Cloud identity", "Enterprise security architectures", "SC-300", "AZ-500", "CISSP", "CCSP", "Microsoft Entra ID", "Google Cloud IAM", "HashiCorp Vault", "Azure Key Vault", "Google Secret Manager", "SIEM tools", "Log analysis platforms" ], "skillCount" : 49, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 1208.3461, "daysOld" : 4, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cb20c74d8ee00a09df4fb", "title" : "Identity & PAM Security Engineer", "industry" : "IT", "location" : "Switzerland", "locations" : [ "Switzerland" ], "certifications" : [ "SC-300", "AZ-500", "CISSP", "CCSP" ], "timestamp" : "2026-06-15T13:42:28.830", "fingerprint" : "610c24a093264ee8574b3245697361cf5ccc63acdf402351bbdc8d5345c31b35", "source" : "lever", "applyUrl" : "https://jobs.lever.co/jobgether/17c6cf65-34e2-471f-8aa7-79cb0c5ce2a4/apply", "externalId" : "17c6cf65-34e2-471f-8aa7-79cb0c5ce2a4", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Switzerland", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "Switzerland", "employmentType" : "FULL_TIME", "experienceMinYears" : 4, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Microsoft Entra ID, Google Cloud IAM, PowerShell, Python, APIs", "professionalSkills" : [ "Identity & Access Management (IAM), Cloud Security, Infrastructure Security, Security Engineering, identity security principles, PAM strategies, security operations best practices, modern cloud identity, enterprise security architectures." ], "hardSkillsList" : [ "Privileged Identity Management", "just-in-time access", "least-privilege principles", "service accounts", "machine identities", "secrets management", "credential rotation", "conditional access policies", "MFA enforcement", "identity risk-based security controls", "RBAC", "PAM" ], "softSkillsList" : [ "analytical, problem-solving, security-first mindset, stakeholder management, autonomy, ownership" ], "hardSkills" : [ { "name" : "Privileged Identity Management", "level" : "intermediate" }, { "name" : "just-in-time access", "level" : "intermediate" }, { "name" : "least-privilege principles", "level" : "intermediate" }, { "name" : "service accounts", "level" : "intermediate" }, { "name" : "machine identities", "level" : "intermediate" }, { "name" : "secrets management", "level" : "intermediate" }, { "name" : "credential rotation", "level" : "intermediate" }, { "name" : "conditional access policies", "level" : "intermediate" }, { "name" : "MFA enforcement", "level" : "intermediate" }, { "name" : "identity risk-based security controls", "level" : "intermediate" }, { "name" : "RBAC", "level" : "intermediate" }, { "name" : "PAM", "level" : "intermediate" } ], "softSkills" : [ { "name" : "analytical, problem-solving, security-first mindset, stakeholder management, autonomy, ownership" } ], "majorSkills" : "Privileged Access Management, Identity and Access Management, Cloud Security, Automation, Secrets Management", "majorSkillsList" : [ "Privileged Access Management, Identity and Access Management, Cloud Security, Automation, Secrets Management" ], "coreResponsibilities" : "Design, implement, and manage privileged access controls including Privileged Identity Management (PIM), just-in-time (JIT) access, approval workflows, and role assignments. Define and maintain secure administrative access processes for high-risk roles, privileged sessions, and emergency break-glass accounts. Lead access review and certification processes, ensuring remediation actions are completed and access remains aligned with least-privilege principles. Manage the lifecycle of service accounts, machine identities, secrets, API keys, and credentials, including rotation, monitoring, and decommissioning. Configure and maintain conditional access policies, MFA enforcement, and identity risk-based security controls. Design and implement automation for identity workflows, including approvals, access provisioning, reporting, and remediation processes. Collaborate with Security, Infrastructure, and Engineering teams to enhance identity security across cloud and enterprise environments. Support security audits, compliance requirements, incident response, and identity-related investigations. Contribute to the evolution of identity governance, PAM strategies, and security operations best practices. Improve identity security tooling, documentation, and operational processes to increase scalability and resilience.", "teamCollaboration" : "Collaborate with Security, Infrastructure, and Engineering teams. Ability to work effectively in distributed, fast-paced, and collaborative engineering environments. Collaborative and globally distributed team culture.", "toolProficiency" : [ "HashiCorp Vault, Azure Key Vault, Google Secret Manager, SIEM tools" ], "communicationSkills" : "communication; documentation", "documentationSkills" : "documentation", "continuousLearning" : "emphasis on autonomy, ownership, and continuous improvement.", "problemSolvingSkills" : "analytical; problem-solving", "specialRequirements" : "Jobgether uses an AI-powered matching process. By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. You may exercise your rights (access, rectification, erasure, objection) at any time.", "qualificationsBasic" : "4+ years of experience in Identity & Access Management (IAM), Cloud Security, Infrastructure Security, or Security Engineering roles. Hands-on experience with identity platforms such as Microsoft Entra ID and Google Cloud IAM. understanding of identity security principles including least privilege, RBAC, MFA, conditional access, and privileged access management. Experience managing service accounts, machine identities, secrets management, and credential rotation at scale. Proven ability to design or operate PAM or identity governance processes in complex environments. Experience building automation using tools such as PowerShell, Python, APIs, or workflow orchestration platforms. analytical and problem-solving skills with a security-first mindset. Excellent communication, documentation, and stakeholder management skills. Ability to work effectively in distributed, fast-paced, and collaborative engineering environments.", "qualificationsPreferred" : "Experience with SIEM tools, log analysis platforms, or security monitoring systems is a plus. Familiarity with tools such as HashiCorp Vault, Azure Key Vault, or Google Secret Manager is advantageous. Relevant certifications such as SC-300, AZ-500, CISSP, or CCSP are considered a plus.", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Accountabilities Design, implement, and manage privileged access controls including Privileged Identity Management (PIM), just-in-time (JIT) access, approval workflows, and role assignments. Define and maintain secure administrative access processes for high-risk roles, privileged sessions, and emergency break-glass accounts. Lead access review and certification processes, ensuring remediation actions are completed and access remains aligned with least-privilege principles. Manage the lifecycle of service accounts, machine identities, secrets, API keys, and credentials, including rotation, monitoring, and decommissioning. Configure and maintain conditional access policies, MFA enforcement, and identity risk-based security controls. Design and implement automation for identity workflows, including approvals, access provisioning, reporting, and remediation processes. Collaborate with Security, Infrastructure, and Engineering teams to enhance identity security across cloud and enterprise environments. Support security audits, compliance requirements, incident response, and identity-related investigations. Contribute to the evolution of identity governance, PAM strategies, and security operations best practices. Improve identity security tooling, documentation, and operational processes to increase scalability and resilience. Requirements 4+ years of experience in Identity & Access Management (IAM), Cloud Security, Infrastructure Security, or Security Engineering roles. Hands-on experience with identity platforms such as Microsoft Entra ID and Google Cloud IAM. Strong understanding of identity security principles including least privilege, RBAC, MFA, conditional access, and privileged access management. Experience managing service accounts, machine identities, secrets management, and credential rotation at scale. Proven ability to design or operate PAM or identity governance processes in complex environments. Experience building automation using tools such as PowerShell, Python, APIs, or workflow orchestration platforms. Strong analytical and problem-solving skills with a security-first mindset. Experience working with SIEM tools, log analysis platforms, or security monitoring systems is a plus. Familiarity with tools such as HashiCorp Vault, Azure Key Vault, or Google Secret Manager is advantageous. Relevant certifications such as SC-300, AZ-500, CISSP, or CCSP are considered a strong plus. Excellent communication, documentation, and stakeholder management skills. Ability to work effectively in distributed, fast-paced, and collaborative engineering environments. Benefits Competitive salary with performance-based quarterly bonuses. Remote-first working model with flexibility across working hours. 28 days of paid annual leave. Core working hours with flexibility outside of defined collaboration windows. Top-tier equipment provided to support your work. Referral bonuses and performance-based flash bonuses. Annual company retreats with international team collaboration opportunities. Opportunity to work in a highly technical, security-focused environment. Exposure to modern cloud identity, PAM, and enterprise security architectures. Strong emphasis on autonomy, ownership, and continuous improvement. Collaborative and globally distributed team culture. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Identity & PAM Security Engineer. Skills: Privileged Access Management, Identity and Access Management, Cloud Security, Automation, Secrets Management. Design, implement, and manage privileged access controls including Privileged Identity Management (PIM), just-in-time (JIT) access, approval workflows, and role assignments. Define and maintain secure administrative access processes for high-risk roles, privileged sessions, and emergency break-glass accounts. Lead access review and certification ", "postedDate" : "2026-06-11T04:42:05.138", "createdAt" : "2026-06-11T04:42:05.138", "lastUpdated" : "2026-06-15T13:42:28.830", "ingestTimestamp" : "2026-06-14T21:21:38.423", "mongoId" : "6a2cb20c74d8ee00a09df4fb", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "hasSalary" : false, "allSkills" : [ "Privileged Identity Management", "just-in-time access", "least-privilege principles", "service accounts", "machine identities", "secrets management", "credential rotation", "conditional access policies", "MFA enforcement", "identity risk-based security controls", "RBAC", "PAM", "analytical, problem-solving, security-first mindset, stakeholder management, autonomy, ownership", "Privileged Access Management, Identity and Access Management, Cloud Security, Automation, Secrets Management", "Identity & Access Management (IAM), Cloud Security, Infrastructure Security, Security Engineering, identity security principles, PAM strategies, security operations best practices, modern cloud identity, enterprise security architectures.", "SC-300", "AZ-500", "CISSP", "CCSP", "HashiCorp Vault, Azure Key Vault, Google Secret Manager, SIEM tools" ], "skillCount" : 20, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 1151.4221, "daysOld" : 4, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c62f974d8ee00a08f7cf4", "title" : "Product Owner (w/m/d) System Engineering / Privileged Access Management", "company" : "R+V Allgemeine Versicherung AG", "industry" : "Insurance", "salary" : { "min" : 68000.0, "max" : 88000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Product Owner in Wiesbaden, Germany, adjusted for the insurance industry and company size." }, "location" : "Wiesbaden, HE, Germany", "locations" : [ "Wiesbaden", "HE", "Germany" ], "certifications" : [ "CyberArk Defender Level", "CyberArk Sentry Level" ], "timestamp" : "2026-06-15T05:29:30.202", "fingerprint" : "e039298e519710a13e7d89ecf71d1386ed78f2326933853edf4d55c496caef07", "source" : "smartrecruiters", "language" : "de", "applyUrl" : "https://jobs.smartrecruiters.com/RVAllgemeineVersicherungenAG/744000131883258-product-owner-w-m-d-system-engineering-privileged-access-management", "externalId" : "744000131883258", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Wiesbaden", "state" : "Hesse", "country" : "Germany", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "50.0820384,8.2416556" } ], "locationText" : "Wiesbaden, Hesse, Germany", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "mid", "technicalSkills" : "MS Windows, Linux, Active Directory, PKI, CyberArk, Selenium, AutoIT, PowerShell, Java-Script", "professionalSkills" : [ "System Engineering", "Privileged Access Management", "Product Management", "Agile Methoden" ], "hardSkillsList" : [ "CyberArk Architektur", "Hardening-Mechanismen", "CPM Plugins", "PSM Connection Components" ], "softSkillsList" : [ "Eigeninitiative", "Eigenverantwortung" ], "hardSkills" : [ { "name" : "CyberArk Architektur", "level" : "intermediate" }, { "name" : "Hardening-Mechanismen", "level" : "intermediate" }, { "name" : "CPM Plugins", "level" : "intermediate" }, { "name" : "PSM Connection Components", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Eigeninitiative" }, { "name" : "Eigenverantwortung" } ], "majorSkills" : "Privileged Access Management, CyberArk, System Engineering", "majorSkillsList" : [ "Privileged Access Management", "CyberArk", "System Engineering" ], "coreResponsibilities" : "Verantworten technische Lösungen, Strategische Weiterentwicklung CyberArk, Sicherstellen sicheren Betrieb, Sicherstellen wirtschaftlichen Betrieb, Sicherstellen stabilen Betrieb, Hands-on Aufgaben, Aufbau CPM-Komponenten, Pflege CPM-Komponenten, Erweiterung CPM-Komponenten, Aufbau PSM-Komponenten, Pflege PSM-Komponenten, Erweiterung PSM-Komponenten, Ableiten Vision für Lösungen, Erarbeiten Roadmap, Vermitteln Zielbild, Steuern Mitarbeitenden, Steuern externer Dienstleister, Fördern Zusammenarbeit, Priorisieren Themen, Einholen Kundenbedürfnisse, Vertreten Kundenbedürfnisse, Verantworten Aufgabenplanung, Verantworten Ressourcenplanung, Verantworten Budgetplanung, Prüfen umgesetzte Lösungen, Messen umgesetzte Lösungen, Optimieren Lösungen", "teamCollaboration" : "Bindeglied im Team; Austausch Kollegen; ART; Scrum-Master", "projectManagementSkills" : [ "Roadmap", "Agile", "Scrum" ], "domainKnowledge" : "Privileged Access Management; System Engineering; MS Windows; Linux; Active Directory; PKI; Zertifikaten; on-prem Umgebungen", "domainList" : [ "privileged-access-management", "system-engineering", "ms-windows", "linux", "active-directory", "pki", "zertifikaten", "on-prem-umgebungen" ], "domainSpecificKnowledge" : [ "Privileged Access Management", "System Engineering", "MS Windows", "Linux", "Active Directory", "PKI", "Zertifikaten", "on-prem Umgebungen" ], "toolProficiency" : [ "CyberArk", "Selenium", "AutoIT", "PowerShell" ], "communicationSkills" : "Zielbilder vermitteln", "continuousLearning" : "Förderung Weiterentwicklung; R+V Akademie; Externe Qualifizierungsmaßnahmen", "qualificationsBasic" : "Studienabschluss Informatik/Wirtschaftsinformatik, vergleichbare Berufserfahrung, Erfahrung Infrastrukturumfeld, Erfahrung Privileged Access Management System, Kenntnisse MS Windows, Kenntnisse Linux, gute Deutschkenntnisse (mindestens B2/C1), gute Englischkenntnisse", "qualificationsPreferred" : "Erfahrung als Product Owner, Knowhow Active Directory, Knowhow GPOs, Knowhow PKI, Knowhow Zertifikaten, Zertifizierung CyberArk Defender/Sentry Level, Erfahrung Entwicklung CyberArk CPM Plugins, Erfahrung Entwicklung PSM Connection Components, Erfahrung Selenium, Erfahrung CyberArk Plugin Frameworks, Erfahrung AutoIT, Erfahrung PowerShell, Erfahrung HTML, Erfahrung Java-Script", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Lass uns gemeinsam neue Wege gehen! Denn genau das tun wir bei der R+V, einem der größten Versicherer Deutschlands. Willkommen im Ressort Operations und IT, in dem die R+V alle kundennahen Operations-Einheiten und die IT bündelt. Ziel ist es, Prozesse und technische Voraussetzungen so zu verbessern, dass die R+V Kundenanliegen schneller, effizienter und digitaler bearbeiten kann. Innovative Technologien und unsere vielfältige Systemlandschaft bieten Möglichkeiten für fachliche und persönliche Entwicklung. * Als Product Owner verantwortest Du die technischen Lösungen und arbeitest an der strategischen Weiterentwicklung des Privileged Access Management System CyberArk gemeinsam mit dem Productmanager gegenüber dem zuständigen Business Owner sowie den anfordernden Kunden aus Regulatorik und Prozessverantwortung innerhalb der IT der R+V. * Du meisterst den Spagat zwischen Implementierung und Betrieb und nimmst die Verantwortung mit einem hohen Maß an Eigeninitiative wahr. Dabei verfolgst Du das Ziel für das Privileged Access Management System CyberArk einen sicheren, wirtschaftlichen und stabilen Betrieb heute und in der Zukunft zu gewährleisten. * Ein weiterer Schwerpunkt Deiner Tätigkeit sind hands-on Aufgaben wie Aufbau, Pflege und Erweiterung von CPM- und PSM-Komponenten zur Integration von Umsystemen und kritisch-wichtigen Anwendungen. * Aus unserer IT-Strategie leitest Du eine Vision für die verantworteten Lösungen ab, erarbeitest eine Roadmap und vermittelst im ART und bei unseren IT-Kunden das Verständnis für das definierte Zielbild. Dazu gehören auch der effektive Einsatz und Steuerung der Mitarbeitenden gemeinsam mit dem People Lead, sowie die Steuerung externer Dienstleister. * Du fungierst als Bindeglied im Team, förderst die Zusammenarbeit und priorisierst Themen gemeinsam mit dem Team und Scrum-Master. * Du holst regelmäßig konkrete Kundenbedürfnisse ein, priorisierst und vertrittst diese routiniert im ART. Du verantwortest die Durchführung der Aufgaben-, Ressourcen- und Budgetplanung für das Privileged Access Management Systems CyberArk. Gemeinsam mit dem Team prüfst und misst Du die umgesetzten Lösungen und optimierst diese kontinuierlich. ## Qualifications * Du verfügst über einen Studienabschluss in Informatik/Wirtschaftsinformatik oder einem ähnlichen Fachgebiet oder bringst relevante, vergleichbare Berufserfahrung mit. * Du hast nachweisliche Erfahrung – idealerweise als Product Owner – in einem Infrastrukturumfeld, bestenfalls für ein Privileged Access Management System. * Fundierte Kenntnisse in den Betriebssystemen MS Windows und Linux zeichnen Dich aus. Idealerweise bringst Du darüber hinaus Knowhow bzgl.Active Directory, GPOs, PKI und Zertifikaten mit. * Deine Kenntnisse und Betriebserfahrungen mit der Software CyberArk (Vault-, PSM- und CPM-Architektur, Hardening-Mechanismen, Plattformen) konntest du ggf. sogar auf „Defender“ oder „Sentry“ Level“ für on-prem Umgebungen zertifizieren. * Bestenfalls konntest du in der Vergangenheit bereits Erfahrungen in der Entwicklung von CyberArk CPM Plugins und PSM Connection Components und den dafür benötigten Technologien (Selenium, CyberArk Plugin Frameworks, AutoIT, PowerShell, Webbrowser-Technologien wie HTML und Java-Script) sammeln. * Im Austausch den Kollegen zeigst Du gute Kommunikationsfähigkeiten. Du inspirierst Dein Team und kannst Zielbilder verständlich vermitteln. * Du agierst mit einem hohen Maß an Eigenverantwortung und Initiative und fühlst Dich wohl in einem agilen Umfeld. In vorherigen Positionen konntest du agile Methoden bereits anwenden und anpassen. * Du verfügst über sehr gute Deutschkenntnisse in Wort und Schrift mit (mindestens B2/C1) sowie gute Englischkenntnisse. ## Additional Information Homeoffice: Flexible Arbeitszeiten im Homeoffice und Büro. Mehr Infos zu unserem hybriden Arbeiten findest Du [hier](https://www.ruv.de/karriere/blog/HomeOffice-bei-ruv). Arbeitszeiten: Standardmäßig 38h-Woche, Zeiterfassungssystem, Gleitzeit & Lebensarbeitszeitkonto. Urlaub: 30 Tage Urlaub & zusätzliche arbeitsfreie Tage (24.12. und 31.12.). Vergütung: 14 Monatsgehälter (inkl. Weihnachts- & Urlaubsgeld) oder Teilnahme am variablen Vergütungssystem, Sonderzahlungen, Mitarbeitertarife & Rabattaktionen. Gesundheit: Betriebliche Altersvorsorge & Gesundheitsmanagement mit vielfältigen Angeboten. Unser hauseigenes Fitnessstudio und ein breites Netzwerk von Sportangeboten (Wellpass) stehen Dir zudem online und bundesweit zur Verfügung. Mobilität: Jobticket, Jobrad/Fahrradleasing, verkehrsgünstige Lage mit überdachten Fahrradparkplätzen. Familie & Beruf: Eltern-Kind-Büros, Kindernotfallbetreuung, eigene Kindertagespflege „Raiffeisenzwerge“ sowie Pflegenetzwerk & Unterstützung durch die R+V-Sozialberatung. Kulinarik: Gesunde & ausgewogene Speisen in unserem Betriebsrestaurant. Weiterentwicklung: Förderung & Weiterentwicklung durch die R+V Akademie. Die Übernahme externer Qualifizierungsmaßnahmen komplettiert Deine persönliche sowie fachliche Entwicklung. Kultur: Wir leben Gemeinschaft. Unser Motto „Was einer nicht schafft, schaffen viele“ spiegelt sich auch in unseren Teams und dem täglichen Miteinander wider.", "summaryDescription" : "Product Owner (w/m/d) System Engineering / Privileged Access Management at R+V Allgemeine Versicherung AG. Skills: Privileged Access Management, CyberArk, System Engineering. Verantworten technische Lösungen. Strategische Weiterentwicklung CyberArk", "postedDate" : "2026-06-12T11:53:48.000", "createdAt" : "2026-06-13T16:28:54.257", "lastUpdated" : "2026-06-15T05:29:30.202", "ingestTimestamp" : "2026-06-13T16:28:54.257", "mongoId" : "6a2c62f974d8ee00a08f7cf4", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "CyberArk Architektur", "Hardening-Mechanismen", "CPM Plugins", "PSM Connection Components", "Eigeninitiative", "Eigenverantwortung", "Privileged Access Management", "CyberArk", "System Engineering", "Product Management", "Agile Methoden", "Roadmap", "Agile", "Scrum", "MS Windows", "Linux", "Active Directory", "PKI", "Zertifikaten", "on-prem Umgebungen", "CyberArk Defender Level", "CyberArk Sentry Level", "Selenium", "AutoIT", "PowerShell" ], "skillCount" : 25, "jobCategory" : "engineering", "jobSubcategory" : "information-technology", "dataQualityScore" : 1.0, "_score" : 1151.2708, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2a666874d8ee00a062c8e4", "title" : "Managing Director, PAM", "company" : "Cyderes", "industry" : "305 - Identity Services", "salary" : { "min" : 350000.0, "max" : 650000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an Executive Managing Director in the Cybersecurity industry in the United States, adjusted for company size and seniority." }, "location" : "United States", "locations" : [ "United States" ], "certifications" : [ "CyberArk Defender", "CyberArk Sentry", "BeyondTrust Certified Professional", "CISSP", "CISM" ], "timestamp" : "2026-06-14T18:58:11.021", "fingerprint" : "6762f9df2e0d352d4ed0a80c06aa36a8ff277a296c08b335600245879abec76d", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/cyderes/7756d18e-1059-42ec-9103-89b4c350dad4/apply", "externalId" : "7756d18e-1059-42ec-9103-89b4c350dad4", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Chicago", "state" : "Illinois", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "41.8755616,-87.6244212" }, { "city" : "Tel Aviv", "country" : "Israel", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "32.0852997,34.7818064" }, { "country" : "United States", "continent" : "na", "workMode" : "onsite" } ], "locationText" : "Chicago, Illinois, United States; Tel Aviv, Israel; United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Director", "technicalSkills" : "CyberArk, BeyondTrust, Delinea, Sailpoint, Identity governance, Zero trust architecture, Cloud IAM, AWS, Azure, GCP, Endpoint security", "professionalSkills" : [ "Go-to-market strategy", "Solution architecture", "Risk management", "Account planning", "Partner relationships" ], "hardSkillsList" : [ "PAM technical authority", "PAM implementations", "PAM migrations", "PAM program development", "PAM program operationalization" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "PAM technical authority", "level" : "intermediate" }, { "name" : "PAM implementations", "level" : "intermediate" }, { "name" : "PAM migrations", "level" : "intermediate" }, { "name" : "PAM program development", "level" : "intermediate" }, { "name" : "PAM program operationalization", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Privileged Access Management, Consulting practice leadership, Revenue generation", "majorSkillsList" : [ "Privileged Access Management", "Consulting practice leadership", "Revenue generation" ], "coreResponsibilities" : "Execute global PAM practice vision, Execute service offerings, Execute go-to-market strategy, Oversee PAM practice P&L, Drive revenue growth, Drive utilization targets, Drive margin performance, Establish PAM methodologies, Establish delivery frameworks, Establish quality standards, Represent practice at industry events, Represent practice at conferences, Represent practice in client conversations, Lead talent lifecycle, Oversee workforce planning, Oversee recruiting, Oversee onboarding, Oversee performance management, Oversee career development, Foster inclusive culture, Provide executive oversight, Provide quality assurance, Guide solution architecture decisions, Serve as technical escalation point, Improve delivery methodologies, Improve tooling, Improve automation practices, Partner with sales leadership, Scoping presales, Design solutions, Develop proposals, Negotiate deals, Close deals, Develop executive client relationships, Lead account expansion, Lead account renewals, Contribute to pipeline development, Collaborate with marketing, Develop content, Develop case studies, Develop industry positioning", "teamCollaboration" : "Partner with sales leadership; Collaborate with marketing", "projectManagementSkills" : [ "Workforce planning", "Resource planning" ], "domainKnowledge" : "Identity security; Privileged access management; Identity governance; Zero trust architecture; Cloud IAM; Endpoint security; Hybrid environments; Cloud environments; OT/ICS environments", "domainList" : [ "identity-security", "privileged-access-management", "identity-governance", "zero-trust-architecture", "cloud-iam", "endpoint-security", "hybrid-environments", "cloud-environments", "ot-ics-environments" ], "domainSpecificKnowledge" : [ "Identity security", "Privileged access management", "Identity governance", "Zero trust architecture", "Cloud IAM", "Endpoint security", "Hybrid environments", "Cloud environments", "OT/ICS environments" ], "toolProficiency" : [ "CyberArk EPM", "CyberArk PAM Self-Hosted", "CyberArk Privilege Cloud", "BeyondTrust Password Safe" ], "communicationSkills" : "Executive conversations; Client-facing executive conversations; Executive-level client relationships; Industry positioning", "continuousLearning" : "Professional Development reimbursement; LinkedIn L&D Platform", "problemSolvingSkills" : "Technical escalation", "outcomesObjectives" : "Drive revenue growth; Achieve utilization targets; Achieve margin performance", "qualificationsBasic" : "10+ years identity security, 10+ years privileged access management, 5+ years leading consulting teams, 5+ years managing globally distributed staff, Experience managing practice P&L, Experience forecasting, Experience resource planning, Experience working with C-suite, Experience working with CISO partners, Experience partnering with enterprise sales teams", "qualificationsPreferred" : "CyberArk Defender/Sentry certification, BeyondTrust Certified Professional certification, CISSP certification, CISM certification, Consulting firm background", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Description We Help the World Be Everyday Ready™ Today's threatscape is relentless. So are we. At Cyderes, we build practical Identity & Access Management (IAM), Exposure Management, and risk programs, helping organizations stop active threats fast with Managed Detection & Response (MDR) that integrates with existing tools. Powering it all is Meridian, our entity fabric that connects identities, assets, and access into one trusted reality. Augmented by AI and driven by seasoned operators, our tireless global team arms organizations with the people, platforms, and perspectives they need to conquer whatever tomorrow throws their way. \uD83C\uDFC6 Great Place to Work® Certified™ | · United States · Canada · United Kingdom · India About the Role We are looking for an accomplished Managing Director to serve as the global head of our Privileged Access Management (PAM) consulting practice. You will set strategic direction, delivering complex enterprise engagements, and building a world-class global team. You have PAM technical authority with the business acumen to grow a global practice. This is a remote position based in the United States, with leadership accountability spanning delivery teams across the US, Canada, India, and the United Kingdom. You will report to the Vice President of Identity Services. ## What You'll Do Execute the global PAM practice vision, service offerings, and go-to-market strategy. Oversee the P&L for the PAM practice, driving revenue growth, utilization targets, and margin performance. Establish methodologies, delivery frameworks, and quality standards across all PAM engagements. Represent the practice at industry events, conferences, and in client-facing executive conversations. Lead the full talent lifecycle: workforce planning, recruiting, onboarding, performance management, and career development. Foster an inclusive culture that spans time zones and diverse working styles. Provide executive oversight and quality assurance across large-enterprise PAM implementations, migrations, and managed service engagements. Guide solution architecture decisions for multi PAM environments (CyberArk, BeyondTrust, Delinea, and others). Serve as the ultimate technical escalation point for delivery challenges, client issues, and risk management. Improve delivery methodologies, tooling, and automation practices. Partner with sales leadership throughout the full sales cycle — from presales scoping and solution design through proposal, negotiation, and close. Develop executive-level client relationships to lead account expansion and renewals. Contribute to pipeline development through experience, account planning, and partner relationships (e.g., CyberArk, BeyondTrust). Collaborate with marketing on content, case studies, and industry positioning that differentiates the practice. What You Bring 10+ years of hands-on experience in identity security and privileged access management, with a track record delivering large-enterprise, complex PAM programs. Deep implementation and architecture expertise with CyberArk, including EPM, PAM Self-Hosted, and Privilege Cloud. Additionally, I am familiar with BeyondTrust's Password Safe and Endpoint Privilege Management. Familiarity with Delinea, Sailpoint, or other PAM/IGA solutions. Demonstrated experience leading PAM migrations, platform consolidations, and greenfield deployments at enterprise scale. Experience with adjacent domains: identity governance, zero trust architecture, cloud IAM (AWS, Azure, GCP), and endpoint security. Experience developing and operationalizing PAM programs across hybrid, cloud, and OT/ICS environments. 5+ years leading consulting or professional services teams, including direct management of globally distributed staff (20+ team members across multiple regions and time zones). Ability to hire, develop, and retain top-tier consulting talent in a competitive market. Experience managing practice P&L, forecasting, and resource planning in a consulting or managed services context. Experience working with C-suite and CISO partners. Experience partnering with enterprise sales teams through complex, multi-partner sales cycles. Expertise growing a book of business through client relationship development and expansion. Industry certifications such as CyberArk Defender/Sentry, BeyondTrust Certified Professional, CISSP, CISM, or equivalent. Consulting firm background (Big 4, boutique security consultancy, or systems integrator). ## Additional Information #LI-Hybrid WHY CYDERES? Benefits that go beyond the basics, we support our people so they can do their best work. ✔ Medical Insurance - Employee + dependents covered ✔ Life Insurance - Protection for what matters most ✔ Retirement Match Program - We invest in your future ✔ Hybrid Work Model - 2–3 days in office ✔ Maternity & Paternity Leave - Time for the moments that matter ✔ Paid Time Off - PTO + sick & casual leave ✔ Bereavement & Volunteer Time - Give back to your community ✔ Professional Development - Reimbursement program ✔ LinkedIn L&D Platform - Thousands of courses at your fingertips ✔ Mobile Phone Reimbursement - Stay connected, on us Cyderes is an Equal Opportunity Employer (EOE). Qualified applicants are considered for employment without regard to race, religion, color, sex, age, disability, sexual orientation, genetic information, national origin, or veteran status. Note: This job posting is intended for direct applicants only. We request that outside recruiters do not contact us regarding this position. ", "summaryDescription" : "Managing Director, PAM at Cyderes. Skills: Privileged Access Management, Consulting practice leadership, Revenue generation. Execute global PAM practice vision. Execute service offerings", "postedDate" : "2026-06-10T16:34:39.169", "createdAt" : "2026-06-10T16:34:39.169", "lastUpdated" : "2026-06-14T18:58:11.021", "ingestTimestamp" : "2026-06-12T06:06:28.473", "mongoId" : "6a2a666874d8ee00a062c8e4", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 350000, "salaryAnnualMax" : 650000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "PAM technical authority", "PAM implementations", "PAM migrations", "PAM program development", "PAM program operationalization", "Leadership", "Privileged Access Management", "Consulting practice leadership", "Revenue generation", "Go-to-market strategy", "Solution architecture", "Risk management", "Account planning", "Partner relationships", "Workforce planning", "Resource planning", "Identity security", "Privileged access management", "Identity governance", "Zero trust architecture", "Cloud IAM", "Endpoint security", "Hybrid environments", "Cloud environments", "OT/ICS environments", "CyberArk Defender", "CyberArk Sentry", "BeyondTrust Certified Professional", "CISSP", "CISM", "CyberArk EPM", "CyberArk PAM Self-Hosted", "CyberArk Privilege Cloud", "BeyondTrust Password Safe" ], "skillCount" : 34, "jobCategory" : "other", "dataQualityScore" : 1.0, "_score" : 1030.5021, "daysOld" : 4, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Identity & Access Management" }, { "id" : "6a26203374d8ee00a01fbeed", "title" : "Cybersecurity Analyst - Privileged Access Management", "company" : "Roche", "industry" : "Healthcare", "salary" : { "min" : 105000.0, "max" : 165000.0, "currency" : "MYR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Analyst in Healthcare in Malaysia, adjusted for company size and industry." }, "location" : "Malaysia", "locations" : [ "Malaysia" ], "timestamp" : "2026-06-12T14:19:27.538", "fingerprint" : "a285eba562710d014e83c43d88a21c4a24dddc149cf172befc1820859fdbdc03", "source" : "workday", "language" : "en", "applyUrl" : "https://roche.wd3.myworkdayjobs.com/roche-ext/job/Petaling-Jaya/Cybersecurity-Analyst---Privileged-Access-Management_202604-110323", "externalId" : "202604-110323", "industryFunction" : { }, "locationPoint" : "4.2105,101.9758", "structuredLocations" : [ { "country" : "Malaysia", "continent" : "as", "workMode" : "onsite" } ], "locationText" : "Malaysia", "employmentType" : "FULL_TIME", "technicalSkills" : "HashiCorp Vault, PKI, PowerShell, Python, Ansible, AWS, Azure, GCP, Keyfactor, RedHat IDM, ACME, Docker, Kubernetes, SSL/TLS, Cryptography, CyberArk", "professionalSkills" : [ "Platform engineering", "Secrets management", "Certificate lifecycle management", "DevSecOps principles" ], "hardSkillsList" : [ "Vault configuration", "Vault administration", "Secrets engine configuration", "Auth method configuration", "Policy configuration", "Certificate issuance", "Certificate renewal", "CI/CD integration", "IaC toolchain integration", "Mutual TLS implementation", "Advanced troubleshooting", "Architectural direction" ], "softSkillsList" : [ "Clear communication", "Confident communication", "Continuous improvement mindset", "Comfort with ambiguity", "Comfort with change" ], "hardSkills" : [ { "name" : "Vault configuration", "level" : "intermediate" }, { "name" : "Vault administration", "level" : "intermediate" }, { "name" : "Secrets engine configuration", "level" : "intermediate" }, { "name" : "Auth method configuration", "level" : "intermediate" }, { "name" : "Policy configuration", "level" : "intermediate" }, { "name" : "Certificate issuance", "level" : "intermediate" }, { "name" : "Certificate renewal", "level" : "intermediate" }, { "name" : "CI/CD integration", "level" : "intermediate" }, { "name" : "IaC toolchain integration", "level" : "intermediate" }, { "name" : "Mutual TLS implementation", "level" : "intermediate" }, { "name" : "Advanced troubleshooting", "level" : "intermediate" }, { "name" : "Architectural direction", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Clear communication" }, { "name" : "Confident communication" }, { "name" : "Continuous improvement mindset" }, { "name" : "Comfort with ambiguity" }, { "name" : "Comfort with change" } ], "majorSkills" : "Privileged Access Management, HashiCorp Vault, PKI", "majorSkillsList" : [ "Privileged Access Management", "HashiCorp Vault", "PKI" ], "coreResponsibilities" : "Drive HashiCorp Vault platform delivery, Upgrade privileged access controls, Automate privileged access controls, Design automation scripts, Deploy automation scripts, Streamline Vault operations, Reduce manual effort, Build self-service portals, Build APIs, Embed DevSecOps principles, Integrate secrets management, Integrate IaC toolchains, Monitor PKI infrastructure, Maintain PKI infrastructure, Evolve PKI infrastructure, Manage certificate lifecycle, Implement certificate automation standards, Integrate PKI workflows, Secure containerised environments, Implement mutual TLS, Act as Tier 3 escalation point, Provide advanced troubleshooting, Provide guidance, Provide architectural direction", "teamCollaboration" : "Partner with product owners; Partner with application teams; Global security team", "projectManagementSkills" : [ "ITIL principles" ], "domainKnowledge" : "Enterprise security; Privileged Access Management; Secrets management; PKI infrastructure; Certificate lifecycle management; Cloud platforms; Containerised environments; Network fundamentals; Protocol fundamentals; SSL/TLS; Cryptography; Key exchanges; Cipher suites; Trust validation; Regulated environments", "domainList" : [ "enterprise-security", "privileged-access-management", "secrets-management", "pki-infrastructure", "certificate-lifecycle-management", "cloud-platforms", "containerised-environments", "network-fundamentals", "protocol-fundamentals", "ssl-tls", "cryptography", "key-exchanges", "cipher-suites", "trust-validation", "regulated-environments" ], "domainSpecificKnowledge" : [ "Enterprise security", "Privileged Access Management", "Secrets management", "PKI infrastructure", "Certificate lifecycle management", "Cloud platforms", "Containerised environments", "Network fundamentals", "Protocol fundamentals", "SSL/TLS", "Cryptography", "Key exchanges", "Cipher suites", "Trust validation", "Regulated environments" ], "toolProficiency" : [ "HashiCorp Vault", "Keyfactor", "RedHat IDM", "Terraform", "Jenkins", "GitLab CI/CD", "GitHub Actions", "CyberArk" ], "communicationSkills" : "Explain complex security concepts", "problemSolvingSkills" : "Advanced troubleshooting", "qualificationsBasic" : "3–5 years of hands-on experience in cybersecurity or identity and access management, Bachelor's Degree in Computer Science, Engineering, or related discipline or equivalent experience", "qualificationsPreferred" : "Vault Agent or Kubernetes sidecar injection experience is a plus, Familiarity with ACME-based automation for internal certificate issuance is advantageous, Working knowledge of CyberArk alongside HashiCorp Vault is an advantage, Familiarity with ITIL principles is a plus", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters. ### ### The Position In a world where every application, pipeline, and cloud workload depends on secure access, the people who build and manage that trust layer are critical. At Roche, our Enterprise Privileged Access Management team is responsible for exactly that — ensuring the right systems and people have the right access, at the right time, with the right controls in place. If you enjoy working on platforms that matter, thrive in a complex global environment, and want to deepen your expertise in one of the most in-demand areas of enterprise security — this is the role for you. # Your Opportunity As a Cybersecurity Analyst specialising in PAM, HashiCorp Vault, and PKI, you will be a core member of a global security team working at the intersection of platform engineering and cybersecurity. You will own meaningful workstreams, partner with product owners and application teams, and serve as the Tier 3 expert when complex PAM and Vault issues need to be resolved. This is not a monitoring-and-ticket role — you will be expected to design, build, and continuously improve. In this role, you will: * Drive HashiCorp Vault platform delivery in partnership with the product owner — leading initiatives to upgrade and automate privileged access controls across the enterprise * Design and deploy automation scripts and integrations (PowerShell, Python, Ansible) to streamline Vault operations and reduce manual effort * Build self-service portals and APIs that make secret usage effortless for application teams, embedding DevSecOps principles into access processes * Integrate secrets management into CI/CD pipelines and IaC toolchains across major cloud platforms (AWS, Azure, GCP) * Monitor, maintain, and evolve PKI infrastructure including certificate lifecycle management via platforms such as Keyfactor and RedHat IDM * Implement certificate automation standards such as ACME for internal issuance and integrate PKI workflows into deployment pipelines * Secure containerised environments (Docker, Kubernetes) through mutual TLS implementation * Act as the Tier 3 escalation point for complex PAM and HashiCorp Vault issues — providing advanced troubleshooting, guidance, and architectural direction # Who you are You hold a Bachelor's Degree in Computer Science, Engineering, or a related discipline — or bring equivalent experience that demonstrates the same depth of knowledge. You have 3–5 years of hands-on experience in cybersecurity or identity and access management, ideally within a large, global, or regulated organisation. You work well independently, take ownership of your deliverables, and have a track record of not just maintaining security systems — but actively improving them. Your technical background includes: * HashiCorp Vault — you have configured and administered Vault in a team environment, with practical experience across secrets engines (KV, PKI, Database, cloud), auth methods (AppRole, Kubernetes, LDAP, JWT/OIDC), and policy management; experience with Vault Agent or Kubernetes sidecar injection is a plus * PKI and certificate lifecycle management — you understand CA hierarchy, certificate issuance and renewal, and have worked with platforms such as Keyfactor, RedHat IDM, or Microsoft ADCS; familiarity with ACME-based automation for internal certificate issuance is advantageous * Secrets management automation — you have written scripts and integrations using Python, PowerShell, or Ansible to streamline security operations and reduce manual effort * CI/CD and Infrastructure-as-Code — you are comfortable working within DevOps toolchains (Terraform, Jenkins, GitLab CI/CD, or GitHub Actions) and have experience integrating secrets management or PKI workflows into deployment pipelines across AWS, Azure, or GCP * Network and protocol fundamentals — you have a solid working knowledge of SSL/TLS, cryptography, key exchanges, cipher suites, and trust validation, and can apply this when troubleshooting complex security workflows * CyberArk — working knowledge of CyberArk alongside HashiCorp Vault is an advantage, as the team operates across both platforms Beyond the technical skills, you bring: * A clear, confident communication style — you can explain a complex security concept to a developer, a cloud engineer, and a business stakeholder in three different ways without losing accuracy * A continuous improvement mindset — you proactively spot gaps, inefficiencies, and risks rather than waiting to be asked * Comfort with ambiguity and change in a large, matrixed organisation * Familiarity with ITIL principles (Incident, Problem, Change, Request Management) is a plus, particularly for those with experience in validated or regulated environments **** **** ### Who we are A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact. Let’s build a healthier future, together. **Roche is an Equal Opportunity Employer.**", "summaryDescription" : "Cybersecurity Analyst - Privileged Access Management at Roche. Skills: Privileged Access Management, HashiCorp Vault, PKI. Drive HashiCorp Vault platform delivery. Upgrade privileged access controls", "postedDate" : "2026-06-09T13:10:17.021", "createdAt" : "2026-06-11T13:10:16.530", "lastUpdated" : "2026-06-12T14:19:27.538", "ingestTimestamp" : "2026-06-11T13:10:16.530", "mongoId" : "6a26203374d8ee00a01fbeed", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://roche.wd3.myworkdayjobs.com/roche-ext/job/Petaling-Jaya/Cybersecurity-Analyst---Privileged-Access-Management_202604-110323", "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Vault configuration", "Vault administration", "Secrets engine configuration", "Auth method configuration", "Policy configuration", "Certificate issuance", "Certificate renewal", "CI/CD integration", "IaC toolchain integration", "Mutual TLS implementation", "Advanced troubleshooting", "Architectural direction", "Clear communication", "Confident communication", "Continuous improvement mindset", "Comfort with ambiguity", "Comfort with change", "Privileged Access Management", "HashiCorp Vault", "PKI", "Platform engineering", "Secrets management", "Certificate lifecycle management", "DevSecOps principles", "ITIL principles", "Enterprise security", "PKI infrastructure", "Cloud platforms", "Containerised environments", "Network fundamentals", "Protocol fundamentals", "SSL/TLS", "Cryptography", "Key exchanges", "Cipher suites", "Trust validation", "Regulated environments", "Keyfactor", "RedHat IDM", "Terraform", "Jenkins", "GitLab CI/CD", "GitHub Actions", "CyberArk" ], "skillCount" : 44, "jobCategory" : "engineering", "seniorityLevel" : "mid", "dataQualityScore" : 0.8888889, "_score" : 950.8199, "daysOld" : 3, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Healthcare" }, { "id" : "6a3083c8f292fd229c071d92", "title" : "Cybersecurity Consultant (Access & Identity)", "company" : "Ensign", "industry" : "Consulting", "salary" : { "min" : 95000.0, "max" : 140000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Consultant in Singapore, adjusted for industry and company size." }, "location" : "Singapore", "locations" : [ "Singapore" ], "timestamp" : "2026-06-16T12:39:40.303", "fingerprint" : "8d4eef66fba7598ab4792d2e02c8d2e56a9e859a519806acba41af30899cc40a", "source" : "workday", "language" : "en", "applyUrl" : "https://ensigninfosecurity.wd3.myworkdayjobs.com/Ensign_Careers/job/Singapore/Cybersecurity-Consultant--Access---Identity-_JOBREQ-0003511", "externalId" : "JOBREQ-0003511", "industryFunction" : { }, "locationPoint" : "1.3521,103.8198", "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "majorSkills" : "Access & Identity, PAM, PKI", "majorSkillsList" : [ "Access & Identity", "PAM", "PKI" ], "coreResponsibilities" : "Carry out pre-sales engagement, Deploy AI related projects, Provide consultation as SME, Create technical documentation, Provide post-sales support, Carry out technical enablement", "domainKnowledge" : "Access & Identity; Privileged Access Management; Public Key Infrastructure", "domainList" : [ "access-identity", "privileged-access-management", "public-key-infrastructure" ], "domainSpecificKnowledge" : [ "Access & Identity", "Privileged Access Management", "Public Key Infrastructure" ], "communicationSkills" : "Written skills", "documentationSkills" : "Technical documentation", "qualificationsBasic" : "3+ years IT security experience", "qualificationsPreferred" : "Knowledge in PAM and PKI, Information security technologies knowledge", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Ensign is hiring ! **Job Description** The incumbent is responsible for delivering information security projects that are related to Access & Identity (AI), specifically Privileged Access Management (PAM) & Public Key Infrastructure (PKI) related technologies, including the execution of all project implementation activities. **Responsibilities** * Carry out pre-sales engagement for projects relating to AI * Deploy AI related projects and provide consultation with regard to the deployment as a Subject Matter Expert (SME) * Create technical documentation for the AI deployment * Provide post-sales support services for corrective and preventive maintenance * Carry out technical enablement **Requirements** * Good Diploma or Bachelor’s Degree in Information Technology * Knowledge in information security technologies such as PAM and PKI is preferred * At least 3years of IT security experience * Good communication and written skills * Positive working attitude * Passionate in information security", "summaryDescription" : "Cybersecurity Consultant (Access & Identity) at Ensign. Skills: Access & Identity, PAM, PKI. Carry out pre-sales engagement. Deploy AI related projects", "postedDate" : "2026-06-13T03:54:46.117", "createdAt" : "2026-06-16T03:54:46.113", "lastUpdated" : "2026-06-16T12:39:40.303", "ingestTimestamp" : "2026-06-16T03:54:46.113", "mongoId" : "6a3083c8f292fd229c071d92", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://ensigninfosecurity.wd3.myworkdayjobs.com/Ensign_Careers/job/Singapore/Cybersecurity-Consultant--Access---Identity-_JOBREQ-0003511", "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Access & Identity", "PAM", "PKI", "Privileged Access Management", "Public Key Infrastructure" ], "skillCount" : 5, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "mid", "dataQualityScore" : 1.0, "_score" : 925.0426, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.95 }, { "id" : "6a3055d5f292fd229cf2213e", "title" : "Senior Identity and Access Management (IAM) Engineer", "company" : "Zelis", "salary" : { "min" : 2200000.0, "max" : 3500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for Senior Identity and Access Management (IAM) Engineer in India, adjusted for seniority, industry, and company size." }, "location" : "India", "locations" : [ "India" ], "timestamp" : "2026-06-16T15:07:36.926", "fingerprint" : "7db21c1bc465b3bbfc86fbc9cbf78ff15bd94a654283e513cfdc5f1ec1ecc6c4", "source" : "workday", "language" : "en", "applyUrl" : "https://zelis.wd1.myworkdayjobs.com/ZelisCareers/job/India-Hyderabad/Senior-Identity-and-Access-Management--IAM--Engineer_JR110900", "externalId" : "JR110900", "industryFunction" : { }, "locationPoint" : "20.5937,78.9629", "structuredLocations" : [ { "country" : "India", "continent" : "as", "workMode" : "onsite" } ], "locationText" : "India", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "**About Us** Zelis is modernizing the healthcare financial experience in the United States (U.S.) across payers, providers, and healthcare consumers. We serve more than 750 payers, including the top five national health plans, regional health plans, TPAs and millions of healthcare providers and consumers across our platform of solutions. Zelis sees across the system to identify, optimize, and solve problems holistically with technology built by healthcare experts – driving real, measurable results for clients. At Zelis, AI is woven into the fabric of how we work. Every associate is expected - and empowered - to partner with AI to challenge the status quo, accelerate innovation, and amplify their impact. This is a place for builders with a growth mindset who act with agility, embrace change, and use modern technology to shape smarter solutions, exceptional experiences, and the future of our industry for our clients, customers, and our culture. **Why We Do What We Do** In the U.S., consumers, payers, and providers face significant challenges throughout the healthcare financial journey. Zelis helps streamline the process by offering solutions that improve transparency, efficiency, and communication among all parties involved. By addressing the obstacles that patients face in accessing care, navigating the intricacies of insurance claims, and the logistical challenges healthcare providers encounter with processing payments, Zelis aims to create a more seamless and effective healthcare financial system. Zelis India plays a crucial role in this mission by supporting various initiatives that enhance the healthcare financial experience. The local team contributes to the development and implementation of innovative solutions, ensuring that technology and processes are optimized for efficiency and effectiveness. Beyond operational expertise, Zelis India cultivates a collaborative work culture, leadership development, and global exposure, creating a dynamic environment for professional growth. With hybrid work flexibility, comprehensive healthcare benefits, financial wellness programs, and cultural celebrations, we foster a holistic workplace experience. Additionally, the team plays a vital role in maintaining high standards of service delivery and contributes to Zelis’ award-winning culture. **Position Overview** We are seeking a highly skilled and motivated Senior Identity and Access Management (IAM) Engineer to join our Information Security team. The ideal candidate will primarily be responsible for managing and optimizing our Privileged Access Management (PAM) solution to ensure the security and integrity of our organization’s privileged accounts. This role will also involve a secondary focus on IAM and Identity Governance and Administration (IGA). Key responsibilities include the daily administration and continuous improvement of Zelis’s PAM environment, as well as collaboration with the IAM team for identity management through the Zelis IGA tool. Additionally, this role requires collaboration with the broader Security Engineering team, which oversees all security platforms across Zelis. Key Responsibilities * CyberArk Administration: Manage the deployment, configuration, and maintenance of CyberArk Privilege Cloud, including the Central Policy Manager (CPM), Password Vault, and Privileged Session Manager (PSM). * CyberArk Engineering: Build and maintain integrations between CyberArk and third-party applications to enable remote access (RDP, SSH, etc.) and credential rotation * Identity and Access Management: Administer accounts, groups and services related to identity and access in Active Directory, Microsoft Azure/Entra, and Cisco Duo. * Identity Governance: Assist with configuration and management of SailPoint for mover/joiner/leaver scenarios and governance of all Zelis applications and associates * Policy Implementation: Implement and enforce policies and procedures for IAM to align with corporate guidelines, industry best practices and regulatory requirements. * Documentation: Maintain documentation for IAM configurations and procedures. * Training and Support: Provide training and support to other Zelis IT staff and business units on best practices for IAM and PAM. * Continuous Improvement: Stay up to date with the latest security trends and product updates. Identify opportunities for process improvements and implement enhancements. Required Qualifications * Education: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field. * Experience: 7+ years of experience with CyberArk Privilege Cloud, SailPoint, Microsoft Azure/Entra, Active Directory, or similar IAM/PAM tools * Certifications: CISSP, CISM or other relevant industry certifications are a plus. Technical Skills: * In-depth knowledge of CyberArk solutions and components. * In-depth knowledge of Active Directory * Experience with privileged access management, identity management, identity governance and security controls. * Experience with Single Sign On (SSO) and related protocols. * Familiarity with scripting languages (e.g., PowerShell, Python), REST APIs and API based authentication. Desired Skills * Analytical Skills: Strong problem-solving abilities and attention to detail. * Communication Skills: Excellent verbal and written communication skills, with the ability to convey technical concepts to non-technical stakeholders. * Project Management: Ability to manage multiple tasks and projects simultaneously, prioritize effectively, and meet deadlines. **Commitment to Diversity, Equity, Inclusion, and Belonging** At Zelis, we champion diversity, equity, inclusion, and belonging in all aspects of our operations. We embrace the power of diversity and create an environment where people can bring their authentic and best selves to work. We know that a sense of belonging is key not only to your success at Zelis, but also to your ability to bring your best each day. **Equal Employment Opportunity** Zelis is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. **Accessibility Support** We are dedicated to ensuring our application process is accessible to all candidates. If you are a qualified individual with a disability and require reasonable accommodation with any part of the application and/or interview process, please email [_talentacquisition @zelis.com_](mailto:talentacquisition@zelis.com?subject=Accessibility%20Support%20Request).", "summaryDescription" : "Senior Identity and Access Management (IAM) Engineer at Zelis", "postedDate" : "2026-06-16T03:47:22.552", "createdAt" : "2026-06-16T03:47:22.548", "lastUpdated" : "2026-06-16T15:07:36.926", "ingestTimestamp" : "2026-06-16T03:47:22.548", "mongoId" : "6a3055d5f292fd229cf2213e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://zelis.wd1.myworkdayjobs.com/ZelisCareers/job/India-Hyderabad/Senior-Identity-and-Access-Management--IAM--Engineer_JR110900", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "senior", "dataQualityScore" : 0.8888889, "_score" : 859.3535, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Healthcare", "llmIndustryConfidence" : 0.95 }, { "id" : "694ae71c70f0b99d589b58ff", "title" : "Development & Access Management Engineer II-V", "company" : "TxDOT", "industry" : "Government", "salary" : { "min" : 69572.0, "max" : 123000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "UST-Texas-Austin-North Austin Area Engr Office", "locations" : [ "UST-Texas-Austin-North Austin Area Engr Office", "Yearly", "Exempt,
North Austin Area Engr Office (14NAUSTNAE)
1001 EAST PARMER LANE, STE B
Austin, 78753

, North Austin Area Engr Office" ], "timestamp" : "2026-06-15T22:29:14.479", "fingerprint" : "fa892a3e1374af0695e574ccae0b03ac1f0798d751c9b6ad06b3c7a45b1e6c88", "source" : "taleo", "language" : "en", "applyUrl" : "https://fa009.taleo.net/careersection/ex/jobdetail.ftl?job=42519", "externalId" : "42519", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "professionalSkills" : [ "Permit application review", "Traffic impact analysis", "Construction phasing evaluation", "Proposed improvements evaluation" ], "hardSkillsList" : [ "Access management standards", "Permitting processes" ], "hardSkills" : [ { "name" : "Access management standards", "level" : "intermediate" }, { "name" : "Permitting processes", "level" : "intermediate" } ], "majorSkills" : "Development permitting, Access management, Transportation engineering", "majorSkillsList" : [ "Development permitting", "Access management", "Transportation engineering" ], "coreResponsibilities" : "Review development and access permit applications, Coordinate development and access permit applications, Assemble complete permit packages, Evaluate traffic control plans, Evaluate traffic impact analyses, Evaluate construction phasing, Evaluate proposed improvements, Deliver clear review comments, Deliver accurate review comments, Manage multiple permit applications, Maintain up-to-date tracking, Ensure submittals meet requirements, Ensure submittals include documentation, Resolve comments with stakeholders, Clarify requirements with stakeholders, Ensure consistent policy application, Provide technical guidance on permitting, Provide technical guidance on access management", "teamCollaboration" : "Work with applicants; Work with consultants; Work with TxDOT divisions; Internal stakeholders; External stakeholders", "domainKnowledge" : "State highway system; TxDOT access management", "domainList" : [ "state-highway-system", "txdot-access-management" ], "domainSpecificKnowledge" : [ "State highway system", "TxDOT access management" ], "communicationSkills" : "Review comments", "qualificationsBasic" : "Transportation Engineer II, III, IV or V experience, TxDOT access management requirements knowledge, Necessary forms and documentation submission", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "TxDOT's Austin District North Travis Area Office is looking for a Development & Access Management Engineer (Transportation Engineer) II, III, IV or V located in Austin, Texas . The Development & Access Permitting Engineer assists with the review and coordination of development and access permit applications impacting the state highway system in Austin, Texas. This role assembles complete permit packages, evaluates traffic control plans, traffic impact analyses, construction phasing, and proposed improvements, and delivers clear, accurate review comments. The Engineer manages multiple permit applications at once, maintains up‑to‑date tracking, and ensures all submittals meet TxDOT access management requirements and include the necessary forms and documentation. The position works closely with applicants, consultants, and TxDOT divisions—such as Hydraulics, Traffic, and Environmental—to resolve comments, clarify requirements, and ensure consistent application of policies. The Engineer also provides technical guidance on TxDOT permitting processes and access management standards to both internal and external stakeholders. If you want to build an exciting career, apply for this position! This position is for ONE Development Engineer (Transportation Engineer) II, III, IV or V. The Texas Department of Transportation reserves the sole right in determining the level of position based on the applicant's work experience, education, skill level, and all other appropriate factors, and based on business needs. Salary Plan/Grade: Development & Access Management Engineer (Transportation Engineer) II: B25 ($69,572.00 - $95,000.00/yearly) Development & Access Management Engineer (Transportation Engineer) III: B26 ($76,530.00 - $101,000.00/yearly) Development & Access Management Engineer (Transportation Engineer) IV: B27 ($84,182.00 - $115,000.00/yearly) Development & Access Management Engineer (Transportation Engineer) V: B28 ($92,600.00 - $123,000.00/yearly) 69,572.00 123,000.00", "summaryDescription" : "Development & Access Management Engineer II-V at TxDOT. Skills: Development permitting, Access management, Transportation engineering. Review development and access permit applications. Coordinate development and access permit applications", "createdAt" : "2026-06-14T21:15:23.922", "lastUpdated" : "2026-06-15T22:29:14.479", "ingestTimestamp" : "2026-06-14T21:15:23.922", "mongoId" : "694ae71c70f0b99d589b58ff", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 69572, "salaryAnnualMax" : 123000, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ "Access management standards", "Permitting processes", "Development permitting", "Access management", "Transportation engineering", "Permit application review", "Traffic impact analysis", "Construction phasing evaluation", "Proposed improvements evaluation", "State highway system", "TxDOT access management" ], "skillCount" : 11, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 855.55835, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cb20c74d8ee00a09df501", "title" : "Identity & PAM Security Engineer", "industry" : "IT", "salary" : { "min" : 75000.0, "max" : 105000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Identity & PAM Security Engineer in the Netherlands, adjusted for senior experience and the technology industry." }, "location" : "Netherlands", "locations" : [ "Netherlands" ], "certifications" : [ "SC-300", "AZ-500", "CISSP", "CCSP" ], "timestamp" : "2026-06-16T00:40:26.278", "fingerprint" : "3c210ad5296ef3eecafad1244995f599846d3c32d2d605f2e2f24c9db8cb41fd", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/jobgether/9dfcca56-e5f7-4830-893c-923e0a338bcb/apply", "externalId" : "9dfcca56-e5f7-4830-893c-923e0a338bcb", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Netherlands", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "Netherlands", "employmentType" : "FULL_TIME", "experienceMinYears" : 4, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Microsoft Entra ID, Google Cloud IAM, PowerShell, Python, APIs", "professionalSkills" : [ "Security engineering", "Infrastructure security", "Cloud security", "Identity management", "Access management", "Stakeholder management" ], "hardSkillsList" : [ "Privileged access controls", "Just-in-time access", "Role assignments", "Service account management", "Secret management", "Credential rotation", "Conditional access policies", "MFA enforcement", "Risk-based security", "Identity workflows", "Access provisioning", "Log analysis" ], "softSkillsList" : [ "Analytical skills", "Problem-solving skills", "Security-first mindset", "Communication skills", "Documentation skills", "Stakeholder management skills", "Autonomy" ], "hardSkills" : [ { "name" : "Privileged access controls", "level" : "intermediate" }, { "name" : "Just-in-time access", "level" : "intermediate" }, { "name" : "Role assignments", "level" : "intermediate" }, { "name" : "Service account management", "level" : "intermediate" }, { "name" : "Secret management", "level" : "intermediate" }, { "name" : "Credential rotation", "level" : "intermediate" }, { "name" : "Conditional access policies", "level" : "intermediate" }, { "name" : "MFA enforcement", "level" : "intermediate" }, { "name" : "Risk-based security", "level" : "intermediate" }, { "name" : "Identity workflows", "level" : "intermediate" }, { "name" : "Access provisioning", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Analytical skills" }, { "name" : "Problem-solving skills" }, { "name" : "Security-first mindset" }, { "name" : "Communication skills" }, { "name" : "Documentation skills" }, { "name" : "Stakeholder management skills" }, { "name" : "Autonomy" } ], "teamCollaboration" : "Security teams; Infrastructure teams; Engineering teams; Globally distributed team", "domainKnowledge" : "Identity security principles; Least privilege; RBAC; MFA; Conditional access; Privileged access management; Identity governance; PAM strategies; Cloud identity; Enterprise security architectures", "domainList" : [ "identity-security-principles", "least-privilege", "rbac", "mfa", "conditional-access", "privileged-access-management", "identity-governance", "pam-strategies", "cloud-identity", "enterprise-security-architectures" ], "domainSpecificKnowledge" : [ "Identity security principles", "Least privilege", "RBAC", "MFA", "Conditional access", "Privileged access management", "Identity governance", "PAM strategies", "Cloud identity", "Enterprise security architectures" ], "toolProficiency" : [ "HashiCorp Vault", "Azure Key Vault", "Google Secret Manager", "SIEM tools" ], "communicationSkills" : "Communication; Documentation; Stakeholder management", "documentationSkills" : "Documentation", "continuousLearning" : "Continuous improvement", "problemSolvingSkills" : "Analytical skills; Problem-solving skills", "qualificationsBasic" : "4+ years IAM experience, 4+ years Cloud Security experience, 4+ years Infrastructure Security experience, 4+ years Security Engineering experience, Hands-on identity platforms experience, Understanding of identity security principles, Experience managing service accounts, Experience managing machine identities, Experience managing secrets management, Experience managing credential rotation, Proven ability to design PAM processes, Proven ability to operate PAM processes, Proven ability to design identity governance, Proven ability to operate identity governance, Experience building automation", "qualificationsPreferred" : "Experience with SIEM tools a plus, Experience with log analysis platforms a plus, Experience with security monitoring systems a plus, Familiarity with HashiCorp Vault advantageous, Familiarity with Azure Key Vault advantageous, Familiarity with Google Secret Manager advantageous, SC-300 certification a plus, AZ-500 certification a plus, CISSP certification a plus, CCSP certification a plus", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Accountabilities Design, implement, and manage privileged access controls including Privileged Identity Management (PIM), just-in-time (JIT) access, approval workflows, and role assignments. Define and maintain secure administrative access processes for high-risk roles, privileged sessions, and emergency break-glass accounts. Lead access review and certification processes, ensuring remediation actions are completed and access remains aligned with least-privilege principles. Manage the lifecycle of service accounts, machine identities, secrets, API keys, and credentials, including rotation, monitoring, and decommissioning. Configure and maintain conditional access policies, MFA enforcement, and identity risk-based security controls. Design and implement automation for identity workflows, including approvals, access provisioning, reporting, and remediation processes. Collaborate with Security, Infrastructure, and Engineering teams to enhance identity security across cloud and enterprise environments. Support security audits, compliance requirements, incident response, and identity-related investigations. Contribute to the evolution of identity governance, PAM strategies, and security operations best practices. Improve identity security tooling, documentation, and operational processes to increase scalability and resilience. Requirements 4+ years of experience in Identity & Access Management (IAM), Cloud Security, Infrastructure Security, or Security Engineering roles. Hands-on experience with identity platforms such as Microsoft Entra ID and Google Cloud IAM. Strong understanding of identity security principles including least privilege, RBAC, MFA, conditional access, and privileged access management. Experience managing service accounts, machine identities, secrets management, and credential rotation at scale. Proven ability to design or operate PAM or identity governance processes in complex environments. Experience building automation using tools such as PowerShell, Python, APIs, or workflow orchestration platforms. Strong analytical and problem-solving skills with a security-first mindset. Experience working with SIEM tools, log analysis platforms, or security monitoring systems is a plus. Familiarity with tools such as HashiCorp Vault, Azure Key Vault, or Google Secret Manager is advantageous. Relevant certifications such as SC-300, AZ-500, CISSP, or CCSP are considered a strong plus. Excellent communication, documentation, and stakeholder management skills. Ability to work effectively in distributed, fast-paced, and collaborative engineering environments. Benefits Competitive salary with performance-based quarterly bonuses. Remote-first working model with flexibility across working hours. 28 days of paid annual leave. Core working hours with flexibility outside of defined collaboration windows. Top-tier equipment provided to support your work. Referral bonuses and performance-based flash bonuses. Annual company retreats with international team collaboration opportunities. Opportunity to work in a highly technical, security-focused environment. Exposure to modern cloud identity, PAM, and enterprise security architectures. Strong emphasis on autonomy, ownership, and continuous improvement. Collaborative and globally distributed team culture. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Identity & PAM Security Engineer", "postedDate" : "2026-06-11T04:42:39.569", "createdAt" : "2026-06-11T04:42:39.569", "lastUpdated" : "2026-06-16T00:40:26.278", "ingestTimestamp" : "2026-06-14T21:16:25.039", "mongoId" : "6a2cb20c74d8ee00a09df501", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Privileged access controls", "Just-in-time access", "Role assignments", "Service account management", "Secret management", "Credential rotation", "Conditional access policies", "MFA enforcement", "Risk-based security", "Identity workflows", "Access provisioning", "Log analysis", "Analytical skills", "Problem-solving skills", "Security-first mindset", "Communication skills", "Documentation skills", "Stakeholder management skills", "Autonomy", "Security engineering", "Infrastructure security", "Cloud security", "Identity management", "Access management", "Stakeholder management", "Identity security principles", "Least privilege", "RBAC", "MFA", "Conditional access", "Privileged access management", "Identity governance", "PAM strategies", "Cloud identity", "Enterprise security architectures", "SC-300", "AZ-500", "CISSP", "CCSP", "HashiCorp Vault", "Azure Key Vault", "Google Secret Manager", "SIEM tools" ], "skillCount" : 43, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 824.4636, "daysOld" : 4, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c745374d8ee00a093488d", "title" : "Senior Security Engineer, Identity & Access Management", "company" : "Valon", "industry" : "Technical Infrastructure", "salary" : { "min" : 180000.0, "max" : 230000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "Remote", "locations" : [ "Remote" ], "certifications" : [ "CISSP", "CISM", "CCSK", "CCSP" ], "timestamp" : "2026-06-15T09:06:56.113", "fingerprint" : "3dba7baa5e9af88243cc49f85bf68cb4a1fddbe36af536ce42b4c6cbf6734c2d", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/valon/7e06aa3c-8cdc-4b3d-ab0b-d82c8c2e4911/application", "externalId" : "7e06aa3c-8cdc-4b3d-ab0b-d82c8c2e4911", "industryFunction" : { }, "structuredLocations" : [ { "workMode" : "remote" } ], "locationText" : "", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SAML 2.0, OIDC/OAuth 2.0, SCIM, LDAP, GCP, RBAC, ABAC", "professionalSkills" : [ "Identity automation", "Access management", "Least-privilege enforcement", "Conditional access", "Directory synchronization", "Privileged access management", "Data security risks" ], "hardSkillsList" : [ "Enterprise identity solutions", "Cloud IAM", "Workload identity federation", "Policy-as-code" ], "hardSkills" : [ { "name" : "Enterprise identity solutions", "level" : "intermediate" }, { "name" : "Cloud IAM", "level" : "intermediate" }, { "name" : "Workload identity federation", "level" : "intermediate" }, { "name" : "Policy-as-code", "level" : "intermediate" } ], "majorSkills" : "Enterprise identity stack, Customer-facing authentication, Authorization capabilities", "majorSkillsList" : [ "Enterprise identity stack", "Customer-facing authentication", "Authorization capabilities" ], "coreResponsibilities" : "Design workforce identity systems, Support workforce identity lifecycle, Automate identity systems, Enforce least-privilege, Support secure identity design, Manage IdP, Evolve IdP, Integrate SSO, Define RBAC policies, Enforce RBAC policies, Support PAM, Design AI-assisted workflows, Automate IAM operations, Evaluate AI risks, Identify data security risks, Drive mitigation, Support operational duties, Support on-call duties, Manage vulnerabilities, Ensure regulatory compliance, Develop policies, Respond to incidents, Conduct security reviews", "teamCollaboration" : "Cross-functional teams; Product and Engineering; IT, Engineering, Security; Compliance, Legal", "domainKnowledge" : "Regulated finance; Mortgage servicing; AI-powered systems; AI pipelines; SOC 2; CCPA; NYDFS; FTC", "domainList" : [ "regulated-finance", "mortgage-servicing", "ai-powered-systems", "ai-pipelines", "soc-2", "ccpa", "nydfs", "ftc" ], "domainSpecificKnowledge" : [ "Regulated finance", "Mortgage servicing", "AI-powered systems", "AI pipelines", "SOC 2", "CCPA", "NYDFS", "FTC" ], "toolProficiency" : [ "Okta", "Azure AD", "Entra ID", "Google Workspace" ], "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "On-call duties", "qualificationsBasic" : "5+ years security engineering, Bachelor's degree, Hands-on experience enterprise IdP, Deep understanding authentication authorization, SAML OIDC/OAuth 2.0 RBAC, API access controls", "qualificationsPreferred" : "GCP experience preferred, Experience working high-growth environments", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "ABOUT THE COMPANY Valon is building the AI-native operating system for regulated finance, starting with mortgage servicing. We're a Series C company backed by a16z, transforming industries that others have written off as too complex to innovate. Rather than build on top of broken legacy systems, we took a different approach: we built and operate our own mortgage servicing business managing $110+ billion in loans. This wasn't the end goal, it was how we deeply understood the complexity needed to build software that actually works in regulated industries. The results speak for themselves. We've transformed mortgage servicing from a 0% margin business into 60%+ margins while dramatically improving customer experience. Major enterprise contracts are now deploying across the industry. ValonOS is our unified platform that makes every process structured and programmable and it is perfectly positioned for the AI era. When everything flows through one system with rich data, AI agents don't just automate tasks, they continuously improve entire operations. Mortgage servicing is just the beginning of our vision to transform regulated industries and beyond. SECURITY AT VALON Our customers entrust us with some of their most sensitive and personal financial information, and it is the ultimate mission of Valon’s Security team to ensure we have sound programs, processes, and automation in place to safeguard our customers’ data. The Security team protects the infrastructure and data for processing billions of dollars of mortgage loans. In addition to protecting Valon’s internal systems, the Security team partners closely with Product and Engineering to design and deliver secure, scalable, and trustworthy capabilities for ValonOS. As AI becomes central to how Valon builds and operates, our team is responsible for securing AI-powered systems and pipelines while also leveraging AI tools to optimize security and defense capabilities. We work cross-functionally across all teams at Valon to enable security throughout the organization. We engage with external security auditors, pentesting firms, and partners to continuously evaluate Valon’s security posture. Valon offices are located in New York City and San Francisco, but we fully support remote work! ABOUT THE ROLE We are seeking a skilled and experienced Senior Security Engineer, Identity & Access Management to join our team. In this role, you'll own the design, implementation, and operation of IAM systems for Valon’s enterprise identity stack that powers Valon's workforce, and support security for customer-facing authentication and authorization capabilities embedded in ValonOS. You'll be the connective tissue between IT, Engineering, and Security — ensuring every identity, human or machine, is governed consistently and securely. RESPONSIBILITIES - Design and support end-to-end lifecycle of workforce identity systems including identity automation, access management, and least-privilege enforcement across internal systems - Support design of secure identity design patterns for product teams building on ValonOS - Manage and evolve Valon's IdP in conjunction with IT including SSO integrations, MFA policies, conditional access rules, and directory synchronization - Define and enforce RBAC and group-based access policies for internal applications, cloud environments, and development tooling - Support privileged access management (PAM) for internal infrastructure in conjunction with Engineering teams - Design and build AI-assisted workflows that automate and accelerate core IAM operations - Evaluate AI risks across IAM pipelines, ensuring appropriate security controls around data exposure, prompt injection and other threats - Collaborate with Product, Engineering, Data, Compliance, Legal, and other teams to identify and drive mitigation for data security risks - Support other operational and on-call duties such as vulnerability management, regulatory compliance (SOC 2, CCPA, NYDFS, FTC), policy development, incident response and security reviews. IDEAL BACKGROUND - Extensive hands-on IAM security engineer with proven ownership of enterprise identity solutions, able to operate autonomously, drive complex cross-functional efforts, and influence across teams - Deep expertise in modern identity protocols and standards: SAML 2.0, OIDC/OAuth 2.0, SCIM, LDAP, and related specifications - Proven experience administering and scaling IdP platforms (e.g., Okta, Azure AD / Entra ID, Google Workspace) including SSO, MFA, conditional access, and directory sync - Solid background in cloud IAM (GCP preferred), including service accounts, workload identity federation, and policy-as-code approaches - Strong expertise in building PAM solutions / identity vaults and enforcing least-privilege across human and non-human identities - Experience building AI/LLM-powered workflows — ideally in a security or operations context — with a practical understanding of the identity and access risks they introduce - Familiarity with securing non-human and agentic identities, including AI service accounts, API key governance, and audit logging for automated systems - Applied knowledge with industry security and compliance frameworks (OWASP, NIST, CIS, SOC 2/ISO 27001 concepts) - Excellent communication and collaboration skills, including the ability to explain complex security concepts to both technical and non-technical stakeholders. - Experience working in high-growth or startup environments is a plus. MINIMUM QUALIFICATIONS - 5+ years in security engineering roles with a core focus on identity and access management - Bachelor's degree in Information Security, Computer Science, Technology or related field - Relevant security certifications (e.g., CISSP, CISM, CCSK, CCSP or similar) - Hands-on experience with an enterprise IdP (Okta, Entra ID, or Google Workspace) including SSO, MFA, SCIM - Deep understanding of authentication and authorization models across applications - SAML, OIDC/OAuth 2.0, RBAC, ABAC, and API access controls - Hands-on experience with modern identity security technologies and tooling BENEFITS - Base Compensation Band: $180K - 230K. Base salary offered is determined by a number of factors including the candidate’s experience, qualifications, and skills - This Base Compensation pay range applies to our New York City located staff and may differ according to location. - Compensation: Competitive salary with a meaningful stake in the company via equity, and 401k plan - Health & well-being: We’ll invest in your physical and mental well-being with comprehensive medical, dental, & vision benefits - Commuter benefits: We offer pre-tax deductions for public transportation, rideshare services, and parking expenses to make your commute more affordable and convenient - Grow together: Company wide orientation for you to successfully onboard and other learning & development opportunities including regular review cycles that feature 360 degree feedback - Play together: Quarterly budgets for team and company outings. Use it for team swag, cooking classes, or team dinners! - Generous time off: Flexible paid time off, sick days, and 11 company holidays - Baby bonding time!: 12 weeks off for both birthing and non-birthing parents - fully paid so you can focus your energy on your newest addition Throughout the interview process, please remember that emails will only be from valon.com http://valon.com email addresses. We will never ask for any personally identifiable information during the interview process itself. Please reach out to talent@valon.com if you have any requests to verify the authenticity of an outreach. Valon is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws. Valon makes hiring decisions based solely on qualifications, merit, and business needs at the time.", "summaryDescription" : "Senior Security Engineer, Identity & Access Management at Valon. Skills: Enterprise identity stack, Customer-facing authentication, Authorization capabilities. Design workforce identity systems. Support workforce identity lifecycle", "createdAt" : "2026-06-14T03:56:52.674", "lastUpdated" : "2026-06-15T09:06:56.113", "ingestTimestamp" : "2026-06-14T03:56:52.674", "mongoId" : "6a2c745374d8ee00a093488d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 180000, "salaryAnnualMax" : 230000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Enterprise identity solutions", "Cloud IAM", "Workload identity federation", "Policy-as-code", "Enterprise identity stack", "Customer-facing authentication", "Authorization capabilities", "Identity automation", "Access management", "Least-privilege enforcement", "Conditional access", "Directory synchronization", "Privileged access management", "Data security risks", "Regulated finance", "Mortgage servicing", "AI-powered systems", "AI pipelines", "SOC 2", "CCPA", "NYDFS", "FTC", "CISSP", "CISM", "CCSK", "CCSP", "Okta", "Azure AD", "Entra ID", "Google Workspace" ], "skillCount" : 30, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 813.41174, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.97 }, { "id" : "6a2c6a7f74d8ee00a090c379", "title" : "Director, Identity & Access Management", "company" : "Datavant", "industry" : "Technology", "salary" : { "min" : 215000.0, "max" : 315000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline data for Director, Identity & Access Management in the United States, adjusted for seniority, company size, and the healthcare industry." }, "location" : "Remote - United States", "locations" : [ "Remote - United States" ], "timestamp" : "2026-06-16T05:01:54.322", "fingerprint" : "42e0ad18bdbcdabe6fcc51ef258d91a63b70750609f4367c25450212a83a2d41", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.datavant.com/about/careers/open-roles/job?gh_jid=5251134008", "externalId" : "5251134008", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "experienceLevel" : "Director", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Datavant is the data collaboration platform trusted for healthcare. Guided by our mission to make the world’s health data secure, accessible and actionable, we provide critical data solutions for organizations across the healthcare ecosystem - including providers, health plans, researchers, and life sciences companies. From fulfilling a single patient’s request for their medical records to powering the AI revolution in healthcare, Datavanters are building the future of how data is connected and used to improve health. By joining Datavant today, you’re stepping onto a driven and highly collaborative team that is passionate about creating transformative change in healthcare. What We’re Looking For We are seeking an experienced Director to lead our Identity & Access Management (IAM) team with a strong focus on hands-on execution and team leadership. In this role, you will oversee the implementation and daily management of our IAM program, ensuring secure, efficient, and scalable access control for our users and systems. Leading a small team, you will work closely with internal stakeholders to support business objectives, manage access policies, and maintain compliance with security standards. What You Will Do: Own the development and implementation of an Identity Strategy spanning internal and external identities, including multiple user personas and non-human (agentic, bot, service, etc.) Manage and execute IAM solution technology implementations that align with company goals, ensuring reliable access control across systems and applications. Lead a small team of IAM specialists, providing mentorship, guidance, and hands-on support to drive efficient and secure operations. Implement IAM policies, standards, and procedures to maintain compliance with industry regulations and internal policies. Collaborate with IT and other departments to integrate IAM requirements seamlessly within business processes. Manage the selection of deployment of Identity tools and solutions where applicable, while overseeing the management of IAM tools, services and processes including IGA, PAM, MFA/Passwordless, IDPs, etc. Ensuring solutions and services are scalable and operationally effective. Regularly assess and improve IAM configurations and workflows to address evolving security needs and industry trends. Conduct periodic reviews and audits, implementing improvements based on findings to enhance security and compliance. Provide IAM-related support for IT security measures to safeguard user data, applications, and systems against unauthorized access. What You Need to Succeed: Proven experience in IAM management, including successful program implementation and execution. Strong knowledge of IAM processes, technologies, and compliance requirements (e.g., NIST, FedRAMP). Ability to lead a small, dedicated team, fostering collaboration, accountability, and professional growth. Excellent organizational and problem-solving skills, with an emphasis on attention to detail and execution. Relevant certifications such as CISSP, CISM, or similar are a plus. This role is ideal for a hands-on IAM professional who thrives in a fast-paced, results-driven environment and is committed to building a secure, efficient access management program. We are committed to building a diverse team of Datavanters who are all responsible for stewarding a high-performance culture in which all Datavanters belong and thrive. We are proud to be an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status. At Datavant our total rewards strategy powers a high-growth, high-performance, health technology company that rewards our employees for transforming health care through creating industry-defining data logistics products and services. The range posted is for a given job title, which can include multiple levels. Individual rates for the same job title may differ based on their level, responsibilities, skills, and experience for a specific job. The estimated total cash compensation range for this role is: $180,000—$225,000 USD To ensure the safety of patients and staff, many of our clients require post-offer health screenings and proof and/or completion of various vaccinations such as the flu shot, Tdap, COVID-19, etc. Any requests to be exempted from these requirements will be reviewed by Datavant Human Resources and determined on a case-by-case basis. Depending on the state in which you will be working, exemptions may be available on the basis of disability, medical contraindications to the vaccine or any of its components, pregnancy or pregnancy-related medical conditions, and/or religion. This job is not eligible for employment sponsorship. Datavant is committed to a work environment free from job discrimination. We are proud to be an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status. To learn more about our commitment, please review our EEO Commitment Statement here. Know Your Rights, explore the resources available through the EEOC for more information regarding your legal rights and protections. In addition, Datavant does not and will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay. At the end of this application, you will find a set of voluntary demographic questions. If you choose to respond, your answers will be anonymous and will help us identify areas for improvement in our recruitment process. (We can only see aggregate responses, not individual ones. In fact, we aren’t even able to see whether you’ve responded.) Responding is entirely optional and will not affect your application or hiring process in any way. Datavant is committed to working with and providing reasonable accommodations to individuals with physical and mental disabilities. If you need an accommodation while seeking employment, please request it here, by selecting the ‘Interview Accommodation Request’ category. You will need your requisition ID when submitting your request, you can find instructions for locating it here. Requests for reasonable accommodations will be reviewed on a case-by-case basis. For more information about how we collect and use your data, please review our Privacy Policy.", "summaryDescription" : "Director, Identity & Access Management at Datavant", "postedDate" : "2026-06-14T18:36:59.133", "createdAt" : "2026-06-14T18:36:59.133", "lastUpdated" : "2026-06-16T05:01:54.322", "ingestTimestamp" : "2026-06-14T18:36:59.133", "mongoId" : "6a2c6a7f74d8ee00a090c379", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 215000, "salaryAnnualMax" : 315000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.7777778, "_score" : 798.5634, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Healthcare", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2a929074d8ee00a06915ad", "title" : "Identity and Access Management Engineer", "company" : "Everpure", "industry" : "Technology", "salary" : { "min" : 1500000.0, "max" : 2500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an Identity and Access Management Engineer in Bangalore, India, adjusted for mid-seniority and the technology industry." }, "location" : "Bangalore, India", "locations" : [ "Bangalore", "India" ], "timestamp" : "2026-06-14T19:35:30.013", "fingerprint" : "7d0786672e5cb58ce8c846688c0068aa9cc22f7b1392b8aea48104b6581849fa", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/purestorage/jobs/7988992", "externalId" : "7988992", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bangalore", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "12.9767936,77.5900820" } ], "locationText" : "Bangalore, India", "technicalSkills" : "Okta, SAML, OAuth, OIDC, SCIM, Python, PowerShell, Terraform, Ansible, Git, Splunk, Datadog", "professionalSkills" : [ "Application onboarding", "Lifecycle management", "Zero-Trust architecture", "Least-Privilege architecture", "Role-based access controls", "Infrastructure integrity", "Root-cause analysis", "GitOps workflows", "Infrastructure-as-code" ], "hardSkillsList" : [ "Identity federation", "Automation architectures", "API integration", "User provisioning", "Configuration management", "System health monitoring", "Authentication pathways" ], "softSkillsList" : [ "Innovation", "Critical thinking", "Analytical mindset" ], "hardSkills" : [ { "name" : "Identity federation", "level" : "intermediate" }, { "name" : "Automation architectures", "level" : "intermediate" }, { "name" : "API integration", "level" : "intermediate" }, { "name" : "User provisioning", "level" : "intermediate" }, { "name" : "Configuration management", "level" : "intermediate" }, { "name" : "System health monitoring", "level" : "intermediate" }, { "name" : "Authentication pathways", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Innovation" }, { "name" : "Critical thinking" }, { "name" : "Analytical mindset" } ], "majorSkills" : "Automation, Zero-Trust, Infrastructure-as-code", "majorSkillsList" : [ "Automation", "Zero-Trust", "Infrastructure-as-code" ], "coreResponsibilities" : "Implement and support IAM solutions, Own application onboarding, Design secure configurations for integrations, Automate workforce identity lifecycle management, Engineer automated joiner, mover, and leaver processes, Enforce zero-trust and least-privilege architecture, Author and maintain access governance policies, Establish uncompromised perimeter, Build monitoring and alerting, Perform root-cause analysis on degradation, Implement GitOps workflows, Implement infrastructure-as-code, Remove manual configurations", "teamCollaboration" : "Enterprise IAM team; Security compliance; Infrastructure teams; Cross-functional business units; Non-technical internal partners", "projectManagementSkills" : [ "GitOps workflows" ], "domainKnowledge" : "Identity and Access Management; Cloud-native identity platforms; Identity federation; Automation workflows; SaaS integration; On-prem integration; Zero-Trust model; Least-privilege principle; Modern IAM protocols", "domainList" : [ "identity-and-access-management", "cloud-native-identity-platforms", "identity-federation", "automation-workflows", "saas-integration", "on-prem-integration", "zero-trust-model", "least-privilege-principle", "modern-iam-protocols" ], "domainSpecificKnowledge" : [ "Identity and Access Management", "Cloud-native identity platforms", "Identity federation", "Automation workflows", "SaaS integration", "On-prem integration", "Zero-Trust model", "Least-privilege principle", "Modern IAM protocols" ], "toolProficiency" : [ "Okta", "Lumos", "Terraform", "Ansible", "Git", "Splunk", "Datadog" ], "communicationSkills" : "Agile communication", "documentationSkills" : "Technical runbooks", "innovationCreativity" : "Innovative thinking", "problemSolvingSkills" : "Diagnostic capabilities; Root-cause analysis", "outcomesObjectives" : "Secure and scale workforce environment; Transform secure access; Eliminate operational friction; Enforce zero-trust model; Deliver secure authentication outcomes; Safeguard corporate data; Scale enterprise-grade identity ecosystem; Slash provisioning turnaround times; Eliminate manual overhead; Secure day-one productivity; Establish uncompromised perimeter; Minimize MTTR; Scale identity workflows", "qualificationsBasic" : "Hands-on experience building, scaling, and maintaining enterprise-grade IAM processes utilizing Okta or similar modern cloud-native identity platforms, Comprehensive expertise utilizing and troubleshooting identity federation and automation architectures, including deep familiarity with OAuth, SAML, OIDC, and API-driven SCIM patterns, Familiarity with APIs, JSON, and automation workflows for system integration, Comprehensive expertise supporting SSO, MFA, User Provisioning and Lifecycle Management, Experience integrating SaaS and on-prem applications with IAM systems, Proficient capabilities writing structured automation logic using languages like Python or PowerShell, Understanding of configuration management toolsets like Terraform or Ansible, Solid operational experience leveraging Git-based version control workflows, Systematic approach to system health monitoring through observability platforms such as Splunk or Datadog, Exceptional diagnostic capabilities to decouple convoluted authentication pathways, Agile communication style to guide non-technical internal partners smoothly through application onboarding initiatives", "qualificationsPreferred" : "Kubernetes experience a plus", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "We’re in an unbelievably exciting area of tech and are fundamentally reshaping the data storage industry. Here, you lead with innovative thinking, grow along with us, and join the smartest team in the industry. This type of work—work that changes the world—is what the tech industry was founded on. So, if you're ready to seize the endless opportunities and leave your mark, come join us. THE ROLE As an Identity and Access Management (IAM) Engineer at Everpure, you will secure and scale our workforce environment by transforming how our global team securely accesses critical systems. Operating within our Enterprise IAM team in Bengaluru, you will own the end-to-end integration of corporate applications, engineering seamless automated lifecycles that eliminate operational friction and enforce a zero-trust model. In this highly collaborative position, you will act as a vital bridge between security compliance, infrastructure, and cross-functional business units to deliver secure authentication outcomes. By engineering robust single sign-on (SSO) and automated lifecycle systems, you directly safeguard Everpure’s corporate data while scaling an elite, enterprise-grade identity ecosystem. WHAT YOU’LL DO IAM Implementation: Implement and support IAM solutions for enterprise workforce and applications Own Application Onboarding and Lifecycle Engineering: Design, build, and support secure configurations for enterprise application integrations leveraging modern IAM standard protocols (SAML, OAuth, OIDC, and SCIM) to scale our identity footprint safely. Automate Workforce Identity Lifecycle Management: Programmatically engineer automated joiner, mover, and leaver (JML) processes using Okta/ Lumos and scripting tools to slash provisioning turnaround times, eliminate manual overhead, and secure day-one productivity. Enforce Zero-Trust and Least-Privilege Architecture: Author and maintain fine-grained access governance policies, role-based access controls (RBAC), Single Sign On and multi-factor authentication (MFA) parameters to establish an uncompromised perimeter across workforce environments. Optimize Service Reliability and Infrastructure Integrity: Build robust monitoring, alerting, and comprehensive technical runbooks to perform root-cause analysis on complex authentication or automated workflow degradation, driving minimized MTTR (Mean Time to Resolution). Eradicate Technical Debt Through Code: Shift operational paradigms by implementing GitOps workflows and infrastructure-as-code (Terraform) to scale identity workflows, removing brittle, manual configurations across the enterprise environment. Work Location Commitment: We are primarily an in-office environment and therefore, you will be expected to work from the Bengaluru office in compliance with Everpure’s policies, unless you are on PTO, or work travel, or other approved leave. WHAT YOU BRING Core Identity and Access Management Competency: Hands-on experience building, scaling, and maintaining enterprise-grade IAM processes utilizing Okta or similar modern cloud-native identity platforms. Technical Protocol Mastery: Comprehensive expertise utilizing and troubleshooting identity federation and automation architectures, including deep familiarity with OAuth, SAML, OIDC, and API-driven SCIM patterns. Familiarity with APIs, JSON, and automation workflows for system integration IAM Process Mastery - Comprehensive expertise supporting SSO, MFA, User Provisioning and Lifecycle Management. Experience integrating SaaS and on-prem applications with IAM systems. Automation and Infrastructure-as-Code Acumen: Proficient capabilities writing structured automation logic using languages like Python or PowerShell, coupled with an understanding of configuration management toolsets like Terraform or Ansible to drive predictable deployments. Modern DevOps and Observability Fundamentals: Solid operational experience leveraging Git-based version control workflows paired with a systematic approach to system health monitoring through observability platforms such as Splunk or Datadog. Collaboration and Analytical Mindset: Exceptional diagnostic capabilities to decouple convoluted authentication pathways, alongside an agile communication style that allows you to guide non-technical internal partners smoothly through application onboarding initiatives. WHAT YOU CAN EXPECT FROM US: Innovation: We celebrate those who think critically, like a challenge, and aspire to be trailblazers. Growth: We give you the space and support to grow along with us and to contribute to something meaningful. We have been named Fortune's Best Workplaces in Technology™, Fortune's Best Workplaces in the Bay Area™, and certified as a Great Place to Work®! Team: We build each other up and set aside ego for the greater good. And because we understand the value of bringing your full and best self to work, we offer a variety of perks to manage a healthy balance, including flexible time off, wellness resources, and company-sponsored team events. Check out purebenefits.com for more information. ACCOMMODATIONS AND ACCESSIBILITY: Candidates with disabilities may request accommodations for all aspects of our hiring process. For more on this, contact us at TA-Ops@purestorage.com if you’re invited to an interview. OUR COMMITMENT TO A STRONG AND INCLUSIVE TEAM: We’re forging a future where everyone finds their rightful place and where every voice matters. Where uniqueness isn’t just accepted but embraced. That’s why we are committed to fostering the growth and development of every person, cultivating a sense of community through our Employee Resource Groups and advocating for inclusive leadership. Everpure is proud to be an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or any other characteristic legally protected by the laws of the jurisdiction in which you are being considered for hire. Join us and bring your best. Bring your bold. Pure and simple.", "summaryDescription" : "Identity and Access Management Engineer at Everpure. Skills: Automation, Zero-Trust, Infrastructure-as-code. Implement and support IAM solutions. Own application onboarding", "postedDate" : "2026-06-12T00:47:32.464", "createdAt" : "2026-06-12T00:47:32.464", "lastUpdated" : "2026-06-14T19:35:30.013", "ingestTimestamp" : "2026-06-12T00:47:32.464", "mongoId" : "6a2a929074d8ee00a06915ad", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Identity federation", "Automation architectures", "API integration", "User provisioning", "Configuration management", "System health monitoring", "Authentication pathways", "Innovation", "Critical thinking", "Analytical mindset", "Automation", "Zero-Trust", "Infrastructure-as-code", "Application onboarding", "Lifecycle management", "Zero-Trust architecture", "Least-Privilege architecture", "Role-based access controls", "Infrastructure integrity", "Root-cause analysis", "GitOps workflows", "Identity and Access Management", "Cloud-native identity platforms", "Automation workflows", "SaaS integration", "On-prem integration", "Zero-Trust model", "Least-privilege principle", "Modern IAM protocols", "Okta", "Lumos", "Terraform", "Ansible", "Git", "Splunk", "Datadog" ], "skillCount" : 36, "jobCategory" : "other", "jobSubcategory" : "it", "dataQualityScore" : 0.7777778, "_score" : 762.767, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "69c909349bc74574cbb072ad", "title" : "Manager, Identity & Access Management (IAM)", "company" : "Pharmacy Data Management, Inc.", "industry" : "Healthcare", "salary" : { "min" : 135000.0, "max" : 185000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager, Identity & Access Management in Poland, United States, adjusted for the healthcare industry and manager-level seniority." }, "location" : "Poland, OH", "locations" : [ "Poland", "OH" ], "timestamp" : "2026-06-16T04:13:20.793", "fingerprint" : "d3112fb8e45f1c30176d8f9adbad0442e65412fd2a504c794c0ed38648475243", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://pdmi.breezy.hr/p/a6e45100fcfa-manager-identity-access-management-iam", "externalId" : "a6e45100fcfa", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Poland", "state" : "Ohio", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "41.0242260,-80.6147950" } ], "locationText" : "Poland, Ohio, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "majorSkills" : "Program leadership, Technical expertise", "majorSkillsList" : [ "Program leadership", "Technical expertise" ], "coreResponsibilities" : "Lead strategy for enterprise IAM initiatives, Lead architecture for enterprise IAM initiatives, Lead delivery for enterprise IAM initiatives", "domainKnowledge" : "Identity security; On-premises environments; Multi-cloud environments", "domainList" : [ "identity-security", "on-premises-environments", "multi-cloud-environments" ], "domainSpecificKnowledge" : [ "Identity security", "On-premises environments", "Multi-cloud environments" ], "remoteFriendly" : true, "workSiteFlexibility" : "Onsite", "rawDescription" : "PDMI is looking for a Manager, Identity & Access Management (IAM) to lead the strategy, architecture, and delivery of enterprise IAM initiatives across on-premises and multi-cloud environments. This role blends deep technical expertise in identity security with strong program leadership to stre", "summaryDescription" : "Manager, Identity & Access Management (IAM) at Pharmacy Data Management, Inc.. Skills: Program leadership, Technical expertise. Lead strategy for enterprise IAM initiatives. Lead architecture for enterprise IAM initiatives", "createdAt" : "2026-06-14T18:49:03.291", "lastUpdated" : "2026-06-16T04:13:20.793", "ingestTimestamp" : "2026-06-14T18:49:03.291", "mongoId" : "69c909349bc74574cbb072ad", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 135000, "salaryAnnualMax" : 185000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Program leadership", "Technical expertise", "Identity security", "On-premises environments", "Multi-cloud environments" ], "skillCount" : 5, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "_score" : 759.28906, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Healthcare", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c7c2a74d8ee00a094c81d", "title" : "Identity & Access Management (IAM) Apprentice", "company" : "Man Group", "industry" : "Banking", "salary" : { "min" : 25000.0, "max" : 35000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an entry-level IAM Apprentice in London, adjusted for the financial services industry and company size." }, "location" : "London", "locations" : [ "London" ], "timestamp" : "2026-06-16T00:52:45.988", "fingerprint" : "394c7e837751c97de2a42fbb486f955b99dd60e20012ba0aa40054a4365a6574", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/mangroup/jobs/4799146101", "externalId" : "4799146101", "industryFunction" : { }, "structuredLocations" : [ { "city" : "London", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "51.5074456,-0.1277653" } ], "locationText" : "London, United Kingdom", "employmentType" : "INTERNSHIP", "experienceMinYears" : 0, "experienceMaxYears" : 2, "experienceLevel" : "Entry", "coreResponsibilities" : "Support user access requests, Process day-to-day requests, Assist with Joiner, Mover, Leaver activities, Support access reviews, Prepare materials for reviews, Chase responses for reviews, Track outcomes of reviews, Respond to queries, Manage team inbox, Manage ticket queue, Manage Slack channel, Answer straightforward questions, Escalate complex queries, Support audits, Gather information for auditors, Contribute to documentation updates, Collaborate on team projects, Work on improvement work", "teamCollaboration" : "IAM team; Senior colleagues; Experienced IAM analysts", "domainKnowledge" : "Identity and Access Management; Financial services", "domainList" : [ "identity-and-access-management", "financial-services" ], "domainSpecificKnowledge" : [ "Identity and Access Management", "Financial services" ], "documentationSkills" : "Keep team documentation up to date", "continuousLearning" : "Study Level 3 Business Administrator qualification; Guidance from senior colleagues; Mentoring from senior colleagues", "specialRequirements" : "Unable to sponsor visas, Not for higher qualification holders", "qualificationsBasic" : "Level 3 Business Administrator apprenticeship", "remoteFriendly" : true, "workSiteFlexibility" : "Onsite", "rawDescription" : "About Man Group Man Group is a global alternative investment management firm focused on pursuing outperformance for sophisticated clients via our Systematic, Discretionary and Solutions offerings. Powered by talent and advanced technology, our single and multi-manager investment strategies are underpinned by deep research and span public and private markets, across all major asset classes, with a significant focus on alternatives. Man Group takes a partnership approach to working with clients, establishing deep connections and creating tailored solutions to meet their investment goals and those of the millions of retirees and savers they represent. Headquartered in London, we manage $227.6 billion* and operate across multiple offices globally. Man Group plc is listed on the London Stock Exchange under the ticker EMG.LN and is a constituent of the FTSE 250 Index. Further information can be found at www.man.com * As at 31 December 2025 Job Profile Summary: Join Man Group's Identity and Access Management (IAM) team as an Apprentice. IAM sits within the broader Information Security function and is responsible for making sure the right people have the right access to the right systems at the right time. This entry-level role is designed for individuals who are curious about technology, security and how a global financial services business works behind the scenes. Reporting to the IAM team, the Apprentice will learn on the job whilst studying the Level 3 Business Administrator apprenticeship. The 15-month programme (12 months of training plus a 3-month end-point assessment) covers business administration skills that will support the apprentice both in this role and throughout their career. We are looking for someone enthusiastic, well-organised and keen to learn. No prior technical knowledge is required — full training and support will be provided. Responsibilities: Support User Access Requests: Help process day-to-day requests for system access, working through tickets and following team processes to make sure requests are handled accurately and on time. Help with Joiner, Mover and Leaver Activities: Assist the team with setting up access for new starters, updating access when people change roles, and removing access when people leave the firm. Support Access Reviews: Help the team run regular reviews where managers check that their staff still need the access they have. This includes preparing materials, chasing responses and tracking outcomes. Respond to Queries: Help manage the team's inbox, ticket queue and Slack channel — answering straightforward questions and escalating anything more complex to senior colleagues. Support Audits and Documentation: Help gather information when auditors ask questions about access controls, and contribute to keeping team documentation and guides up to date. Additional Job Description About the Apprenticeship: The Apprentice will study the Level 3 Business Administrator qualification alongside the chosen training provider and will be given full support in achieving the qualification. This is a 15-month fixed-term apprenticeship role offered as part of Man Group's School Leaver Programme, with the potential to move into a full-time role following successful completion of the programme. Senior colleagues will provide guidance, mentoring and clear explanations along the way — no prior experience of IAM or specific tools is expected. Collaborate on Projects: Work alongside experienced IAM analysts on team projects and improvement work, gaining exposure to how identity and access management runs in a financial services firm. We are unfortunately unable to sponsor visas for this programme or provide this opportunity to individuals who already hold a similar qualification at a higher level than the apprenticeship associated with this programme. Key Skills if you require help or information on reasonable adjustments as you apply for roles with us, please contact TalentAcquisition@man.com.", "summaryDescription" : "Identity & Access Management (IAM) Apprentice at Man Group. Support user access requests. Process day-to-day requests", "postedDate" : "2026-06-14T20:11:29.415", "createdAt" : "2026-06-14T20:11:29.415", "lastUpdated" : "2026-06-16T00:52:45.988", "ingestTimestamp" : "2026-06-14T20:11:29.415", "mongoId" : "6a2c7c2a74d8ee00a094c81d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "<30k", "hasSalary" : false, "allSkills" : [ "Identity and Access Management", "Financial services" ], "skillCount" : 2, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Entry", "dataQualityScore" : 1.0, "_score" : 755.4548, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services", "llmIndustryConfidence" : 0.9 }, { "id" : "694ae6e870f0b99d589b3abb", "title" : "Access Services Manager", "company" : "SMU", "industry" : "Education", "salary" : { "min" : 62000.0, "max" : 80000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "TX-Dallas", "locations" : [ "TX-Dallas" ], "certifications" : [ "Alma certification" ], "timestamp" : "2026-06-15T12:14:07.741", "fingerprint" : "e5b2bd04c9b5d6de26af70805231b6ce3e41dbc29c7bb6fad9ac753c0f248f2a", "source" : "taleo", "language" : "en", "applyUrl" : "https://smu.taleo.net/careersection/ex/jobdetail.ftl?job=73111", "externalId" : "73111", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Dallas", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "32.7762719,-96.7968559" } ], "locationText" : "Dallas, Texas, United States", "experienceLevel" : "Manager", "professionalSkills" : [ "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement" ], "hardSkillsList" : [ "Stacks management", "Course reserves", "Resource sharing", "Desk statistics", "Usage reports", "Supply ordering" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Stacks management", "level" : "intermediate" }, { "name" : "Course reserves", "level" : "intermediate" }, { "name" : "Resource sharing", "level" : "intermediate" }, { "name" : "Desk statistics", "level" : "intermediate" }, { "name" : "Usage reports", "level" : "intermediate" }, { "name" : "Supply ordering", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Access services, Staff supervision, Library operations", "majorSkillsList" : [ "Access services", "Staff supervision", "Library operations" ], "coreResponsibilities" : "Hire staff, Train staff, Supervise staff, Evaluate staff, Provide mentoring, Provide performance feedback, Schedule coverage, Promote work culture, Oversee public services, Ensure service delivery, Uphold policies, Resolve patron issues, Monitor workflows, Monitor procedures, Manage desk statistics, Manage usage reports, Manage course reserves, Manage resource sharing, Manage supply ordering, Ensure policy compliance, Participate on Access Services Team, Participate on committees, Collaborate with colleagues, Improve communication, Improve service quality, Coordinate with staff, Support user experiences, Improve access to materials", "teamCollaboration" : "Access Services Team; SMU Libraries committees; Colleagues across SMU Libraries; Bridwell's reference staff; Bridwell's research staff; Bridwell's writing staff; Bridwell's technical staff; SMU Libraries staff", "domainKnowledge" : "Theological library; Higher education context", "domainList" : [ "theological-library", "higher-education-context" ], "domainSpecificKnowledge" : [ "Theological library", "Higher education context" ], "toolProficiency" : [ "Alma" ], "communicationSkills" : "Verbal communication; Written communication", "continuousLearning" : "Professional development; Tuition benefits", "problemSolvingSkills" : "Problem-solving; Identify problems; Analyze problems; Devise solutions", "specialRequirements" : "On-campus position, In-person position, Sit for long periods", "qualificationsBasic" : "Bachelor's degree or equivalent, 3+ years academic library experience, Excellence in public service, User-centered library operations, Organizational skills, Communication skills, Problem-solving skills, Lead and develop staff, Manage multiple priorities", "qualificationsPreferred" : "Master's degree from ALA-accredited program, Experience with integrated library systems, Familiarity with access services, Experience in service assessment", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Salary Range: $62,000-$80,000, c ommensurate with experience and qualifications. About SMU SMU’s more than 12,000 diverse, high-achieving students come from all 50 states and over 80 countries to take advantage of the University’s small classes, meaningful research opportunities, leadership development, community service, international study and innovative programs. SMU serves approximately 7,000 undergraduates and 5,000 graduate students through eight degree-granting schools: Dedman College of Humanities and Sciences , Cox School of Business , Lyle School of Engineering , Meadows School of the Arts , Simmons School of Education and Human Development , Dedman School of Law , Perkins School of Theology and Moody School of Graduate and Advanced Studies . SMU is data driven, and its powerful supercomputing ecosystem – paired with entrepreneurial drive – creates an unrivaled environment for the University to deliver research excellence. Now in its second century of achievement, SMU is recognized for the ways it supports students, faculty and alumni as they become ethical, enterprising leaders in their professions and communities. SMU’s relationship with Dallas – the dynamic center of one of the nation’s fastest-growing regions – offers unique learning, research, social and career opportunities that provide a launch pad for global impact. SMU is nonsectarian in its teaching and committed to academic freedom and open inquiry. About the Department: SMU is a nationally ranked private research university located in Dallas, Texas, with eight degree-granting schools and a dynamic campus culture. SMU Libraries includes six libraries on the main campus and one in Taos, NM, with the Rees-Jones Library of the American West opening in 2027. Collaboration, innovation, and professional growth are central to SMU Libraries’ mission, providing an engaging and supportive environment for library professionals. Bridwell Library supports Perkins School of Theology and the study of religion, theology, and philosophy at SMU. Its collections, research services, and special collections make it a leading theological library in the United States. Bridwell Library also houses the Bridwell Library Special Collections and the Bridwell Art and Rare Book Library, which attract scholars and researchers worldwide. About the Position: This role is an on-campus, in-person position. SMU Libraries seeks an innovative and service-oriented Access Services Manager to lead public service operations at the Bridwell Library. As part of the SMU Libraries Access Services Team, this position ensures consistent, user-centered services that support the research and resource needs of the SMU community. The Access Services Manager provides leadership and oversight for circulation, stacks management, course reserves, and resource sharing operations. This position supervises full-time and student employees, manages daily workflows, and collaborates closely with colleagues across SMU Libraries to ensure seamless and equitable access to library materials and spaces. The position reports to the Director of Bridwell Library and works in partnership with SMU Libraries’ Director of Access & Resource Sharing. Essential Functions: Supervision and Staff Development: Hire, train, supervise, and evaluate full-time staff and student employees. Provide mentoring and performance feedback, schedule coverage for service points, and promote a supportive, growth-oriented work culture. Service Delivery and Patron Support: Oversee front-line public services including circulation, reserves, stacks, and basic reference support. Ensure consistent, high-quality service delivery, uphold policies with professionalism, and resolve patron access issues. Administration and Operations: Monitor access services workflows and procedures. Manage desk statistics, usage reports, course reserves, resource sharing, and supply ordering. Ensure compliance with SMU Libraries’ policies and procedures. Collaboration and Team Participation: Actively participate on the Access Services Team and other SMU Libraries committees. Collaborate with colleagues in different areas (including systems, resource sharing, and discovery) to improve communication and service quality. Location-Specific Responsibilities: Coordinate with Bridwell’s reference, research, writing, and technical services staff to support seamless user experiences. Partner with SMU Libraries staff to improve access to digital and physical materials. Education and Experience: Required Qualifications: Bachelor’s degree or equivalent. Minimum of three years of experience in an academic library or equivalent setting. Demonstrated excellence in public service and user-centered library operations. Strong organizational, communication, and problem-solving skills. Ability to lead and develop staff and manage multiple priorities effectively. Preferred Qualifications: Master’s degree from an ALA-accredited program or equivalent. Experience with integrated library systems (e.g., Alma). Familiarity with access services in a theological or higher education context. Experience in service assessment and improvement initiatives. Certification Alma certification required within one year of employment. Knowledge, Skills and Abilities: Candidate must demonstrate strong interpersonal and verbal communication skills, with the ability to communicate broadly across the University and develop and maintain effective relationships with a wide range of constituencies. Must also demonstrate strong written communication skills. Candidate must possess strong problem-solving skills with the ability to identify and analyze problems, as well as devise solutions. Must also have strong organizational, planning and time management skills. Physical and Environmental Demands: Sit for long periods of time Deadline to Apply: Open until filled. Applications submitted by January 8th, 2026 will receive priority consideration. To be considered for this position, applicants are required to submit: A resume or CV A cover letter that addresses the education and experience required and preferred for this position. EEO Statement SMU is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, age, disability, genetic information, veteran status, sexual orientation, or gender identity and expression. Benefits: SMU offers staff a broad, competitive array of health and related benefit s. In addition to traditional benefits such as health, dental, and vision plans, SMU offers a wide range of wellness programs to help attract, support, and retain our employees whose work continues to make SMU an outstanding education and research institution. SMU is committed to providing an array of retirement programs that benefit and protect you and your family throughout your working years at SMU and, if you meet SMU's retirement eligibility criteria, during your retirement years after you leave SMU. The value of learning at SMU isn't just about preparing our students for the future. Employees have access to a wide variety of professional and personal development opportunities , including tuition benefits . USA-TX-Dallas", "summaryDescription" : "Access Services Manager at SMU. Skills: Access services, Staff supervision, Library operations. Hire staff. Train staff", "createdAt" : "2026-06-14T06:39:10.762", "lastUpdated" : "2026-06-15T12:14:07.741", "ingestTimestamp" : "2026-06-14T06:39:10.762", "mongoId" : "694ae6e870f0b99d589b3abb", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 62000, "salaryAnnualMax" : 80000, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ "Stacks management", "Course reserves", "Resource sharing", "Desk statistics", "Usage reports", "Supply ordering", "Leadership", "Mentoring", "Access services", "Staff supervision", "Library operations", "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement", "Theological library", "Higher education context", "Alma certification", "Alma" ], "skillCount" : 22, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Manager", "dataQualityScore" : 0.7777778, "_score" : 728.7496, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Education", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c7dc474d8ee00a0950b8f", "title" : "Embedded Firmware Engineer (Access)", "company" : "Ubiquiti", "industry" : "Technology", "salary" : { "min" : 950000.0, "max" : 1450000.0, "currency" : "CZK", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Mid-level Embedded Firmware Engineers in Prague, Czech Republic, adjusted for the technology industry and company size." }, "location" : "Czech Republic", "locations" : [ "Czech Republic" ], "timestamp" : "2026-06-15T03:33:13.961", "fingerprint" : "06e529d0667e0ffc380ac4cfdce747288f31c3d14c5144613d8e0271c973105b", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/ubiquiti/jobs/4091580009", "externalId" : "4091580009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Prague", "country" : "Czech Republic", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "50.0874654,14.4212535" } ], "locationText" : "Prague, Czech Republic", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "C, TCP/IP, HTTP, Websocket, TLS/SSL, Embedded Linux, RTOS, Git, OpenWRT, Yocto, NFC, BLE, Golang, MCU architecture, GPIO, USB, UART, PWM, Flash, SPI, I2C", "professionalSkills" : [ "Firmware development", "System-level issues", "Product development" ], "hardSkillsList" : [ "Firmware development", "Network protocols", "Microcontrollers", "Embedded Linux", "RTOS", "Access control systems", "Version control", "Linux application development", "Build systems", "Layer 2 networking", "Device-to-device communication", "Security best practices", "IoT security", "Secure boot", "Encrypted communication", "Key management", "NFC", "BLE", "Cryptographic algorithms", "MCU architecture", "Hardware interfaces", "Hardware protocols" ], "hardSkills" : [ { "name" : "Firmware development", "level" : "intermediate" }, { "name" : "Network protocols", "level" : "intermediate" }, { "name" : "Microcontrollers", "level" : "intermediate" }, { "name" : "Embedded Linux", "level" : "intermediate" }, { "name" : "RTOS", "level" : "intermediate" }, { "name" : "Access control systems", "level" : "intermediate" }, { "name" : "Version control", "level" : "intermediate" }, { "name" : "Linux application development", "level" : "intermediate" }, { "name" : "Build systems", "level" : "intermediate" }, { "name" : "Layer 2 networking", "level" : "intermediate" }, { "name" : "Device-to-device communication", "level" : "intermediate" }, { "name" : "Security best practices", "level" : "intermediate" }, { "name" : "IoT security", "level" : "intermediate" }, { "name" : "Secure boot", "level" : "intermediate" }, { "name" : "Encrypted communication", "level" : "intermediate" }, { "name" : "Key management", "level" : "intermediate" }, { "name" : "NFC", "level" : "intermediate" }, { "name" : "BLE", "level" : "intermediate" }, { "name" : "Cryptographic algorithms", "level" : "intermediate" }, { "name" : "MCU architecture", "level" : "intermediate" }, { "name" : "Hardware interfaces", "level" : "intermediate" }, { "name" : "Hardware protocols", "level" : "intermediate" } ], "majorSkills" : "Embedded firmware, Access control, C programming", "majorSkillsList" : [ "Embedded firmware", "Access control", "C programming" ], "coreResponsibilities" : "Develop access control products, Implement embedded firmware, Maintain embedded firmware, Enhance existing firmware, Optimize firmware performance, Optimize firmware stability, Optimize firmware security, Participate in code reviews, Ensure code quality standards, Collaborate with BSP teams, Collaborate with Hardware teams, Collaborate with Backend teams, Collaborate with Mobile teams, Collaborate with Product Assurance teams, Diagnose firmware issues, Troubleshoot firmware issues, Perform root-cause analysis, Support manufacturing validation, Resolve firmware-related issues, Assist with firmware update pipelines", "teamCollaboration" : "Global cross-functional teams; Firmware engineers; Hardware engineers; Product engineers", "domainKnowledge" : "Access control systems; IoT security; Layer 2 networking", "domainList" : [ "access-control-systems", "iot-security", "layer-2-networking" ], "domainSpecificKnowledge" : [ "Access control systems", "IoT security", "Layer 2 networking" ], "toolProficiency" : [ "Git", "OpenWRT", "Yocto" ], "innovationCreativity" : "Develop cutting-edge products", "problemSolvingSkills" : "Root-cause analysis; Troubleshoot firmware issues", "qualificationsBasic" : "3+ years embedded firmware development, C programming experience, Microcontrollers experience, SoCs experience, Embedded Linux experience, RTOS experience, Git version control system", "qualificationsPreferred" : "Linux application development experience, OpenWRT build systems experience, Yocto build systems experience, Familiarity with security best practices, Contributions to open-source embedded projects", "workSiteFlexibility" : "Hybrid", "rawDescription" : "About Ubiquiti At Ubiquiti Inc., we create technology platforms for Businesses, Smart Homes, and Internet Service Providers, driven by our goal to connect everyone, everywhere. To date, Ubiquiti has shipped over 100 million devices worldwide, from ISP networking products to next generation of IT solutions. Our growth is made possible by the dedicated team of hundreds behind the scenes. From software developers and product managers to designers and strategists, Team UI is driven to achieve our common goal: Rethinking IT. At Ubiquiti, you’ll heighten your potential and broaden your horizons - all while shaping the future of connectivity. Ubiquiti Prague R&D team is looking for experienced Embedded Firmware Engineer (Access). Candidates should be prepared to work from our Prague office at least three times per week. Responsibilities: Work as part of a global, cross-functional team of firmware, hardware, and product engineers to develop cutting-edge access control products and technologies Design, implement, and maintain embedded firmware for current and next-generation access devices (readers, hubs, controllers) Enhance and optimize existing firmware for performance, stability, and security Participate in code reviews to ensure adherence to best practices and maintain high code quality standards Collaborate closely with BSP, Hardware, Backend, Mobile, and Product Assurance (PA) teams throughout the product development lifecycle Diagnose, troubleshoot, and perform root-cause analysis of firmware and system-level issues Support manufacturing and production validation by resolving firmware-related issues and assisting with firmware update pipelines Requirement (Must-Haves): 3+ years embedded firmware development experience with C Good knowledge of network protocols (TCP/IP, HTTP, Websocket, TLS/SSL) Experience with microcontrollers, SoCs, embedded Linux and RTOS Experience with access control systems (e.g., card readers, NFC, mobile unlocking) Knowledge of Git version control system Preferred Qualifications: Experience with Linux application development and OpenWRT/Yocto build systems Good understanding of Layer 2 networking and device-to-device communication Familiarity with security best practices for IoT and access control firmware (secure boot, encrypted communication, key management) Knowledge of NFC, BLE, cryptographic algorithms, Golang, and MCU architecture is a plus Proficiency with hardware interfaces and protocols: GPIO, USB, UART, PWM, Flash, SPI, I²C, etc. Contributions to open-source embedded projects (e.g., OpenWRT, ESP-IDF, Zephyr) are a strong advantage Benefits: Competitive salary and 5 weeks of vacation per year Discretionary bonuses based on individual performance Flexible working hours, home office Top floor office with terrace and amazing view of Prague Kitchen packed with coffee, food, snacks & sodas, meal allowance, etc. A collective of developers who want to make the best product. Maximum effort to keep processes to a minimum, no complex reporting and similar habits", "summaryDescription" : "Embedded Firmware Engineer (Access) at Ubiquiti. Skills: Embedded firmware, Access control, C programming. Develop access control products. Implement embedded firmware", "postedDate" : "2026-06-14T02:13:29.954", "createdAt" : "2026-06-14T02:13:29.954", "lastUpdated" : "2026-06-15T03:33:13.961", "ingestTimestamp" : "2026-06-14T02:13:29.954", "mongoId" : "6a2c7dc474d8ee00a0950b8f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Firmware development", "Network protocols", "Microcontrollers", "Embedded Linux", "RTOS", "Access control systems", "Version control", "Linux application development", "Build systems", "Layer 2 networking", "Device-to-device communication", "Security best practices", "IoT security", "Secure boot", "Encrypted communication", "Key management", "NFC", "BLE", "Cryptographic algorithms", "MCU architecture", "Hardware interfaces", "Hardware protocols", "Embedded firmware", "Access control", "C programming", "System-level issues", "Product development", "Git", "OpenWRT", "Yocto" ], "skillCount" : 30, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 728.0721, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2aa66d74d8ee00a06b90dc", "title" : "Identity Access Management (IAM) Engineer", "company" : "Barbaricum", "salary" : { "min" : 8500000.0, "max" : 1.3E7, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Identity Access Management (IAM) Engineer in the Government industry, adjusted for a remote work mode." }, "location" : "Remote", "locations" : [ "Remote" ], "certifications" : [ "Certified Information Systems Security Professional (CISSP)", "AWS Certified Security – Specialty", "Microsoft Certified: Identity and Access Administrator Associate" ], "timestamp" : "2026-06-14T20:50:55.595", "fingerprint" : "d2f24b371b1639a8ee24d169a51ae40a4151678bbfba9ea7f7e2d084be659391", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/barbaricum/jobs/5252234008", "externalId" : "5252234008", "structuredLocations" : [ { "workMode" : "remote" } ], "locationText" : "", "minimumEducation" : "Bachelor's", "technicalSkills" : "SAML, OAuth, OpenID Connect, RBAC, MFA, AWS IAM, Microsoft Entra ID, Okta, Ping Identity", "professionalSkills" : [ "Identity governance", "Identity federation", "Zero-trust security" ], "hardSkillsList" : [ "IAM principles", "Security controls" ], "hardSkills" : [ { "name" : "IAM principles", "level" : "intermediate" }, { "name" : "Security controls", "level" : "intermediate" } ], "majorSkills" : "Identity Access Management, Cloud security, Cybersecurity", "majorSkillsList" : [ "Identity Access Management", "Cloud security", "Cybersecurity" ], "coreResponsibilities" : "Designing IAM solutions, Implementing IAM solutions, Managing IAM solutions, Ensuring secure authentication, Ensuring authorization, Ensuring identity governance, Supporting secure enterprise environments, Integrating IAM solutions", "teamCollaboration" : "Cybersecurity teams; Infrastructure teams; Application development teams", "domainKnowledge" : "DoD frameworks; DoD IL2; DoD IL4; DoD IL5; Regulated environments", "domainList" : [ "dod-frameworks", "dod-il2", "dod-il4", "dod-il5", "regulated-environments" ], "domainSpecificKnowledge" : [ "DoD frameworks", "DoD IL2", "DoD IL4", "DoD IL5", "Regulated environments" ], "specialRequirements" : "Secret DoD government clearance, Off-site position", "qualificationsBasic" : "minimum of five (5) years of equivalent experience in IAM engineering, SECRET Security Clearance", "qualificationsPreferred" : "Certified Information Systems Security Professional (CISSP), AWS Certified Security – Specialty, Microsoft Certified: Identity and Access Administrator Associate", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Barbaricum is a rapidly growing government contractor providing leading-edge support to federal customers, with a particular focus on Defense and National Security mission sets. We leverage more than 17 years of support to stakeholders across the federal government, with established and growing capabilities across Intelligence, Analytics, Engineering, Mission Support, and Communications disciplines. Founded in 2008, our mission is to transform the way our customers approach constantly changing and complex problem sets by bringing to bear the latest in technology and the highest caliber of talent. Headquartered in Washington, DC's historic Dupont Circle neighborhood, Barbaricum also has a corporate presence in Tampa, FL, Bedford, IN, and Dayton, OH, with team members across the United States and around the world. As a leader in our space, we partner with firms in the private sector, academic institutions, and industry associations with a goal of continually building our expertise and capabilities for the benefit of our employees and the customers we support. Through all of this, we have built a vibrant corporate culture diverse in expertise and perspectives with a focus on collaboration and innovation. Our teams are at the frontier of the Nation's most complex and rewarding challenges. Join our team. This position is in support of US Southern Command under the Enhanced Domain Awareness contract. Our team shall refine the processes, technology, infrastructure, and personnel necessary to transition EDA into a scalable, distributed intelligence ecosystem. Leveraging the existing EDA infrastructure, this effort enhances cyber security, structured governance, metadata lineage, and data transformation capabilities of the command. NOTE: This position is contingent upon award of contract, expected in the next 30-60 days. Job Title: IAM Engineer Position Overview The Identity and Access Management (IAM) Engineer is responsible for designing, implementing, and managing secure IAM solutions across cloud and on-premises environments. This role plays a critical part in protecting organizational assets by ensuring secure authentication, authorization, and identity governance aligned with compliance and security standards, including Department of Defense (DoD) frameworks. Supporting secure enterprise environments that span cloud and on-premises systems, the position requires close coordination across cybersecurity, infrastructure, and application development teams. This position is an off-site position and requires a Secret DoD government clearance. Knowledge, Skills, and Abilities Strong knowledge of IAM principles, frameworks, and best practices Proficiency in authentication and authorization protocols (SAML, OAuth, OpenID Connect) Experience implementing RBAC, MFA, and identity federation in hybrid environments Strong knowledge of DoD IL2, IL4, and IL5 compliance frameworks and security controls Required Experience Demonstrated experience designing and managing IAM frameworks in cloud environments (AWS and/or Azure) Experience configuring and managing identity governance and administration tools Proven experience implementing zero-trust security models Hands-on experience integrating IAM solutions across enterprise systems such as Microsoft Entra ID, Okta, Ping Identity, and AWS IAM Experience supporting compliance and security requirements within regulated environments Required Qualifications Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, or a related field or minimum of five (5) years of equivalent experience in IAM engineering. SECRET Security Clearance Preferred Certifications (Not Required) Certified Information Systems Security Professional (CISSP) AWS Certified Security – Specialty Microsoft Certified: Identity and Access Administrator Associate EEO Commitment All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.", "summaryDescription" : "Identity Access Management (IAM) Engineer at Barbaricum. Skills: Identity Access Management, Cloud security, Cybersecurity. Designing IAM solutions. Implementing IAM solutions", "postedDate" : "2026-06-11T18:38:31.891", "createdAt" : "2026-06-11T18:38:31.891", "lastUpdated" : "2026-06-14T20:50:55.595", "ingestTimestamp" : "2026-06-11T18:38:31.891", "mongoId" : "6a2aa66d74d8ee00a06b90dc", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 8500000, "salaryAnnualMax" : 13000000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "IAM principles", "Security controls", "Identity Access Management", "Cloud security", "Cybersecurity", "Identity governance", "Identity federation", "Zero-trust security", "DoD frameworks", "DoD IL2", "DoD IL4", "DoD IL5", "Regulated environments", "Certified Information Systems Security Professional (CISSP)", "AWS Certified Security – Specialty", "Microsoft Certified: Identity and Access Administrator Associate" ], "skillCount" : 16, "jobCategory" : "other", "jobSubcategory" : "cyber-intel", "dataQualityScore" : 0.7777778, "_score" : 725.01666, "daysOld" : 3, "hasLocation" : true, "hasGeo" : false }, { "id" : "6a2a635174d8ee00a0624cd6", "title" : "Senior Engineer - IT Security", "company" : "Franklin Templeton", "industry" : "Financial Services", "salary" : { "min" : 128000.0, "max" : 150000.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "Florida, United States of America", "locations" : [ "Florida, United States of America" ], "certifications" : [ "CyberArk PAM Administration", "CyberArk PAM Install and Configure", "Certified Information Systems Security Professional", "Certified Information Security Manager", "Certified in Risk and Information Systems Control" ], "timestamp" : "2026-06-12T18:36:47.878", "fingerprint" : "cb737ec16abef7ff26d108d48bca95b73d758f86d520c460ea99597422ba9c4b", "source" : "workday", "language" : "en", "applyUrl" : "https://franklintempleton.wd5.myworkdayjobs.com/Invitation-Only/job/St-Petersburg-Florida-United-States-of-America/Senior-Engineer---IT-Security_866412-2", "externalId" : "866412", "industryFunction" : { }, "locationPoint" : "41.33176,-74.35682", "structuredLocations" : [ { "city" : "St. Petersburg", "state" : "Florida", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "27.7712264,-82.6340259" } ], "locationText" : "St. Petersburg, Florida, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Perl, Python, Linux, Unix, SOAR, SIEM, CASB, AWS, Azure", "professionalSkills" : [ "Security Engineering", "Cybersecurity", "Identity Management", "Access Management", "Vulnerability Management", "Threat Management" ], "hardSkillsList" : [ "Privileged Access Management", "Security Automation", "Device Configuration", "Security Assessments", "Compliance", "Infrastructure Solutions" ], "softSkillsList" : [ "Mentoring", "Analytical skills", "Presentation skills" ], "hardSkills" : [ { "name" : "Privileged Access Management", "level" : "intermediate" }, { "name" : "Security Automation", "level" : "intermediate" }, { "name" : "Device Configuration", "level" : "intermediate" }, { "name" : "Security Assessments", "level" : "intermediate" }, { "name" : "Compliance", "level" : "intermediate" }, { "name" : "Infrastructure Solutions", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" }, { "name" : "Analytical skills" }, { "name" : "Presentation skills" } ], "majorSkills" : "Privileged Access Management, Cybersecurity", "majorSkillsList" : [ "Privileged Access Management", "Cybersecurity" ], "coreResponsibilities" : "Design privileged access management solutions, Maintain privileged access management solutions, Integrate PAM with IAM systems, Enforce least privileged access policies, Monitor privileged accounts, Manage privileged accounts, Respond to PAM incidents, Provide operational support, Serve as team lead, Offer training to team members, Offer guidance to team members, Offer support to team members, Administer security profiles, Monitor security profiles, Investigate security violations, Investigate security exceptions, Manage security tool lifecycle, Conduct security assessments, Ensure compliance, Design secure infrastructure solutions, Implement secure infrastructure solutions, Facilitate vulnerability management, Facilitate threat assessments, Maintain runbooks, Maintain playbooks, Maintain platform standards", "teamCollaboration" : "Collaborate with internal teams; Collaborate with vendors; Mentor junior team members", "domainKnowledge" : "Virtualization; Cloud Computing; Privileged Access Management; Identity and Access Management; Security Automation; SOAR; SIEM; CASB; AWS; Azure", "domainList" : [ "virtualization", "cloud-computing", "privileged-access-management", "identity-and-access-management", "security-automation", "soar", "siem", "casb", "aws", "azure" ], "domainSpecificKnowledge" : [ "Virtualization", "Cloud Computing", "Privileged Access Management", "Identity and Access Management", "Security Automation", "SOAR", "SIEM", "CASB", "AWS", "Azure" ], "toolProficiency" : [ "CyberArk" ], "communicationSkills" : "Presentation skills", "documentationSkills" : "Maintain runbooks; Maintain playbooks", "problemSolvingSkills" : "Investigate security violations; Investigate security exceptions; Facilitate vulnerability management; Facilitate threat assessments", "qualificationsBasic" : "Bachelor's degree in Computer Science, Equivalent experience, Proven experience designing secure solutions, Proven experience deploying secure solutions, Proven experience designing scalable solutions, Proven experience deploying scalable solutions, Hands-on experience in cybersecurity, Hands-on experience in identity roles", "qualificationsPreferred" : "CyberArk PAM Administration, CyberArk PAM Install and Configure, Certified Information Systems Security Professional, Certified Information Security Manager, Certified in Risk and Information Systems Control", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "At Franklin Templeton, we believe success is built through powerful partnerships. As a forward thinking asset manager, we build dynamic relationships with clients, understand their goals, and navigate complex markets together. We leverage cutting edge strategies and deep insights to unlock opportunities for long term wealth creation. Our talented, global teams bring expertise that is both broad and unique. From our welcoming, inclusive, and supportive culture to our globally diverse business, we offer opportunities not only to help you reach your potential, but also to contribute to our clients’ success. # **ABOUT THE DEPARTMENT** The Security Engineering team advances Franklin Templeton’s cybersecurity capabilities by designing, implementing, and operating enterprise security solutions that protect sensitive systems and data. The team works closely with cybersecurity, infrastructure, and application teams to enforce security policies, regulatory compliance, and least-privilege access principles. Team members collaborate across functions to integrate privileged access management (PAM) and identity and access management (IAM) solutions [expand acronym], respond to security incidents, and continuously improve security tools and processes. The environment emphasizes innovation, shared ownership, and continuous learning, offering opportunities to work on complex security challenges and deliver high-impact cybersecurity services. # **HOW YOU WILL ADD VALUE** _**Core Responsibilities**_ • You will design and maintain privileged access management solutions. • You will integrate PAM with identity and access management systems [expand acronym]. • You will enforce least privileged access policies. • You will monitor and manage privileged accounts. • You will respond to PAM-related security incidents. • You will provide day-to-day operational support to customers, projects, and PAM applications • You will serve as a team lead, offering training, guidance, and ongoing support to team members _**Security Engineering & Operations**_ • You will administer and monitor security profiles. • You will investigate security violations and exceptions. • You will manage the lifecycle of security tools. • You will conduct security assessments and ensure compliance. **_Infrastructure & Threat Management_** • You will design and implement secure infrastructure solutions. • You will facilitate vulnerability management and threat assessments. • You will maintain runbooks, playbooks, and platform standards. _**Team & Collaboration**_ • You will collaborate with internal teams and vendors. • You will mentor junior team members. # **WHAT WILL HELP YOU BE SUCCESSFUL IN THIS ROLE** _**Experience**_ • Proven experience designing and deploying secure, scalable solutions. • Hands-on experience in cybersecurity and identity roles. Education & Certifications • Bachelor’s degree in Computer Science, Information Systems, or equivalent experience. _**Technical Skills**_ • Strong knowledge of virtualization and cloud computing. • Proficiency in scripting using Perl, Python, and Linux/Unix. • Experience with security automation and device configuration. • Familiarity with SOAR, SIEM, CASB, AWS, and Azure [expand acronym]. _**Preferred Training & Certifications**_ • CyberArk PAM Administration. • CyberArk PAM Install and Configure. • Certified Information Systems Security Professional (CISSP) [expand acronym]. • Certified Information Security Manager (CISM) [expand acronym]. • Certified in Risk and Information Systems Control (CRISC) [expand acronym]. _**Soft Skills**_ • Ability to manage multiple priorities. • Strong analytical and presentation skills. # **WORK SCHEDULE & LOCATION** # St. Petersburg, FL only # Hybrid work model, 2-3 days per week in the local office. Franklin Templeton offers employees a competitive and valuable range of total rewards—monetary and non-monetary — designed to support their well-being and recognize their time, talents, and results. Along with base compensation, employees are eligible for an annual discretionary bonus, a 401(k) plan with a generous match, and recognition rewards. We also offer a comprehensive benefits package, which includes a range of competitive healthcare options, insurance, and disability benefits, employee stock investment program, learning resources, career development programs, reimbursement for certain education expenses, paid time off (vacation / holidays / sick / leave / parental & caregiving leave / bereavement / volunteering / floating holidays) and a motivational wellbeing program. We expect the annual salary range for this position to be $128,000-$150,000 depending on location and level of relevant experience, plus discretionary bonus. #LI-Hybrid At Franklin Templeton, we believe your benefits should support your life, your goals, and your future. That’s why we offer a comprehensive Total Rewards package designed to help you thrive both personally and professionally. # **Highlights of our benefits include:** \\- **Paid Time Off** : Three weeks of PTO in your first year \\- **Health Coverage** : Competitive medical, dental, and vision insurance to support your well-being -**Retirement Savings** : 401(k) plan with an 85% company match on pre-tax and/or Roth contributions, up to IRS limits \\- **Equity & Investing**: Employee Stock Investment Plan (ESIP) with discounted share purchase opportunities \\- **Learning Education Assistance Program (LEAP)** : To support your ongoing growth and career advancement \\- **Employee Investment Benefits** : Opportunity to purchase company funds with no sales charge Franklin Templeton is an Equal Opportunity Employer. We are committed to providing equal employment opportunities to all applicants and employees, and we evaluate qualified applicants without regard to ancestry, age, color, disability, genetic information, gender, gender identity, or gender expression, marital status, medical condition, military or veteran status, national origin, race, religion, sex, sexual orientation, and any other basis protected by federal, state, or local law, ordinance, or regulation.", "summaryDescription" : "Senior Engineer - IT Security at Franklin Templeton. Skills: Privileged Access Management, Cybersecurity. Design privileged access management solutions. Maintain privileged access management solutions", "postedDate" : "2026-06-10T15:02:37.834", "createdAt" : "2026-06-11T15:02:37.702", "lastUpdated" : "2026-06-12T18:36:47.878", "ingestTimestamp" : "2026-06-11T15:02:37.702", "mongoId" : "6a2a635174d8ee00a0624cd6", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://franklintempleton.wd5.myworkdayjobs.com/Invitation-Only/job/St-Petersburg-Florida-United-States-of-America/Senior-Engineer---IT-Security_866412-2", "salaryAnnualMin" : 128000, "salaryAnnualMax" : 150000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Privileged Access Management", "Security Automation", "Device Configuration", "Security Assessments", "Compliance", "Infrastructure Solutions", "Mentoring", "Analytical skills", "Presentation skills", "Cybersecurity", "Security Engineering", "Identity Management", "Access Management", "Vulnerability Management", "Threat Management", "Virtualization", "Cloud Computing", "Identity and Access Management", "SOAR", "SIEM", "CASB", "AWS", "Azure", "CyberArk PAM Administration", "CyberArk PAM Install and Configure", "Certified Information Systems Security Professional", "Certified Information Security Manager", "Certified in Risk and Information Systems Control", "CyberArk" ], "skillCount" : 29, "jobCategory" : "engineering", "seniorityLevel" : "senior", "dataQualityScore" : 1.0, "_score" : 720.2606, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services" }, { "id" : "6a2c6cb774d8ee00a091acd2", "title" : "Patient Access Manager", "company" : "Acadia Pharmaceuticals Inc.", "industry" : "Pharma", "salary" : { "min" : 95000.0, "max" : 145000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline data for a Patient Access Manager in the United States, adjusted for manager seniority and the biotech industry." }, "location" : "Tennessee - Remote", "locations" : [ "Tennessee - Remote" ], "timestamp" : "2026-06-15T08:28:33.501", "fingerprint" : "8f8c21d275dcc4f3c4e83a10a8085f7ab7c96b643b61abd357ff8d8044426e7d", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://acadia.com/en-us/careers/job-board/8585560002?gh_jid=8585560002", "externalId" : "8585560002", "industryFunction" : { }, "structuredLocations" : [ { "state" : "Tennessee", "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "Tennessee, United States", "experienceLevel" : "Manager", "professionalSkills" : [ "Sales processes", "Client relationships", "Revenue generation", "Deal closure", "Market knowledge" ], "hardSkillsList" : [ "Problem-solving", "Issue resolution", "Coverage and reimbursement" ], "hardSkills" : [ { "name" : "Problem-solving", "level" : "intermediate" }, { "name" : "Issue resolution", "level" : "intermediate" }, { "name" : "Coverage and reimbursement", "level" : "intermediate" } ], "majorSkills" : "Patient access, Reimbursement support, Market access", "majorSkillsList" : [ "Patient access", "Reimbursement support", "Market access" ], "coreResponsibilities" : "Educate healthcare providers on navigating programs, Facilitate patient access to ACADIA products, Serve as subject matter expert, Prevent and address access issues, Optimize solutions to support patient access, Deliver excellent customer experience, Build and maintain access relationships, Navigate the patient access process, Support coverage and reimbursement requirements, Conduct proactive in-services, Escalate local payer issues, Condense complex issues into simple solutions, Improve customer experience, Educate HCPs/Office Staff on coverage status, Serve as expert in assigned territory, Provide pre-referral educational in-services, Prevent coverage barriers, Provide post-referral support, Address education needs, Pull through access and coverage, Monitor referral status, Support continuity of patient access, Educate HCP offices on reauthorization, Assist with payer transitions, Offer program services, Minimize therapy interruptions, Facilitate patient reimbursement and affordability, Guide offices through prior authorizations, Guide offices through appeals, Guide offices through financial support options, Build relationships with pharmacy staff, Share key insights, Provide expertise on payer plans, Support national-level initiatives, Improve access and reimbursement strategies, Champion utilization of patient support services, Ensure compliance with legal/regulatory requirements", "teamCollaboration" : "Internal cross-functional teams; Specialty Pharmacies (SPs); Payers; Hub services; National Account Managers; PAM Leads", "domainKnowledge" : "Neurological disease; Rare disease; Parkinson's disease psychosis; Rett syndrome; Alzheimer's disease psychosis; Lewy body dementia psychosis; Payer plans; Coverage pathways; Prior authorization; Specialty pharmacy coordination; Appeals; Hub resources; Patient support services", "domainList" : [ "neurological-disease", "rare-disease", "parkinson-s-disease-psychosis", "rett-syndrome", "alzheimer-s-disease-psychosis", "lewy-body-dementia-psychosis", "payer-plans", "coverage-pathways", "prior-authorization", "specialty-pharmacy-coordination", "appeals", "hub-resources", "patient-support-services" ], "domainSpecificKnowledge" : [ "Neurological disease", "Rare disease", "Parkinson's disease psychosis", "Rett syndrome", "Alzheimer's disease psychosis", "Lewy body dementia psychosis", "Payer plans", "Coverage pathways", "Prior authorization", "Specialty pharmacy coordination", "Appeals", "Hub resources", "Patient support services" ], "problemSolvingSkills" : "Problem-solving; Issue resolution", "specialRequirements" : "Frequent travel", "qualificationsBasic" : "4+ years relevant experience, Deep expertise in access and reimbursement strategies, Medicare expertise strongly preferred", "qualificationsPreferred" : "Education concentration in life sciences preferred, Advanced degrees (RN, MSN, MBA) are a plus, Background and understanding of field environment in healthcare industry", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "About Acadia Pharmaceuticals Acadia is committed to turning scientific promise into meaningful innovation that makes the difference for underserved neurological and rare disease communities around the world. Our commercial portfolio includes the first and only FDA-approved treatments for Parkinson’s disease psychosis and Rett syndrome. We are developing the next wave of therapeutic advancements with a robust and diverse pipeline that includes mid- to late-stage programs in Alzheimer’s disease psychosis and Lewy body dementia psychosis, along with earlier-stage programs that address other underserved patient needs. At Acadia, we’re here to be their difference. Seeking talent near: Nashville, TN; Jackson, TN; Chattanooga, TN Position Summary: The Patient Access Manager (PAM) will provide expert field-based access and reimbursement support, serving as a dedicated point of contact to healthcare providers (HCPs) for their on-label access-related questions regarding company products. This field-based role acts as a critical liaison among HCPs, Specialty Pharmacies (SPs), payers, patients, hub services, and internal cross-functional teams. As a coverage and access subject matter expert, the PAM is integral to ensure patients have timely access to treatment by providing support for customers in an assigned geographic territory. This role requires frequent travel to support the access needs of key stakeholders. PAM is a non-promotional role within ACADIA and adheres to all ACADIA-approved compliance guidelines, including the role-specific Rules of Engagement. Key Responsibilities: Proactively educate healthcare providers on navigating programs, processes, and access-related requirements to facilitate patient access to ACADIA products via in-person and virtual interactions. Serve as the subject matter expert in preventing and addressing access and reimbursement issues through education, problem-solving, and issue resolution ensuring solutions are optimized to support the patient’s access journey and deliver excellent customer experience. Proactively build and maintain access-related relationships with HCP accounts and their office support staff. Demonstrate deep market knowledge and apply this to navigating the patient access process, building and maintaining access-related knowledge, and supporting coverage and reimbursement requirements. Conduct proactive in-services with HCPs on all aspects of the access journey, including but not limited to coverage pathways, prior authorization, specialty pharmacy coordination, appeals, hub resources, and patient support services. Escalate local payer issues to National Account Managers and PAM Leads. Condense complex issues into simple solutions by collaborating cross-functionally to improve customer experience, educate HCPs/Office Staff on coverage status, prior authorization, and appeals. Demonstrate deep knowledge of ACADIA customer support programs and serve as the expert in the assigned territory. Provide proactive pre-referral educational in-services to prevent coverage barriers before referral. Provide post-referral support to HCP offices by addressing education needs, pulling through access and coverage for patients, and coordinating with ACADIA customer support programs and specialty pharmacies to monitor referral status Support continuity of patient access by proactively educating HCP offices on reauthorization requirements, assisting with payer transitions, and offering program services to minimize therapy interruptions. Facilitate patient reimbursement and affordability by guiding offices through prior authorizations, appeals, and financial support options. Build relationships with pharmacy staff and share key insights. Provide expertise on regional and national payer plans to team members and PAM Leads. Support development and implementation of national-level initiatives to improve access and reimbursement strategies across brands. Champion and manage appropriate utilization of patient support services and ensure compliance with legal/regulatory requirements. Education concentration in life sciences preferred. Advanced degrees (RN, MSN, MBA) are a plus. Minimum of 4+ years of relevant experience in pharmaceutical sales, market access, national accounts, or specialty pharmacy. Deep expertise in access and reimbursement strategies. Medicare expertise strongly preferred with a strong background and understanding of field environment in healthcare industry. Equivalent combination of relevant education and applicable job experience may be considered. Key Skills: Strong history of successful cross functional collaboration. Demonstrated success in leading without authority. Experience working with provider offices such as physician practice, patient assistance programs, or similar pharmaceutical support programs strongly preferred. Patient-centric and service-oriented mindset. Exemplary interpersonal skills. Must display a patient-centric mentality with a high degree of emotional intelligence and empathy. Empathetic listening skills in order to interact effectively with customers. Exceptional organizational and time management skills. Understand HIPAA rules and regulations related to patient privacy. Strong written and verbal communications as well as presentation skills. Strong computer skills, including knowledge of Microsoft Office products including Outlook, Excel, Word and Power Point. Ability to manage expenses within allocated budgets. Adaptable and open to an environment of change. Must be a fast learner, flexible, adjust quickly, and able to work independently. Strong enthusiasm with a drive to succeed within a team. Ability to travel up to 60%. Position Levels: Patient Access Manager: $136,000.00-$170,000.00 Minimum of 4+ years of relevant experience in pharmaceutical sales, market access, national accounts, or specialty pharmacy. Deep expertise in access and reimbursement strategies. Senior Patient Access Manager: $152,000.00-$190,000.00 Minimum of 7+ years of relevant experience, including at least 2 years in neurology access or leadership roles (e.g., market access, patient access, national accounts, sales management, or access leadership). Physical Requirements: While performing the duties of this job, the employee is regularly required to stand; walk; sit; use hands to finger, handle, or feel; reach with hands and arms; climb or balance; stoop, kneel, crouch, see, talk or hear in a standard office environment. Employee must occasionally lift and/or move up to 20 pounds. #LI-SM1 #LI-REMOTE In addition to a competitive base salary, this position is also eligible for discretionary bonus and equity awards based on factors such as individual and organizational performance. Actual amounts will vary depending on experience, performance, and location. Salary Range $128,000—$160,000 USD What we offer US-based Employees: Competitive base, bonus, new hire and ongoing equity packages Medical, dental, and vision insurance Employer-paid life, disability, business travel and EAP coverage 401(k) Plan with a fully vested company match 1:1 up to 5% Employee Stock Purchase Plan with a 2-year purchase price lock-in 15+ vacation days 13 -15 paid holidays, including office closure between December 24th and January 1st 10 days of paid sick time Paid parental leave benefit Tuition assistance EEO Statement (US-based Employees): Studies have shown that women and people of color are less likely to apply for jobs unless they believe they meet every one of the qualifications in the exact way they are described in job postings. We are committed to building a diverse, equitable, inclusive, and innovative company, and we are looking for the BEST candidate for the job. That candidate may be one who comes from a less traditional background or may meet the qualifications in a different way. We strongly encourage you to apply, especially if the reason you are the best candidate isn’t exactly what we describe here. It is the policy of Acadia to provide equal employment opportunities to all employees and employment applicants without regard to considerations of race, including related to hairstyle, color, religion or religious creed, sexual orientation, gender, gender identity, gender expression, gender transition, country of origin, ancestry, citizenship, age, physical or mental disability, genetic information, legally-protected medical condition or information, marital status, domestic partner status, family care status, military caregiver status, veteran or military status (including reserve status, National Guard status, and military service or obligation), status as a victim of domestic violence, sexual assault or stalking, enrollment in a public assistance program, or any basis protected under federal, state or local law. As an equal opportunity employer, Acadia is committed to a diverse workforce. If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation. Furthermore, you may request additional support if you are unable or limited in your ability to use or access Acadia’s career website due to your disability, along with any accommodations throughout the interview process. To request or inquire about your reasonable accommodation, please complete our Reasonable Accommodation Request Form or contact us at talentacquisition@acadia-pharm.com or 858-261-2923. Please note that reasonable accommodations granted throughout the recruiting process are not guaranteed to be the same accommodations given if hired. A new request will need to be submitted for any ADA accommodations after starting employment. California Applicants: Please see Additional Information for California Residents within our Privacy Policy. Canadian Applicants: Please see Additional Information for Canadian Residents within our Privacy Policy. Applicants in the European Economic Area, Switzerland, the United Kingdom, and Serbia: Please see Additional Information for Individuals in the European Economic Area, Switzerland, the United Kingdom, and Serbia within our Privacy Policy. Notice to Search Firms/Third-Party Recruitment Agencies (Recruiters): The Talent Acquisition team manages the recruitment and employment process for Acadia Pharmaceuticals Inc. (“Acadia”). Acadia does not accept resumes from recruiters or search firms without an executed search agreement in place. Resumes sent to Acadia employees in the absence of an executed search agreement will not obligate Acadia in any way with respect to the future employment of those individuals or potential remuneration to any recruiter or search firm. Candidates should never be submitted directly to our hiring managers or employees.", "summaryDescription" : "Patient Access Manager at Acadia Pharmaceuticals Inc.. Skills: Patient access, Reimbursement support, Market access. Educate healthcare providers on navigating programs. Facilitate patient access to ACADIA products", "postedDate" : "2026-06-14T03:31:43.685", "createdAt" : "2026-06-14T03:31:43.685", "lastUpdated" : "2026-06-15T08:28:33.501", "ingestTimestamp" : "2026-06-14T03:31:43.685", "mongoId" : "6a2c6cb774d8ee00a091acd2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 95000, "salaryAnnualMax" : 145000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Problem-solving", "Issue resolution", "Coverage and reimbursement", "Patient access", "Reimbursement support", "Market access", "Sales processes", "Client relationships", "Revenue generation", "Deal closure", "Market knowledge", "Neurological disease", "Rare disease", "Parkinson's disease psychosis", "Rett syndrome", "Alzheimer's disease psychosis", "Lewy body dementia psychosis", "Payer plans", "Coverage pathways", "Prior authorization", "Specialty pharmacy coordination", "Appeals", "Hub resources", "Patient support services" ], "skillCount" : 24, "jobCategory" : "sales", "jobSubcategory" : "revenue", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "_score" : 682.3974, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Biotech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2da98474d8ee00a0c794df", "title" : "Commercial Lead & Market Access Operations", "company" : "IQVIA", "industry" : "Pharma", "salary" : { "min" : 500000.0, "max" : 570000.0, "currency" : "PLN", "frequency" : "yearly", "is_estimated" : false }, "location" : "Warsaw, Poland", "locations" : [ "Warsaw, Poland" ], "timestamp" : "2026-06-16T05:18:36.197", "fingerprint" : "73978b6fc0d346af5293ff5d718bdb1075517440ed0ba62e093e82266985f682", "source" : "workday", "language" : "en", "applyUrl" : "https://iqvia.wd1.myworkdayjobs.com/IQVIA/job/Warsaw-Poland/Commercial-Lead---Market-Access-Operations_R1550751", "externalId" : "R1550751", "industryFunction" : { }, "locationPoint" : "52.22977,21.01178", "structuredLocations" : [ { "city" : "Warsaw", "country" : "Poland", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "52.2333742,21.0711489" } ], "locationText" : "Warsaw, Poland", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 7, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "professionalSkills" : [ "Market access strategy", "Tender excellence", "Portfolio growth", "Pricing strategies", "Forecasting", "Distributor management" ], "hardSkillsList" : [ "P&L management", "KPI performance" ], "hardSkills" : [ { "name" : "P&L management", "level" : "intermediate" }, { "name" : "KPI performance", "level" : "intermediate" } ], "majorSkills" : "Commercial leadership, Market access, Tender strategy, Biosimilars", "majorSkillsList" : [ "Commercial leadership", "Market access", "Tender strategy", "Biosimilars" ], "coreResponsibilities" : "Lead market access strategy across Poland, Lead market access strategy across Baltic markets, Lead tender strategy across Poland, Lead tender strategy across Baltic markets, Develop competitive pricing strategies, Execute competitive pricing strategies, Develop data-driven pricing strategies, Execute data-driven pricing strategies, Drive formulary inclusion, Drive therapeutic switching, Own regional P&L, Own forecasting, Ensure sustainable growth, Ensure cost control, Build relationships with KOLs, Provide strategic oversight to distributor sales teams, Monitor local healthcare policies, Contribute to market shaping initiatives, Contribute to tender frameworks", "teamCollaboration" : "Distributor sales teams", "domainKnowledge" : "Biosimilars portfolio; Immunology; Oncology; Haematology; Ophthalmology; Tender-driven healthcare; National drug programs; Polish NFZ system; Baltic healthcare markets", "domainList" : [ "biosimilars-portfolio", "immunology", "oncology", "haematology", "ophthalmology", "tender-driven-healthcare", "national-drug-programs", "polish-nfz-system", "baltic-healthcare-markets" ], "domainSpecificKnowledge" : [ "Biosimilars portfolio", "Immunology", "Oncology", "Haematology", "Ophthalmology", "Tender-driven healthcare", "National drug programs", "Polish NFZ system", "Baltic healthcare markets" ], "outcomesObjectives" : "Drive biosimilar adoption; Secure formulary access; Maximize volume; Protect profitability; Ensure alignment; Capability development; Performance against KPIs", "qualificationsBasic" : "Degree in Life Sciences, Pharmacy, Business, or Economics, 7–10+ years’ experience in pharmaceutical commercial or market access roles, Track record in biosimilars, Track record in tender-based environments, Proven success winning complex, high-value tenders, Deep understanding of the Polish NFZ system, Deep understanding of Baltic healthcare markets, Experience leading matrix or indirect teams, Fluent in English, Fluent in Polish", "qualificationsPreferred" : "Baltic language skills are advantageous", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "**Location:** Poland **Region Covered:** Poland, Baltics & Nordics **Industry:** Pharmaceutical / Biosimilars We are supporting our client in the appointment of a Commercial Lead & Market Access Operations professional to drive the continued growth of their biosimilars portfolio across Northern Eastern Europe and the Nordics. This is a high-impact, senior-level opportunity combining commercial leadership, market access strategy, and tender excellence within a complex and highly competitive environment. ### **The Role** You will take full ownership of commercial performance across the region, leading market access execution, tender strategy, and portfolio growth across multiple therapeutic areas including immunology, oncology, haematology, and ophthalmology. Operating in a tender-driven healthcare landscape, you will play a critical role in driving biosimilar adoption, securing formulary access, and maximizing volume while protecting profitability. ### **Key Responsibilities** * Lead market access and tender strategy across Poland and the Baltic markets, including national and hospital-level tenders * Develop and execute competitive, data-driven pricing strategies in line with regulatory frameworks * Drive formulary inclusion and therapeutic switching within hospitals and national drug programs * Own regional P&L and forecasting, ensuring sustainable growth and cost control * Build strong relationships with Key Opinion Leaders (KOLs) across multiple therapy areas * Provide strategic oversight to third-party distributor sales teams, ensuring alignment, capability development, and performance against KPIs * Monitor local healthcare policies and contribute to market shaping initiatives and tender frameworks ### **Your Background** * Degree in Life Sciences, Pharmacy, Business, or Economics * 7–10+ years’ experience in pharmaceutical commercial or market access roles within the region * Strong track record in biosimilars and tender-based environments * Proven success winning complex, high-value tenders * Deep understanding of the Polish NFZ system and Baltic healthcare markets * Experience leading matrix or indirect teams (e.g., wholesalers/distributors) * Fluent in English and Polish (Baltic language skills are advantageous) ### **Why Apply?** * Opportunity to lead a strategically critical region within a growing biosimilars portfolio * Significant ownership and autonomy, including full P&L responsibility * Work at the forefront of market access innovation and healthcare transformation * Be part of a company driving access to life-changing biologic therapies across Europe #LI-DNI IQVIA is a leading global provider of clinical research services, commercial insights and healthcare intelligence to the life sciences and healthcare industries. We create intelligent connections to accelerate the development and commercialization of innovative medical treatments to help improve patient outcomes and population health worldwide. Learn more at [https://jobs.iqvia.com](https://jobs.iqvia.com/) IQVIA is committed to integrity in our hiring process and maintains a zero tolerance policy for candidate fraud. All information and credentials submitted in your application must be truthful and complete. Any false statements, misrepresentations, or material omissions during the recruitment process will result in immediate disqualification of your application, or termination of employment if discovered later, in accordance with applicable law. We appreciate your honesty and professionalism. The potential base pay range for this role is 500,000 - 570,000 annually. The actual base pay offered may vary based on a number of factors including job-related qualifications such as knowledge, skills, education, and experience; location; and/or schedule (full or part-time). Dependent on the position offered, incentive plans, bonuses, and/or other forms of compensation may be offered, in addition to a range of health and welfare and/or other benefits.", "summaryDescription" : "Commercial Lead & Market Access Operations at IQVIA. Skills: Commercial leadership, Market access, Tender strategy, Biosimilars. Lead market access strategy across Poland. Lead market access strategy across Baltic markets", "postedDate" : "2026-06-12T18:59:13.528", "createdAt" : "2026-06-14T18:59:13.503", "lastUpdated" : "2026-06-16T05:18:36.197", "ingestTimestamp" : "2026-06-14T18:59:13.503", "mongoId" : "6a2da98474d8ee00a0c794df", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://iqvia.wd1.myworkdayjobs.com/IQVIA/job/Warsaw-Poland/Commercial-Lead---Market-Access-Operations_R1550751", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "P&L management", "KPI performance", "Commercial leadership", "Market access", "Tender strategy", "Biosimilars", "Market access strategy", "Tender excellence", "Portfolio growth", "Pricing strategies", "Forecasting", "Distributor management", "Biosimilars portfolio", "Immunology", "Oncology", "Haematology", "Ophthalmology", "Tender-driven healthcare", "National drug programs", "Polish NFZ system", "Baltic healthcare markets" ], "skillCount" : 21, "jobCategory" : "sales", "jobSubcategory" : "revenue", "seniorityLevel" : "mid", "dataQualityScore" : 1.0, "_score" : 672.41156, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Pharma", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c810274d8ee00a095921b", "title" : "Identity and Access Management Engineer", "company" : "Signode", "industry" : "Packaging And Containers", "salary" : { "min" : 70000.0, "max" : 85000.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "Tampa, FL, United States", "locations" : [ "Tampa", "FL", "United States" ], "timestamp" : "2026-06-15T06:38:40.414", "fingerprint" : "2facc926e378064a7790be12eba5ae07afb2bf784bfad61181950f4a8e7b618f", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Signode/3743990013555396-identity-and-access-management-engineer", "externalId" : "3743990013555396", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tampa", "state" : "Florida", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "27.9449854,-82.4583107" } ], "locationText" : "Tampa, Florida, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "not-applicable", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Signode, the Transit Packaging division of Crown Holdings, Inc. (NYSE: CCK), has its global headquarters in Tampa, Florida. Signode is a global leader in transit packaging, with over 80 manufacturing facilities across six continents and more than 7,000 workers worldwide. With over $2B in revenue, 80+ manufacturing facilities across 6 continents, Signode is a leading manufacturer of a broad spectrum of transit packaging consumables, tools, software, and equipment that optimize end-of-line packaging operations and protect products in transit. Signode brings this extensive product portfolio together under hundreds of trusted brands to offer complete transit packaging solutions to its customers. We produce strap, stretch and protective packaging. We also manufacture packaging tools and equipment used to apply the bulk packaging materials. These commercial packaging products are used to pack, bundle, unitize, protect and secure goods during warehousing and transit. Our company is a materials, processes and automation technology that have revolutionized the sector. Benefits: Signode offers a comprehensive benefits package to full-time employees, which includes health, dental, vision, 401k, paid time off, life insurance, wellness perks, and more. Benefits begin the month following the hire date. Salary: The annual salary for this position ranges from $70,000 - $85,000 and varies based on specific responsibilities and geographic location. Starting annual salary within this range will be determined based on the candidate's experience, qualifications, and/or skillset. Summary: We are seeking an entry-level to intermediate Identity and Access Management Engineer to join our global IT Cloud Services team. This role is ideal for a soon-to-be or recent college graduate who enjoys development, scripting, and automation, and who wants to grow their career at the intersection of software development, cloud, and identity security. The position pairs up with two members of our global operations team to make the global Identity & Access Management (IAM) team. This key IAM role will report directly to our Global IT Director of Cloud Services. Essential Functions: As an entry-Level to intermediate Identity Management Engineer, you will join the Identity & Access Management (IAM) team and help build, automate, and improve systems that manage digital identities across the organization. This role is hands-on and development‑focused, where you will write code, build integrations, and automate workflows that support user onboarding, access management, and security. You will work closely with the management team and Operations Specialists while gaining exposure to real-world enterprise systems such as Active Directory, Entra ID (Azure AD), cloud services, and SaaS platforms. Development & Automation Focus * Write scripts and tools (PowerShell, Python, LotusScript, JavaScript, or similar) to automate identity-related processes * Build and improve workflows for onboarding, offboarding, and access changes * Integrate identity platforms with HR systems and business applications * Assist in developing APIs, connectors, and automation jobs that reduce manual work Identity & Cloud Foundations * Support Active Directory and Entra ID environments * Help manage authentication methods such as SSO, MFA, and role-based access * Learn how enterprise identity systems connect to cloud and SaaS platforms * Assist with maintaining secure, standardized identity configurations Learning & Growth * Learn best industry practices for Identity & Access Management (IAM) * Contribute to technical documentation and standard operating procedures * Participate in Global team design discussions and continuous improvement efforts * Gain exposure to compliance, security, and change‑management processes ## Qualifications Education: * Bachelor’s degree in computer science, Information Systems, Software Engineering, Cybersecurity, or equivalent experience in the field. * Students graduating soon or recent graduates are encouraged to apply Experience: * Strong programming fundamentals and problem‑solving skills * Experience with scripting or development (PowerShell, Python, JavaScript, or similar) * Understanding of basic software development concepts (functions, APIs, version control) * Interest in automation, systems integration, and cloud technologies Bonus Skils (Nice to Have, Not Required) * Exposure to Active Directory, Azure, or cloud platforms * Familiarity with REST APIs, JSON, Postman, XML, HTML * Familiar with authentication concepts * Familiar with ITIL and ISO best practices and the implementation of such practices in the Identity space * Internship, lab projects, GitHub work, or personal automation projects Functional Success Drivers: These competencies are what we require for an individual to be successful in this role. * Good Analytical Skills * Highly Creative * Detail Oriented * Acts with Integrity * Good Team Player * Good Communicator (Verbal & Written) ## Additional Information All your information will be kept confidential according to EEO guidelines. The Company does not sponsor for employment-based visas for this position now or in the future. Reasonable Accommodation Statement To perform this job successfully, the individual must be able to perform each essential duty satisfactorily. Reasonable Accommodations may be made to enable qualified individuals with disabilities. Signode is committed to providing equal opportunities to all qualified applicants, including providing reasonable accommodations during our recruiting process. If you need any assistance or accommodation in applying for this position, please contact us at HRRecruiting@Signode.com. The Company has reviewed this job description to ensure that essential functions and basic duties have been included. It is intended to provide guidelines for job expectations and the employee's ability to perform the position described. It is not intended to be construed as an exhaustive list of all functions, responsibilities, skills and abilities. Additional functions and requirements may be assigned by supervisors as deemed appropriate. This document does not represent a contract of employment, and the Company reserves the right to change this job description and/or assign tasks for the employee to perform, as the Company may deem appropriate. Signode participates in E-Verify and will provide the Department of Homeland Security your Form I-9 information to confirm your authorization to work in the United States. Signode Industrial Group, LLC is an Equal Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status.", "summaryDescription" : "Identity and Access Management Engineer at Signode", "postedDate" : "2026-06-10T13:15:37.000", "createdAt" : "2026-06-13T18:37:51.350", "lastUpdated" : "2026-06-15T06:38:40.414", "ingestTimestamp" : "2026-06-13T18:37:51.350", "mongoId" : "6a2c810274d8ee00a095921b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 70000, "salaryAnnualMax" : 85000, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Entry", "dataQualityScore" : 0.8888889, "_score" : 666.60474, "daysOld" : 4, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Manufacturing", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2caf5874d8ee00a09d6ae3", "title" : "Identity and Access Management Engineer", "company" : "Signode", "industry" : "Packaging And Containers", "salary" : { "min" : 70000.0, "max" : 85000.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "Tampa, FL, United States", "locations" : [ "Tampa", "FL", "United States" ], "timestamp" : "2026-06-15T06:54:54.704", "fingerprint" : "2a6d2039eed6a64ed79665ff1a54e032e897ceb2f3debaecc507e118083bfcee", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Signode/3743990013555396-identity-and-access-management-engineer", "externalId" : "3743990013555396", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tampa", "state" : "Florida", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "27.9449854,-82.4583107" } ], "locationText" : "Tampa, Florida, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "not-applicable", "technicalSkills" : "PowerShell, Python, LotusScript, JavaScript, Active Directory, Entra ID, Azure AD, Cloud services, SaaS platforms, APIs, SSO, MFA", "professionalSkills" : [ "Systems integration", "Automation workflows" ], "hardSkillsList" : [ "Identity management", "Access management", "User onboarding", "User offboarding", "Access changes", "Authentication methods", "Role-based access" ], "softSkillsList" : [ "Analytical Skills", "Creative", "Communicator" ], "hardSkills" : [ { "name" : "Identity management", "level" : "intermediate" }, { "name" : "Access management", "level" : "intermediate" }, { "name" : "User onboarding", "level" : "intermediate" }, { "name" : "User offboarding", "level" : "intermediate" }, { "name" : "Access changes", "level" : "intermediate" }, { "name" : "Authentication methods", "level" : "intermediate" }, { "name" : "Role-based access", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Analytical Skills" }, { "name" : "Creative" }, { "name" : "Communicator" } ], "majorSkills" : "Cloud Services, Software Development, Identity Security", "majorSkillsList" : [ "Cloud Services", "Software Development", "Identity Security" ], "coreResponsibilities" : "Build automate improve systems, Manage digital identities, Write code, Build integrations, Automate workflows, Support user onboarding, Support access management, Support security, Support Active Directory, Support Entra ID, Manage authentication methods, Maintain secure configurations, Maintain standardized configurations, Contribute to technical documentation, Contribute to standard operating procedures, Participate in design discussions, Participate in continuous improvement", "teamCollaboration" : "Global IT Cloud Services team; Global operations team; Global Identity & Access Management team; Management team; Global team design discussions", "domainKnowledge" : "Identity and Access Management; Cloud; Identity security; Enterprise identity systems; ITIL; ISO best practices", "domainList" : [ "identity-and-access-management", "cloud", "identity-security", "enterprise-identity-systems", "itil", "iso-best-practices" ], "domainSpecificKnowledge" : [ "Identity and Access Management", "Cloud", "Identity security", "Enterprise identity systems", "ITIL", "ISO best practices" ], "toolProficiency" : [ "Postman" ], "communicationSkills" : "Verbal; Written", "documentationSkills" : "Technical documentation; Standard operating procedures", "continuousLearning" : "Learn best industry practices; Gain exposure to compliance; Gain exposure to security; Gain exposure to change-management", "innovationCreativity" : "Highly Creative", "problemSolvingSkills" : "Problem-solving skills; Analytical Skills", "qualificationsBasic" : "Bachelor’s degree in computer science, Equivalent experience in the field, Programming fundamentals, Problem-solving skills, Experience with scripting or development, Basic software development concepts", "qualificationsPreferred" : "Exposure to Active Directory, Exposure to Azure, Exposure to cloud platforms, Familiarity with REST APIs, Familiarity with JSON, Familiarity with Postman, Familiarity with XML, Familiarity with HTML, Familiar with authentication concepts, Familiar with ITIL, Familiar with ISO best practices, Internship, Lab projects, GitHub work, Personal automation projects", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Signode, the Transit Packaging division of Crown Holdings, Inc. (NYSE: CCK), has its global headquarters in Tampa, Florida. Signode is a global leader in transit packaging, with over 80 manufacturing facilities across six continents and more than 7,000 workers worldwide. With over $2B in revenue, 80+ manufacturing facilities across 6 continents, Signode is a leading manufacturer of a broad spectrum of transit packaging consumables, tools, software, and equipment that optimize end-of-line packaging operations and protect products in transit. Signode brings this extensive product portfolio together under hundreds of trusted brands to offer complete transit packaging solutions to its customers. We produce strap, stretch and protective packaging. We also manufacture packaging tools and equipment used to apply the bulk packaging materials. These commercial packaging products are used to pack, bundle, unitize, protect and secure goods during warehousing and transit. Our company is a materials, processes and automation technology that have revolutionized the sector. Benefits: Signode offers a comprehensive benefits package to full-time employees, which includes health, dental, vision, 401k, paid time off, life insurance, wellness perks, and more. Benefits begin the month following the hire date. Salary: The annual salary for this position ranges from $70,000 - $85,000 and varies based on specific responsibilities and geographic location. Starting annual salary within this range will be determined based on the candidate's experience, qualifications, and/or skillset. Summary: We are seeking an entry-level to intermediate Identity and Access Management Engineer to join our global IT Cloud Services team. This role is ideal for a soon-to-be or recent college graduate who enjoys development, scripting, and automation, and who wants to grow their career at the intersection of software development, cloud, and identity security. The position pairs up with two members of our global operations team to make the global Identity & Access Management (IAM) team. This key IAM role will report directly to our Global IT Director of Cloud Services. Essential Functions: As an entry-Level to intermediate Identity Management Engineer, you will join the Identity & Access Management (IAM) team and help build, automate, and improve systems that manage digital identities across the organization. This role is hands-on and development‑focused, where you will write code, build integrations, and automate workflows that support user onboarding, access management, and security. You will work closely with the management team and Operations Specialists while gaining exposure to real-world enterprise systems such as Active Directory, Entra ID (Azure AD), cloud services, and SaaS platforms. Development & Automation Focus * Write scripts and tools (PowerShell, Python, LotusScript, JavaScript, or similar) to automate identity-related processes * Build and improve workflows for onboarding, offboarding, and access changes * Integrate identity platforms with HR systems and business applications * Assist in developing APIs, connectors, and automation jobs that reduce manual work Identity & Cloud Foundations * Support Active Directory and Entra ID environments * Help manage authentication methods such as SSO, MFA, and role-based access * Learn how enterprise identity systems connect to cloud and SaaS platforms * Assist with maintaining secure, standardized identity configurations Learning & Growth * Learn best industry practices for Identity & Access Management (IAM) * Contribute to technical documentation and standard operating procedures * Participate in Global team design discussions and continuous improvement efforts * Gain exposure to compliance, security, and change‑management processes ## Qualifications Education: * Bachelor’s degree in computer science, Information Systems, Software Engineering, Cybersecurity, or equivalent experience in the field. * Students graduating soon or recent graduates are encouraged to apply Experience: * Strong programming fundamentals and problem‑solving skills * Experience with scripting or development (PowerShell, Python, JavaScript, or similar) * Understanding of basic software development concepts (functions, APIs, version control) * Interest in automation, systems integration, and cloud technologies Bonus Skils (Nice to Have, Not Required) * Exposure to Active Directory, Azure, or cloud platforms * Familiarity with REST APIs, JSON, Postman, XML, HTML * Familiar with authentication concepts * Familiar with ITIL and ISO best practices and the implementation of such practices in the Identity space * Internship, lab projects, GitHub work, or personal automation projects Functional Success Drivers: These competencies are what we require for an individual to be successful in this role. * Good Analytical Skills * Highly Creative * Detail Oriented * Acts with Integrity * Good Team Player * Good Communicator (Verbal & Written) ## Additional Information All your information will be kept confidential according to EEO guidelines. The Company does not sponsor for employment-based visas for this position now or in the future. Reasonable Accommodation Statement To perform this job successfully, the individual must be able to perform each essential duty satisfactorily. Reasonable Accommodations may be made to enable qualified individuals with disabilities. Signode is committed to providing equal opportunities to all qualified applicants, including providing reasonable accommodations during our recruiting process. If you need any assistance or accommodation in applying for this position, please contact us at HRRecruiting@Signode.com. The Company has reviewed this job description to ensure that essential functions and basic duties have been included. It is intended to provide guidelines for job expectations and the employee's ability to perform the position described. It is not intended to be construed as an exhaustive list of all functions, responsibilities, skills and abilities. Additional functions and requirements may be assigned by supervisors as deemed appropriate. This document does not represent a contract of employment, and the Company reserves the right to change this job description and/or assign tasks for the employee to perform, as the Company may deem appropriate. Signode participates in E-Verify and will provide the Department of Homeland Security your Form I-9 information to confirm your authorization to work in the United States. Signode Industrial Group, LLC is an Equal Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status.", "summaryDescription" : "Identity and Access Management Engineer at Signode. Skills: Cloud Services, Software Development, Identity Security. Build automate improve systems. Manage digital identities", "postedDate" : "2026-06-10T13:15:37.000", "createdAt" : "2026-06-13T23:19:49.314", "lastUpdated" : "2026-06-15T06:54:54.704", "ingestTimestamp" : "2026-06-13T23:19:49.314", "mongoId" : "6a2caf5874d8ee00a09d6ae3", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 70000, "salaryAnnualMax" : 85000, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ "Identity management", "Access management", "User onboarding", "User offboarding", "Access changes", "Authentication methods", "Role-based access", "Analytical Skills", "Creative", "Communicator", "Cloud Services", "Software Development", "Identity Security", "Systems integration", "Automation workflows", "Identity and Access Management", "Cloud", "Identity security", "Enterprise identity systems", "ITIL", "ISO best practices", "Postman" ], "skillCount" : 22, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Entry", "dataQualityScore" : 1.0, "_score" : 665.72314, "daysOld" : 4, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Manufacturing", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c6cf074d8ee00a091c5a9", "title" : "Manager, Accessibility Services", "company" : "accessiBe", "industry" : "Technology", "salary" : { "min" : 120000.0, "max" : 140000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "1140 Broadway, 14th Floor, New York, NY 10001-7504, USA", "locations" : [ "1140 Broadway", "14th Floor", "New York", "NY 10001-7504", "USA" ], "timestamp" : "2026-06-15T08:11:56.431", "fingerprint" : "9c1a3d7d172c848d3f17a587b00ae6e85be3cc98d4149ab684d904e0b8efbcc4", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/accessibe/jobs/4873331101", "externalId" : "4873331101", "industryFunction" : { }, "structuredLocations" : [ { "city" : "New York", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "remote", "geo" : "40.7127281,-74.0060152" } ], "locationText" : "New York, New York, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "professionalSkills" : [ "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement" ], "hardSkillsList" : [ "VPAT creation", "Accessibility consulting", "Accessibility training" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "VPAT creation", "level" : "intermediate" }, { "name" : "Accessibility consulting", "level" : "intermediate" }, { "name" : "Accessibility training", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Web accessibility, Service delivery, Team leadership", "majorSkillsList" : [ "Web accessibility", "Service delivery", "Team leadership" ], "coreResponsibilities" : "Lead team of Accessibility Experts, Mentor team of Accessibility Experts, Manage team of Accessibility Experts, Oversee end-to-end delivery of accessibility services, Build scalable delivery processes, Build efficient delivery processes, Establish auditing practices, Refine auditing practices, Establish auditing frameworks, Refine auditing frameworks, Establish auditing tools, Refine auditing tools, Ensure best-in-class customer experience, Manage external vendors, Collaborate with external vendors, Manage external contractors, Collaborate with external contractors, Manage ecosystem partners, Collaborate with ecosystem partners, Align service delivery with customer needs, Partner with R&D, Partner with Product, Bring accessibility insights into product direction, Bring accessibility insights into innovation, Support Sales teams, Provide technical expertise to Sales, Provide scoping to Sales, Provide thought leadership to Sales, Develop GTM strategies, Drive company-wide accessibility knowledge, Drive company-wide accessibility standards, Drive company-wide accessibility practices, Design accessibility training for internal teams, Deliver accessibility training for internal teams, Promote accessibility-first culture", "teamCollaboration" : "Cross-functional collaboration; Customer-facing teams alignment; Sales team support; Product and R&D partnership", "domainKnowledge" : "Web accessibility; WCAG; Section 508; EAA; ARIA", "domainList" : [ "web-accessibility", "wcag", "section-508", "eaa", "aria" ], "domainSpecificKnowledge" : [ "Web accessibility", "WCAG", "Section 508", "EAA", "ARIA" ], "communicationSkills" : "Thought leadership", "documentationSkills" : "VPAT creation", "innovationCreativity" : "Product innovation", "qualificationsBasic" : "5+ years managerial experience, Experience leading accessibility teams, Knowledge of WCAG, Knowledge of Section 508, Knowledge of EAA, Knowledge of ARIA, Knowledge of accessibility testing methodologies, Proven experience building accessibility processes, Proven experience building accessibility methodologies, Proven experience building scalable service delivery systems, Experience collaborating with Product, Experience collaborating with R&D, Experience collaborating with Sales, Experience collaborating with customer-facing teams", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "accessiBe is the market leader in web accessibility that makes websites accessible to people with disabilities. accessiBe is more than a workplace, it’s a passion. Each day you’re surrounded by people who share the same goal and values, who work endlessly to break down accessibility barriers. We care about all people, regardless of their ability. We hire people that are determined to succeed and who are not afraid of rapid change. Our core values showcase who we are and we strive to focus on excellence and sincerity. We are looking for an experienced and mission-driven Manager, Accessibility Services to lead our team of Accessibility Experts and oversee the delivery of world-class accessibility services across audits, VPATs, consulting, and training. This role is central to accessiBe’s commitment to helping organizations achieve and maintain digital accessibility at scale. You will own delivery processes, develop best-in-class auditing methodologies, collaborate closely with Product and R&D, and strengthen accessibility fluency across the entire company. What will you do: Team Leadership & Operations Lead, mentor, and manage a team of Accessibility Experts and related specialists Oversee end-to-end delivery of accessibility services including: Accessibility Audits, VPAT / ACR creation, Accessibility consulting engagements and customer and internal training programs Build scalable, efficient delivery processes ensuring quality, consistency, and operational excellence Establish and continually refine auditing practices, frameworks, and tools Customer Experience & Vendor Ecosystem Ensure a best-in-class customer experience across all professional services engagements Manage and collaborate with external vendors, contractors, and ecosystem partners Work closely with Customer Success, Support, and other customer-facing teams to align service delivery with customer needs Cross-Functional Collaboration Partner with R&D and Product to bring accessibility insights into product direction and innovation Support Sales teams with technical expertise, scoping, and accessibility thought leadership Collaborate with internal stakeholders to develop GTM strategies in existing and new territories Accessibility Knowledge & Internal Enablement Drive company-wide accessibility knowledge, standards, and practices Design and deliver accessibility training for internal teams, especially Product and R&D Promote an accessibility-first culture across accessiBe Requirements: 5+ years of managerial experience leading accessibility teams in either: An in-house accessibility department within an enterprise organization, or a professional accessibility service provider / agency Strong knowledge of WCAG, Section 508, EAA, ARIA, and accessibility testing methodologies Proven experience building accessibility processes, methodologies, and scalable service delivery systems Experience collaborating extensively with Product, R&D, Sales, and customer-facing teams Why You’ll Love Working Here Scale & Leverage: In this role, your impact is exponential. Every agency you empower helps hundreds of websites become accessible Growth: We are scaling fast, and our Partner Program is a massive focus for the company The Vibe: We work hard, but we don't take ourselves too seriously. Expect a collaborative culture, open doors, and a team that actually likes each other The Perks: Competitive Salary, Equity, Comprehensive Health Benefits, Generous PTO Salary Expectations: $120,000 - $140,000 base salary Location: The position is eligible for remote work Equal opportunities At accessiBe, we prioritize diversity. We celebrate difference and embed it into every aspect of our workplace and product, as well as our community. accessiBe is proud and committed to providing equal opportunity employment to all individuals regardless of disability, race, color, religion, sex, sexual orientation, citizenship, national origin, veteran status, pregnancy or any other characteristic protected by law. In addition, accessiBe will provide accommodation to individuals with disabilities or a special need. Please don't hesitate to share your needs when applying so that we can provide the necessary accommodations for an accessible and inclusive recruitment process.", "summaryDescription" : "Manager, Accessibility Services at accessiBe. Skills: Web accessibility, Service delivery, Team leadership. Lead team of Accessibility Experts. Mentor team of Accessibility Experts", "postedDate" : "2026-06-13T21:00:54.887", "createdAt" : "2026-06-13T21:00:54.887", "lastUpdated" : "2026-06-15T08:11:56.431", "ingestTimestamp" : "2026-06-13T21:00:54.887", "mongoId" : "6a2c6cf074d8ee00a091c5a9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 120000, "salaryAnnualMax" : 140000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "VPAT creation", "Accessibility consulting", "Accessibility training", "Leadership", "Mentoring", "Web accessibility", "Service delivery", "Team leadership", "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement", "WCAG", "Section 508", "EAA", "ARIA" ], "skillCount" : 19, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Manager", "dataQualityScore" : 1.0, "_score" : 661.15063, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c7dc474d8ee00a0950b73", "title" : "DQA Engineer (Door Access/Sensor)", "company" : "Ubiquiti", "industry" : "Manufacturing", "salary" : { "min" : 1200000.0, "max" : 1800000.0, "currency" : "TWD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level DQA Engineer in Taiwan, adjusted for the technology industry and company size." }, "location" : "Taiwan", "locations" : [ "Taiwan" ], "timestamp" : "2026-06-15T09:13:07.803", "fingerprint" : "7f7c839757270217ac1de450848f38dae2a6486899622b9498ff6098c5609bed", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/ubiquiti/jobs/4077594009", "externalId" : "4077594009", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Taiwan", "continent" : "as", "workMode" : "onsite" } ], "locationText" : "Taiwan", "minimumEducation" : "Bachelor's", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Linux, Android, Shell scripts, WLAN, BT, NFC, IoT, Sensors, Motion sensors, Accelerometers, Time-of-flight sensors, Radar sensors", "professionalSkills" : [ "Design validation", "Reliability testing", "Compatibility testing", "Durability testing", "Strength testing", "Functional block testing" ], "hardSkillsList" : [ "Failure analysis", "Test automation", "Black-box testing", "White-box testing" ], "softSkillsList" : [ "Multitasker", "Curious" ], "hardSkills" : [ { "name" : "Failure analysis", "level" : "intermediate" }, { "name" : "Test automation", "level" : "intermediate" }, { "name" : "Black-box testing", "level" : "intermediate" }, { "name" : "White-box testing", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Multitasker" }, { "name" : "Curious" } ], "majorSkills" : "Design Quality Assurance, System validation, Reliability testing", "majorSkillsList" : [ "Design Quality Assurance", "System validation", "Reliability testing" ], "coreResponsibilities" : "Drive system validation, Verify design changes, Resolve technical issues, Perform failure analysis, Develop quality test plan, Review quality test plan, Execute tests, Generate test reports, Reproduce customer issues, Record test results, Develop automatic test bench, Develop test environments, Maintain test environments, Design test methodology, Assure reliability, Maintain test cases, Execute test cases", "teamCollaboration" : "Hardware Firmware Software Design team; RD analysis; Negotiation with engineers", "projectManagementSkills" : [ "EVT builds", "DVT builds", "PVT builds" ], "domainKnowledge" : "Door Access; Sensors; POE; Wireless; Li battery; Ethernet compliance; WLAN; BT; NFC; IoT products; Sensor technologies; Motion sensors; Accelerometers; Temperature sensors; Humidity sensors; Ambient light sensors; Time-of-flight sensors; Radar sensors", "domainList" : [ "door-access", "sensors", "poe", "wireless", "li-battery", "ethernet-compliance", "wlan", "bt", "nfc", "iot-products", "sensor-technologies", "motion-sensors", "accelerometers", "temperature-sensors", "humidity-sensors", "ambient-light-sensors", "time-of-flight-sensors", "radar-sensors" ], "domainSpecificKnowledge" : [ "Door Access", "Sensors", "POE", "Wireless", "Li battery", "Ethernet compliance", "WLAN", "BT", "NFC", "IoT products", "Sensor technologies", "Motion sensors", "Accelerometers", "Temperature sensors", "Humidity sensors", "Ambient light sensors", "Time-of-flight sensors", "Radar sensors" ], "toolProficiency" : [ "Oscilloscopes", "Logic analyzers" ], "communicationSkills" : "Good communication", "documentationSkills" : "Good documentation", "innovationCreativity" : "Rethinking IT", "problemSolvingSkills" : "Technical issue resolution; Failure analysis", "qualificationsBasic" : "BS in Engineering, 3-5 years hardware test experience, 3-5 years design quality test experience, Familiar with reliability testing, Familiar with compatibility testing, Familiar with durability testing, Familiar with strength testing, Familiar with shell scripts, Familiar with Linux command lines, Familiar with Android command lines", "qualificationsPreferred" : "Experience in hardware testing on POE, Experience in hardware testing on wireless, Experience in hardware testing on Li battery-powered devices, Knowledge of functional block testing, Familiar with 10/100/1000BASE-T Ethernet compliance test, Good understanding of WLAN standards, Good understanding of BT standards, Good understanding of NFC standards, Familiar with IoT products, Familiar with sensor technologies, Familiar with motion sensors, Familiar with accelerometers, Familiar with temperature sensors, Familiar with humidity sensors, Familiar with ambient light sensors, Familiar with time-of-flight sensors, Familiar with radar sensors", "workSiteFlexibility" : "Onsite", "rawDescription" : "About Ubiquiti At Ubiquiti Inc., we create technology platforms for Businesses, Smart Homes, and Internet Service Providers, driven by our goal to connect everyone, everywhere. To date, Ubiquiti has shipped over 100 million devices worldwide, from ISP networking products to next generation of IT solutions. Our growth is made possible by the dedicated team of hundreds behind the scenes. From software developers and product managers to designers and strategists, Team UI is driven to achieve our common goal: Rethinking IT. At Ubiquiti, you’ll heighten your potential and broaden your horizons - all while shaping the future of connectivity. Role Summary As a Design Quality Assurance Engineer, you will work within the Hardware, Firmware, and Software Design team. This will be a hands-on position to support all design validation and reliability aspects of design, development, and transfer to manufacturing. You will drive system validation activities for new product development, verify design changes for existing products, resolve technical issues related to the manufacturing process, and perform failure analysis on field returned products. Responsibilities Passionate about user experience and deeply committed to delivering intuitive, high-quality UX. Develop and review the quality test plan for design validation and EVT/DVT/PVT builds. Execute tests according to test plans to generate test reports during EVT/DVT builds. Try to reproduce the customer’s issues and record the results for RD analysis Develop an automatic test bench for long-time stress testing. Develop and maintain test environments to ensure sufficient test coverage and speed up testing. Design test methodology and coverage to assure reliability Develop, maintain, and execute black-box and white-box test cases. Track the progress of issue resolution and verify the effectiveness of corrective actions Requirement BS in Engineering (Electrical Engineering, Industrial Engineering, Computer Science, Physics, or any other related fields) 3-5 years of working experience in the hardware test or design quality test field Familiar with reliability testing, compatibility testing, durability testing, and strength testing standards. Familiar with shell scripts and command lines on Linux or Android. Active team player, self-starter, and multitasker who can quickly adjust priorities Be able to think outside the box Be curious about every strange thing Good documentation skills. Good communication skills, Ex, negotiation with PM/EE/ME/FW/SW engineers Preferred Qualifications Experience in hardware testing on POE, wireless, and Li battery-powered devices. Knowledge of functional block testing, such as audio, display, wireless, and enclosure. Familiar with 10/100/1000BASE-T Ethernet compliance test experience Good understanding of one or more wireless standards: WLAN (802.11a/b/g/n/ac/ad), BT, and NFC. Familiar with IoT products, including sensor technologies and testing methodologies such as motion sensors, accelerometers, temperature and humidity sensors, ambient light sensors, time-of-flight (ToF) sensors, and radar sensors. Familiar with operating test equipment such as oscilloscopes and logic analyzers Benefits International work environment and collaboration with global development teams Excellent work conditions Competitive package: great pay, perks, and benefits Group insurance and health coverage Flexible working hours and patterns Complimentary drinks and snacks at the office", "summaryDescription" : "DQA Engineer (Door Access/Sensor) at Ubiquiti. Skills: Design Quality Assurance, System validation, Reliability testing. Drive system validation. Verify design changes", "postedDate" : "2026-06-14T08:41:44.188", "createdAt" : "2026-06-14T08:41:44.188", "lastUpdated" : "2026-06-15T09:13:07.803", "ingestTimestamp" : "2026-06-14T08:41:44.188", "mongoId" : "6a2c7dc474d8ee00a0950b73", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Failure analysis", "Test automation", "Black-box testing", "White-box testing", "Multitasker", "Curious", "Design Quality Assurance", "System validation", "Reliability testing", "Design validation", "Compatibility testing", "Durability testing", "Strength testing", "Functional block testing", "EVT builds", "DVT builds", "PVT builds", "Door Access", "Sensors", "POE", "Wireless", "Li battery", "Ethernet compliance", "WLAN", "BT", "NFC", "IoT products", "Sensor technologies", "Motion sensors", "Accelerometers", "Temperature sensors", "Humidity sensors", "Ambient light sensors", "Time-of-flight sensors", "Radar sensors", "Oscilloscopes", "Logic analyzers" ], "skillCount" : 37, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 661.0234, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a25145474d8ee00a00bb3c0", "title" : "Senior Software Development Engineer, AWS Identity and Access Management", "company" : "Amazon Development Center U.S., Inc.", "industry" : "Software Development, Cloud Computing", "salary" : { "min" : 100000.0, "max" : 227400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T03:27:18.090", "fingerprint" : "d3199c5c89e227ff89652d24d293078263d07b3abd5ffe307aac51b20809caf5", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10441337/apply", "externalId" : "458aa8f1-7898-4616-be34-1520b307c035", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, IAM", "professionalSkills" : [ "Project management", "System design", "Architecture", "Software development", "Operations" ], "hardSkillsList" : [ "Distributed systems", "Scalability", "Reliability", "High-availability" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Distributed systems", "level" : "intermediate" }, { "name" : "Scalability", "level" : "intermediate" }, { "name" : "Reliability", "level" : "intermediate" }, { "name" : "High-availability", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Distributed systems, Cloud security", "majorSkillsList" : [ "Distributed systems", "Cloud security" ], "coreResponsibilities" : "Lead software development, Deliver working software systems, Design software systems, Implement software systems, Test software systems, Deploy software systems, Maintain software systems, Design components, Review others' work, Write code, Review code, Solve problems, Improve processes, Change culture, Staff teams, Train teams, Recruit team members, Assess team members, Provide career guidance, Communicate with team, Communicate with peers, Communicate with management, Prepare design docs, Review design docs, Prepare project plans, Review project plans, Prepare features one pagers, Review features one pagers, Prepare incident retrospectives, Review incident retrospectives, Prepare change requests, Review change requests, Prepare progress reports, Review progress reports, Build next generation functionality, Design storage fleet components, Build storage fleet components, Remediate storage failures, Manage data replication, Provide disaster recovery", "teamCollaboration" : "Peers on related teams; Cross-functional teams", "projectManagementSkills" : [ "Project management" ], "domainKnowledge" : "Identity and Access Management; AWS Identity; Authentication; Authorization; Distributed systems; Multi-tenancy; Cloud security; Scalability; Availability; Storage fleet management", "domainList" : [ "identity-and-access-management", "aws-identity", "authentication", "authorization", "distributed-systems", "multi-tenancy", "cloud-security", "scalability", "availability", "storage-fleet-management" ], "domainSpecificKnowledge" : [ "Identity and Access Management", "AWS Identity", "Authentication", "Authorization", "Distributed systems", "Multi-tenancy", "Cloud security", "Scalability", "Availability", "Storage fleet management" ], "toolProficiency" : [ "CI/CD tools" ], "communicationSkills" : "Great communication; Technical communication", "documentationSkills" : "Design docs; Project plans; Features one pagers; Incident retrospectives; Change requests; Progress reports", "problemSolvingSkills" : "Problem solving", "qualificationsBasic" : "5+ years software development experience, 5+ years programming experience, 5+ years design/architecture experience, Experience as mentor, Experience as tech lead, Experience leading engineering team", "qualificationsPreferred" : "5+ years full SDLC experience, Bachelor's degree in computer science", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Amazon Web Services (AWS) Identity team builds, operates, and innovates the identity, authentication, and authorization stack for the AWS cloud. Our mission is to push the technical boundaries to enable AWS customers to run their business workloads confidently and securely. As part of this mission, we leverage customer obsession and technologies to help customers set appropriate access controls across all their AWS environments. AWS Identity and Access Management (IAM) enables customers to secure their workloads in the cloud by providing authentication and authorization mechanisms. With the growth of AWS, the workloads and access patterns keep evolving, demanding the next order of magnitude scalability. We are looking for strong software engineers to build the next generation functionality in this area. Individuals interested in this position should have experience building high-performing, reliable systems in a complex, multi-tenancy, and distributed environment in a highly contingent environment. We desire you to have an established background in design, development and operations of highly scalable and available distributed systems. You must have strong technical skills, excellent project management skills, great communication skills, and a motivation to achieve results in a fast-paced environment. It is a highly technical space. You are a strong technical contributor who understands the big picture, drives prioritization, builds consensus, and rallies the team behind it. Responsibilities include driving architecture, design, and implementation of complex components while maintaining an uncompromising bar on quality and mentoring junior developers for software within the team. Key job responsibilities You lead the team’s software development, and work with peers on related teams. You ensure to achieve the goal of delivering working software systems spanning the full software lifecycle including design, implementation, testing, deployment, and maintenance strategy. You design and review others’ work to ensure it fits into the bigger picture and is well designed, extensible, performant, and secure. You also have code contributions that demonstrate best practices, which others emulate, and continue to be high-quality. You also solve problems through the use of non-technical solutions such as process improvement, culture changes, or staffing and training. You ensure the team has good operational practices with the correct alarms, telemetry, runbooks, and retrospective. And finally you ensure team growth by training, recruiting, assessing, and providing career guidance to members of their team. A day in the life You will communicate a lot, with the team, peers and management. Communication happens over different channel; Slack, email, and Chime. You will prepare and review design docs, project plans, features one pagers, incident retrospectives, change requests and progress reports. And for sure, you will write and review code, and work with CI/CD tools. About the team AWS Identity and Access Management (IAM) enables customers to secure their workloads in the cloud by providing authentication and authorization mechanisms to all of AWS. We enable our customers to manage their credentials and access policies in the AWS cloud. We operate some of the largest distributed systems in the world, processing billions of transactions per second world-wide. The IAM Control Plane teams are working on the next generation architecture for IAM aiming to improve the scaling, and availability of the system. This team will be responsible for designing, building and delivering on core storage fleet management components, including workloads for building fleets, remediating failures, managing data replication, providing disaster recovery capabilities and similar. Basic Qualifications: - 5+ years of non-internship professional software development experience - 5+ years of programming with at least one software programming language experience - 5+ years of leading design or architecture (design patterns, reliability and scaling) of new and existing systems experience - Experience as a mentor, tech lead or leading an engineering team Preferred Qualifications: - 5+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience - Bachelor's degree in computer science or equivalent Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 168,100.00 - 227,400.00 USD annually", "summaryDescription" : "Senior Software Development Engineer, AWS Identity and Access Management at Amazon Development Center U.S., Inc.. Skills: Distributed systems, Cloud security. Lead software development. Deliver working software systems", "postedDate" : "2026-06-13T06:06:21.417", "createdAt" : "2026-06-13T06:06:21.417", "lastUpdated" : "2026-06-15T03:27:18.090", "ingestTimestamp" : "2026-06-13T06:06:21.417", "mongoId" : "6a25145474d8ee00a00bb3c0", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10441337/apply", "salaryAnnualMin" : 100000, "salaryAnnualMax" : 227400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Distributed systems", "Scalability", "Reliability", "High-availability", "Leadership", "Mentoring", "Cloud security", "Project management", "System design", "Architecture", "Software development", "Operations", "Identity and Access Management", "AWS Identity", "Authentication", "Authorization", "Multi-tenancy", "Availability", "Storage fleet management", "CI/CD tools" ], "skillCount" : 20, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 652.8119, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2c694a74d8ee00a0906cb7", "title" : "Staff Software Engineer - Instant Access", "company" : "Plaid", "industry" : "All Departments", "salary" : { "min" : 207600.0, "max" : 306600.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "New York City Office", "locations" : [ "New York City Office" ], "timestamp" : "2026-06-15T09:41:47.198", "fingerprint" : "40389cecfcb49187d32dcac3f69c373c1139b0c93190039cd7ed200b789a3b4f", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/plaid/587c8950-65ad-4e65-89fb-803b9b8520c1/application", "externalId" : "587c8950-65ad-4e65-89fb-803b9b8520c1", "industryFunction" : { }, "structuredLocations" : [ { "city" : "New York", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "40.7127281,-74.0060152" } ], "locationText" : "New York, New York, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AI, LLM, Generative AI", "professionalSkills" : [ "Technical leadership", "System design", "Architecture definition", "Technical direction" ], "hardSkillsList" : [ "Code generation", "Autonomous systems" ], "hardSkills" : [ { "name" : "Code generation", "level" : "intermediate" }, { "name" : "Autonomous systems", "level" : "intermediate" } ], "majorSkills" : "Applied AI, LLM systems, Autonomous systems", "majorSkillsList" : [ "Applied AI", "LLM systems", "Autonomous systems" ], "coreResponsibilities" : "Define technical direction, Define architecture for autonomous AI systems, Create observability platforms, Create monitoring platforms, Create debugging platforms, Build LLM-powered code generation pipelines, Write production code, Validate production code, Ship production code, Design evaluation frameworks, Architect self-healing infrastructure, Detect infrastructure issues, Diagnose infrastructure issues, Repair infrastructure issues, Develop safety architectures, Ensure AI systems take correct actions, Ensure AI systems degrade safely, Partner with leaders, Identify automation opportunities, Turn opportunities into systems, Raise technical bar, Mentor engineers, Conduct design reviews, Provide hands-on leadership", "teamCollaboration" : "Partner with engineers; Partner with product managers; Partner with leaders", "domainKnowledge" : "Financial integrations; Long-tail integrations; Non-deterministic systems", "domainList" : [ "financial-integrations", "long-tail-integrations", "non-deterministic-systems" ], "domainSpecificKnowledge" : [ "Financial integrations", "Long-tail integrations", "Non-deterministic systems" ], "toolProficiency" : [ "Playwright", "Stagehand" ], "innovationCreativity" : "Novel systems", "problemSolvingSkills" : "Reason about failures; Generate solutions; Solve ambiguous problems", "outcomesObjectives" : "Resolve issues automatically; Support every long-tail institution", "qualificationsBasic" : "8+ years software engineering, Backend and/or platform systems focus, Comfortable working hands-on, Comfortable moving fast", "qualificationsPreferred" : "Building production generative AI systems, Experience with browser automation, Experience with web automation, Experience with scraping, Experience with extraction systems, Playwright experience, Stagehand experience", "remoteFriendly" : true, "workSiteFlexibility" : "Onsite", "rawDescription" : "We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Washington D.C., London and Amsterdam. Team The Instant Access team, part of the Network Enablement and Access (NEA) organization, builds applied AI systems based on LLM’s that operate autonomously in production. This foundational AI work is directly tied to NEA's most important priorities. Our current focus is automatically creating, repairing, and improving the thousands of long-tail integrations that enable millions of Plaid consumers to connect to their financial institutions. Our goal is for every long-tail institution to be supported by Plaid, with any issues detected, triaged, and resolved automatically. Role As a Staff Software Engineer on Instant Access, you'll set technical foundations for autonomous systems that operate directly in production. You'll work across AI and product engineering to solve ambiguous, high-impact problems, while designing systems that can reason about failures, generate solutions, and safely take action at scale. This is a hands-on role that combines deep technical leadership with implementation. You'll partner closely with engineers, product managers, and leaders across NEA to identify opportunities for automation, define long-term architecture, and build the foundational systems that future AI initiatives will rely on. As an early engineer on the team, you'll significantly influence technical direction and the evolution of a new capability. This could fundamentally change how Plaid builds and operates software. Responsibilities - Define the technical direction and architecture for autonomous AI systems that create, repair, and improve financial institution integrations. - Create novel observability, monitoring, and debugging platforms to provide engineers with deep visibility into the behavior, decisions, and performance of AI-powered systems. - Build LLM-powered code generation pipelines that write, validate, and ship production code end-to-end with minimal human intervention. - Design evaluation frameworks that measure correctness, reliability, and safety for non-deterministic systems operating at scale. - Architect self-healing infrastructure that detects, diagnoses, and repairs itself in under 24 hours. - Develop multi-layer safety architectures to ensure AI systems take the correct actions in production and degrade safely when uncertainty exists. - Partner closely with engineering and product leaders to identify high-leverage automation opportunities and turn them into production systems. - Raise the technical bar across the organization through mentorship, design reviews, and hands-on leadership. Qualifications Must Haves: - 8+ years of strong software engineering experience with a deep focus on backend and/or platform systems - Ability to balance divergent thinking (exploring possibilities) with convergent thinking (evaluating feasibility) - Must be comfortable working hands-on directly in the codebase. This is a builder archetype position. You will spend considerable time designing and then building the actual systems you own. - Must be comfortable moving fast, which means making trade-offs between technical excellence and the rapid deployment of working systems to validate whether approaches are fruitful. Nice to Haves: - Previous experience building production generative AI systems that customers interact with - Experience with browser automation, web automation, scraping, extraction systems, or tools such as Playwright, Stagehand, or similar frameworks Our mission at Plaid is to unlock financial freedom for everyone. To support that mission, we seek to build a diverse team of driven individuals who care deeply about making the financial ecosystem more equitable. We recognize that strong qualifications can come from both prior work experiences and lived experiences. We encourage you to apply to a role even if your experience doesn't fully match the job description. We are always looking for team members that will bring something unique to Plaid! Plaid is proud to be an equal opportunity employer and values diversity at our company. We do not discriminate based on race, color, national origin, ethnicity, religion or religious belief, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, military or veteran status, disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state, and local laws. Plaid is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance with your application or interviews due to a disability, please let us know at accommodations@plaid.com. Please review our Candidate Privacy Notice here https://plaid.com/legal/#candidate-privacy-notice. Additional compensation in the form(s) of equity and/or commission are dependent on the position offered. Plaid provides a comprehensive benefit plan, including medical, dental, vision, and 401(k). Pay is based on factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience and skillset, and location. Pay and benefits are subject to change at any time, consistent with the terms of any applicable compensation or benefit plans.", "summaryDescription" : "Staff Software Engineer - Instant Access at Plaid. Skills: Applied AI, LLM systems, Autonomous systems. Define technical direction. Define architecture for autonomous AI systems", "createdAt" : "2026-06-14T04:01:23.363", "lastUpdated" : "2026-06-15T09:41:47.198", "ingestTimestamp" : "2026-06-14T04:01:23.363", "mongoId" : "6a2c694a74d8ee00a0906cb7", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 207600, "salaryAnnualMax" : 306600, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Code generation", "Autonomous systems", "Applied AI", "LLM systems", "Technical leadership", "System design", "Architecture definition", "Technical direction", "Financial integrations", "Long-tail integrations", "Non-deterministic systems", "Playwright", "Stagehand" ], "skillCount" : 13, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Executive", "dataQualityScore" : 0.8888889, "_score" : 652.33887, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.98 }, { "id" : "6a24f33a74d8ee00a005d398", "title" : "Lead PAM Engineer – Senior", "company" : "MKS2 Technologies", "industry" : "Cyber Security", "salary" : { "min" : 120000.0, "max" : 150000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Washington, District of Columbia, United States", "locations" : [ "Washington", "District of Columbia", "United States" ], "certifications" : [ "CISSP", "PMP", "PAM platform certifications", "CyberArk certification", "Microsoft Identity certification", "Okta certification", "SailPoint certification" ], "timestamp" : "2026-06-07T17:02:50.264", "fingerprint" : "c9ca8b79e297afc59c294beab25344bdc5faa9b226ca3295a4f346177f76db4f", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.mks2.com/job/6015554004?gh_jid=6015554004", "externalId" : "6015554004", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Washington", "state" : "District of Columbia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "38.8950982,-77.0363849" } ], "locationText" : "Washington, District of Columbia, United States", "minimumEducation" : "Bachelor's", "experienceMinYears" : 8, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "CyberArk, Microsoft Entra ID, Entra PIM, SailPoint, Okta, BeyondTrust, Delinea, Active Directory, LDAP, SAML, OAuth, MFA, RBAC, PKI, PIV/CAC", "professionalSkills" : [ "Identity governance", "Access governance" ], "hardSkillsList" : [ "Privileged account onboarding", "Credential rotation", "Session monitoring", "Audit logging", "Access reviews" ], "softSkillsList" : [ "Leadership", "Analytical skills" ], "hardSkills" : [ { "name" : "Privileged account onboarding", "level" : "intermediate" }, { "name" : "Credential rotation", "level" : "intermediate" }, { "name" : "Session monitoring", "level" : "intermediate" }, { "name" : "Audit logging", "level" : "intermediate" }, { "name" : "Access reviews", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Analytical skills" } ], "majorSkills" : "Privileged Access Management, Cybersecurity engineering", "majorSkillsList" : [ "Privileged Access Management", "Cybersecurity engineering" ], "coreResponsibilities" : "Lead PAM platform planning, Implement PAM platforms, Support PAM platforms, Onboard privileged accounts, Manage privileged accounts, Onboard vaults, Manage vaults, Onboard safes, Manage safes, Onboard credential rotation policies, Manage credential rotation policies, Onboard connection components, Manage connection components, Configure privileged session monitoring, Support privileged session monitoring, Configure audit logging, Support audit logging, Configure reporting, Support reporting, Configure access reviews, Support access reviews, Configure governance processes, Support governance processes, Configure break-glass procedures, Support break-glass procedures, Integrate PAM with Active Directory, Integrate PAM with Entra ID, Integrate PAM with SIEM, Integrate PAM with logging systems, Integrate PAM with identity governance tools, Integrate PAM with endpoint environments, Integrate PAM with cloud environments, Design PAM architecture, Develop high-level design documentation, Develop low-level design documentation, Develop implementation plans, Develop SOPs, Develop operational runbooks, Troubleshoot access issues, Troubleshoot authentication issues, Troubleshoot policy issues, Troubleshoot integration issues, Collaborate with SOC teams, Collaborate with NOC teams, Collaborate with compliance teams, Support Zero Trust strategies, Support least-privilege access strategies", "teamCollaboration" : "SOC teams; NOC teams; Compliance teams", "projectManagementSkills" : [ "Implementation plans", "SOPs", "Operational runbooks" ], "domainKnowledge" : "Cybersecurity; Identity & Access Management; Privileged Access Management; NIST frameworks; Zero Trust architecture; ICAM principles; FICAM principles; Identity governance; Compliance", "domainList" : [ "cybersecurity", "identity-access-management", "privileged-access-management", "nist-frameworks", "zero-trust-architecture", "icam-principles", "ficam-principles", "identity-governance", "compliance" ], "domainSpecificKnowledge" : [ "Cybersecurity", "Identity & Access Management", "Privileged Access Management", "NIST frameworks", "Zero Trust architecture", "ICAM principles", "FICAM principles", "Identity governance", "Compliance" ], "toolProficiency" : [ "CyberArk", "Microsoft Entra ID", "Entra PIM", "SailPoint", "Okta", "BeyondTrust", "Delinea", "Active Directory", "SIEM" ], "communicationSkills" : "Documentation; Present to leadership", "documentationSkills" : "High-level design documentation; Low-level design documentation; Implementation plans; SOPs; Operational runbooks", "problemSolvingSkills" : "Troubleshooting; Analytical skills", "specialRequirements" : "Pass background check, U.S. work authorization", "qualificationsBasic" : "8+ years Cybersecurity engineering, 8+ years Identity & Access Management, 8+ years Privileged Access Management, 8+ years Enterprise security, 5+ years PAM/IAM platforms, 5+ years Privileged credential lifecycle management, 5+ years Access control implementation, Support On-premise environments, Support Cloud environments, Support Hybrid architectures, Bachelor's degree or equivalent experience", "qualificationsPreferred" : "Experience working in federal environments, Experience working in regulated environments", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "MKS2 Technologies, LLC, an award-winning high growth small business, creates innovative and customer-centric technology solutions in the areas of Cyber Security, Instructional Design and Training, Software Engineering and IT Support Services to improve the security and well-being of our clients. Our commitment to excellence and our “Mission First” orientation has resulted in steady growth and an expanding client base across government agencies. We have employees nationwide and for the past three consecutive years were named one of the fastest growing Veteran-owned companies in the nation. Please take a moment to browse through our website and learn more about what it means to serve with MKS2. Lead PAM Engineer – Senior Location: National Capital Region (Washington, DC) – Hybrid/Onsite Clearance: Must be able to pass background check (U. S. work authorization required) Salary: $120,000-$150,000 Position Overview We are seeking a Senior Lead PAM Engineer to design, implement, and manage enterprise Privileged Access Management (PAM) solutions across hybrid environments. This role is responsible for securing privileged identities, enforcing least-privilege access, and ensuring compliance with enterprise cybersecurity and identity governance requirements. Key Responsibilities Lead planning, implementation, and support of PAM platforms across enterprise environments Onboard and manage: Privileged accounts Vaults and safes Credential rotation policies Connection components Configure and support: Privileged session monitoring Audit logging and reporting Access reviews and governance processes Break-glass procedures Integrate PAM platforms with: Active Directory / Entra ID SIEM and logging systems Identity governance tools Endpoint and cloud environments Design PAM architecture and develop: High-level and low-level design documentation Implementation plans SOPs and operational runbooks Troubleshoot access, authentication, policy, and integration issues Collaborate with SOC, NOC, and compliance teams to ensure security alignment Support Zero Trust and least-privilege access strategies Required Qualifications 8+ years of experience in: Cybersecurity engineering Identity & Access Management (IAM) Privileged Access Management (PAM) Enterprise security or infrastructure security 5+ years of hands-on experience with: PAM / IAM platforms Privileged credential lifecycle management Access control implementation Experience supporting environments across: On-premise Cloud Hybrid architectures Technical Expertise PAM / IAM Platforms: CyberArk Microsoft Entra ID / Entra PIM SailPoint Okta BeyondTrust Delinea Identity & Access Technologies: Active Directory / LDAP SAML, OAuth MFA, RBAC PKI / PIV/CAC Core Capabilities: Privileged account onboarding and vaulting Credential rotation and lifecycle management Session monitoring and auditing Access governance and reviews Frameworks & Methodologies Knowledge of: NIST frameworks Zero Trust architecture ICAM / FICAM principles Identity governance and compliance Education Bachelor’s degree in Cybersecurity, IT, Computer Science, Engineering, or related field (or equivalent experience) Certifications (Preferred/Required) CISSP, PMP, or equivalent cybersecurity certifications PAM/IAM platform certifications (CyberArk, Microsoft Identity, Okta, SailPoint, etc.) Additional Qualifications Experience designing enterprise PAM architecture Strong documentation and communication skills Ability to train stakeholders and present to leadership Experience working in regulated or federal environments preferred Ideal Candidate Profile Hands-on PAM engineer with architecture-level experience Strong background in identity security and access governance Experienced in enterprise-scale deployments and integrations Comfortable leading technical initiatives and mentoring teams Detail-oriented with strong troubleshooting and analytical skills Diversity creates a healthier atmosphere: MKS2 Technologies is proud to be an Equal Employment Opportunity / Affirmative Action employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, protected veteran status, disability status, sexual orientation, gender identity or expression, marital status, genetic information, or any other characteristic protected by law.", "summaryDescription" : "Lead PAM Engineer – Senior at MKS2 Technologies. Skills: Privileged Access Management, Cybersecurity engineering. Lead PAM platform planning. Implement PAM platforms", "postedDate" : "2026-06-07T08:12:09.572", "createdAt" : "2026-06-07T08:12:09.572", "lastUpdated" : "2026-06-07T17:02:50.264", "ingestTimestamp" : "2026-06-07T08:12:09.572", "mongoId" : "6a24f33a74d8ee00a005d398", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 120000, "salaryAnnualMax" : 150000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Privileged account onboarding", "Credential rotation", "Session monitoring", "Audit logging", "Access reviews", "Leadership", "Analytical skills", "Privileged Access Management", "Cybersecurity engineering", "Identity governance", "Access governance", "Implementation plans", "SOPs", "Operational runbooks", "Cybersecurity", "Identity & Access Management", "NIST frameworks", "Zero Trust architecture", "ICAM principles", "FICAM principles", "Compliance", "CISSP", "PMP", "PAM platform certifications", "CyberArk certification", "Microsoft Identity certification", "Okta certification", "SailPoint certification", "CyberArk", "Microsoft Entra ID", "Entra PIM", "SailPoint", "Okta", "BeyondTrust", "Delinea", "Active Directory", "SIEM" ], "skillCount" : 37, "jobCategory" : "other", "jobSubcategory" : "government-it-division", "dataQualityScore" : 0.8888889, "_score" : 640.80945, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cyber Security" }, { "id" : "6a2176d374d8ee00a0c1af98", "title" : "Software Development Engineer - AWS Identity & Access Management, AWS Identity", "company" : "Amazon Development Center U.S., Inc.", "industry" : "Software Development, Cloud Computing", "salary" : { "min" : 70000.0, "max" : 194400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T03:11:17.062", "fingerprint" : "db4fb68d309bc05a796e6f71318ace1cbc12d50df122b3988091cc6fdd988389", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10438698/apply", "externalId" : "d1490d81-7ef2-4f50-b0c6-e568e560a9d1", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "technicalSkills" : "AWS, Machine learning, Artificial intelligence", "professionalSkills" : [ "System interdependencies", "System limitations" ], "hardSkillsList" : [ "Identity management", "Authentication", "Authorization" ], "softSkillsList" : [ "Customer obsession", "Mentoring" ], "hardSkills" : [ { "name" : "Identity management", "level" : "intermediate" }, { "name" : "Authentication", "level" : "intermediate" }, { "name" : "Authorization", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Customer obsession" }, { "name" : "Mentoring" } ], "majorSkills" : "AWS Identity, Access Management, Cloud platform", "majorSkillsList" : [ "AWS Identity", "Access Management", "Cloud platform" ], "coreResponsibilities" : "Create systems and services, Collaborate on systems and services, Implement systems and services, Deploy systems and services, Functionally decompose problems, Understand system interdependencies, Understand system limitations, Share knowledge of patterns, Share knowledge of methods", "teamCollaboration" : "Work with senior engineers; Work with principal engineers; Mentor junior team members", "domainKnowledge" : "AWS cloud; Identity features; Access management; Cryptography; Cloud computing", "domainList" : [ "aws-cloud", "identity-features", "access-management", "cryptography", "cloud-computing" ], "domainSpecificKnowledge" : [ "AWS cloud", "Identity features", "Access management", "Cryptography", "Cloud computing" ], "continuousLearning" : "Formal mentor search; Work and train together; Career progression support", "problemSolvingSkills" : "Decompose complex problems", "qualificationsBasic" : "3+ years software development experience, 2+ years system design or architecture experience, Experience programming at least one language", "qualificationsPreferred" : "3+ years full SDLC experience, Bachelor's degree in computer science", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Amazon Web Services (AWS) Identity team builds, operates, and innovates the identity, authentication, and authorization stack for the AWS cloud. Our mission is to push the technical boundaries to enable AWS customers to run their business workloads confidently and securely. As part of this mission, we leverage customer obsession and technologies to help customers set appropriate access controls across all their AWS environments. We are seeking a software developer engineer to be part of our team to build solutions on a global scale, own their systems end to end, and influence the direction of technology used by all AWS services around the world. In this role, you will have the opportunity to drive mission critical projects, work with senior and principal engineers, and help mentor more junior team members. As an SDE on our team you will: · Create and collaborate in the design, implementation, and deployment of systems and services · Work and grow with talented teams delivering impactful projects · Functionally decompose complex problems into simple, straight-forward solutions while understanding system interdependencies and limitations · Share your knowledge of the most effective performance, scalability, architecture, and engineering patterns and methods AWS has the most services and more features within those services, than any other cloud provider–from infrastructure technologies like compute, storage, and databases–to emerging technologies, such as machine learning and artificial intelligence, data lakes and analytics, and Internet of Things. Whether its Identity features such as access management and sign on, cryptography, console, builder & developer tools, and even projects like automating all of our contractual billing systems, AWS Platform is always innovating with the customer in mind. The AWS Platform team sustains over 750 million transactions per second. Our team also puts a high value on work-life balance. Striking a healthy balance between your personal and professional life is crucial to your happiness and success here, which is why we aren’t focused on how many hours you spend at work or online. Instead, we’re happy to offer a flexible schedule so you can have a more productive and well-balanced life—both in and outside of work. We have a formal mentor search application that lets you find a mentor that works best for you based on location, job family, job level etc. Your manager can also help you find a mentor or two, because two is better than one. In addition to formal mentors, we work and train together so that we are always learning from one another, and we celebrate and support the career progression of our team members. Here at AWS, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and we host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon’s culture of inclusion is reinforced within our 14 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust. About the team Why AWS Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Utility Computing (UC) AWS Utility Computing (UC) provides product innovations — from foundational services such as Amazon’s Simple Storage Service (S3) and Amazon Elastic Compute Cloud (EC2), to consistently released new product innovations that continue to set AWS’s services and features apart in the industry. As a member of the UC organization, you’ll support the development and management of Compute, Database, Storage, Internet of Things (IoT), Platform, and Productivity Apps services in AWS, including support for customers who require specialized security solutions for their cloud services. Inclusive Team Culture Here at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences, inspire us to never stop embracing our uniqueness. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. Mentorship and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Diverse Experiences Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Basic Qualifications: - 3+ years of non-internship professional software development experience - 2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience - Experience programming with at least one software programming language Preferred Qualifications: - 3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience - Bachelor's degree in computer science or equivalent Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually", "summaryDescription" : "Software Development Engineer - AWS Identity & Access Management, AWS Identity at Amazon Development Center U.S., Inc.. Skills: AWS Identity, Access Management, Cloud platform. Create systems and services. Collaborate on systems and services", "postedDate" : "2026-06-13T07:10:56.049", "createdAt" : "2026-06-13T07:10:56.049", "lastUpdated" : "2026-06-15T03:11:17.062", "ingestTimestamp" : "2026-06-13T07:10:56.049", "mongoId" : "6a2176d374d8ee00a0c1af98", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10438698/apply", "salaryAnnualMin" : 70000, "salaryAnnualMax" : 194400, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ "Identity management", "Authentication", "Authorization", "Customer obsession", "Mentoring", "AWS Identity", "Access Management", "Cloud platform", "System interdependencies", "System limitations", "AWS cloud", "Identity features", "Access management", "Cryptography", "Cloud computing" ], "skillCount" : 15, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 638.481, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2d9f6d74d8ee00a0c5afbc", "title" : "Identity & Access Management Analyst", "company" : "Avera", "salary" : { "min" : 63960.0, "max" : 96200.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "Sioux Falls, SD", "locations" : [ "Sioux Falls, SD", "United States of America" ], "timestamp" : "2026-06-16T02:21:13.659", "fingerprint" : "8fd4d81f784b3c039806fd0ddc1350755a483265a0d164de4b2fce9fbb6fd28f", "source" : "workday", "language" : "en", "applyUrl" : "https://avera.wd5.myworkdayjobs.com/avera-careers/job/Sioux-Falls-SD/Identity---Access-Management-Analyst_R-260024363", "externalId" : "R-260024363", "industryFunction" : { }, "locationPoint" : "43.54369,-96.72796", "structuredLocations" : [ { "city" : "Sioux Falls", "state" : "South Dakota", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "43.5476008,-96.7293629" } ], "locationText" : "Sioux Falls, South Dakota, United States", "employmentType" : "FULL_TIME", "remoteFriendly" : false, "rawDescription" : "**Location:** Avera Downtown Building-Sioux Falls **Worker Type:** Regular **Work Shift:** Day Shift (United States of America) **Pay Range:** _The pay range for this position is listed below. Actual pay rate dependent upon experience._ $63,960.00 - $96,200.00 **Position Highlights** **You Belong at Avera** **Be part of a multidisciplinary team built with compassion and the goal of Moving Health Forward for you and our patients. Work where you matter.** **A Brief Overview** Apply expertise in Identity and Access Management (IAM) to analyze and support IAM solutions. Verify and validate appropriate user privileges, assigned credentials, trustworthiness, and appropriately granted resource access rights to users. Responsible for the support and administration of IAM, and manual provisioning tools and processes. This position will maintain and build processes to improve the user lifecycle experience for Avera owned and leased locations, managed locations, and third party users. It will also provide support for regulatory audits through access certification and identity data mining. Partnering with business units and support areas to identify process improvements and provisioning gaps are key functions in this job. This role may focus on technical or administrative aspects of IAM and PAM or encompass a mixture of both. **What you will do ** * Maintain and support the following IAM technologies: Identity Lifecycle Management and user provisioning/de-provisioning. User provisioning/de-provisioning. Identity Governance and Administration (IGA) for aggregating application and system data for access certification. * Leverage knowledge and expertise of ticketing system software for manual provisioning requests and processes. * Drive root cause analysis, troubleshooting and support of IAM and PAM incidents. * Work with a dynamic IAM team to support multiple competing priorities at the same time including: project work, production support, and daily incident and problem resolution activity. * Conduct periodic user access reviews for critical applications to ensure regulatory compliance. * Assist with user acceptance testing and rollout solutions that meet end-user needs and objectives. * Build relationships across the organization to identify and solve access issues. Collaborate with IAM stakeholders and business lines to meet project and program delivery milestones. * Seek opportunities for efficiencies, automation, and overall improvements in the IAM and PAM programs. * Analyze data using IAM tools to provide recommendations to improve the IAM program. Create reference documentation for IAM processes. * Monitor user activity in the IAM systems. Report on IAM system activity. **Essential Qualifications** The individual must be able to work the hours specified. To perform this job successfully, an individual must be able to perform each essential job function satisfactorily including having visual acuity adequate to perform position duties and the ability to communicate effectively with others, hear, understand and distinguish speech and other sounds. These requirements and those listed above are representative of the knowledge, skills, and abilities required to perform the essential job functions. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential job functions, as long as the accommodations do not cause undue hardship to the employer. **Required Education, License/Certification, or Work Experience: ** * At least 2 years experience in Identify and Access Management or a related field * Experience using Microsoft Active Directory and IT Service Management software * 4-6 years progressive experience in managing healthcare business functions * Experience in project management, operational efficiency improvements, process standardization improvements, and/or improved outcome activities **Preferred Education, License/Certification, or Work Experience: ** * Bachelor's in related technical discipline * Certified Information Systems Auditor (CISA) - ISACA * Certified Information Systems Security Professional (CISSP) - International Information System Security Certification Consortium (ISC2) * Security+ - Computing Technology Industry Association (CompTIA) * Experience integrating IAM products in an enterprise environment * Experience in making and implementing decisions in a complex, consensus-oriented environment **Expectations and Standards ** * Commitment to the daily application of Avera’s mission, vision, core values, and social principles to serve patients, their families, and our community. * Promote Avera’s values of compassion, hospitality, and stewardship. * Uphold Avera’s standards of Communication, Attitude, Responsiveness, and Engagement (CARE) with enthusiasm and sincerity. * Maintain confidentiality. * Work effectively in a team environment, coordinating work flow with other team members and ensuring a productive and efficient environment. * Comply with safety principles, laws, regulations, and standards associated with, but not limited to, CMS, The Joint Commission, DHHS, and OSHA if applicable. **Benefits You Need & Then Some** Avera is proud to offer a wide range of benefits to qualifying part-time and full-time employees. We support you with opportunities to help live balanced, healthy lives. Benefits are designed to meet needs of today and into the future. * PTO available day 1 for eligible hires. * Up to 5% employer matching contribution for retirement * Career development guided by hands-on training and mentorship _Avera is an Equal Opportunity Employer - Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, Veteran Status, or other categories protected by law. If you are an individual with a disability and would like to request an accommodation for help with your online application, please call 1-605-504-4444 or send an email to_[ _talent @avera.org_](mailto:talent@avera.org) _._", "summaryDescription" : "Identity & Access Management Analyst at Avera", "postedDate" : "2026-06-11T20:01:54.850", "createdAt" : "2026-06-14T20:01:54.821", "lastUpdated" : "2026-06-16T02:21:13.659", "ingestTimestamp" : "2026-06-14T20:01:54.821", "mongoId" : "6a2d9f6d74d8ee00a0c5afbc", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://avera.wd5.myworkdayjobs.com/avera-careers/job/Sioux-Falls-SD/Identity---Access-Management-Analyst_R-260024363", "salaryAnnualMin" : 63960, "salaryAnnualMax" : 96200, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "mid", "dataQualityScore" : 0.7777778, "_score" : 636.5543, "daysOld" : 4, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Healthcare", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c93eb74d8ee00a0989433", "title" : "Senior Security Operations & Vulnerability Management Engineer", "company" : "SolarWinds", "industry" : "Cybersecurity", "salary" : { "min" : 235000.0, "max" : 330000.0, "currency" : "PLN", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Security Operations & Vulnerability Management Engineer in Kraków, Poland, adjusted for the technology industry and company size." }, "location" : "Brno Office", "locations" : [ "Brno Office" ], "certifications" : [ "CISSP", "CISM", "GIAC" ], "timestamp" : "2026-06-16T02:19:05.537", "fingerprint" : "db019e26dd9c8fedb952ad0e775bb0f1c68f9bc6f33201a4166130823d9e8f27", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://jobs.solarwinds.com/job-detail/?gh_jid=4704242005&gh_jid=4704242005", "externalId" : "4704242005", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Kraków", "country" : "Poland", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "50.0469432,19.9971534" } ], "locationText" : "Kraków, Poland", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SIEM, Vulnerability scanning, Incident response, Cloud security, Python, PowerShell, Network security, Endpoint security, Threat intelligence, Security automation", "professionalSkills" : [ "Risk assessment", "Security architecture", "Forensic analysis" ], "hardSkillsList" : [ "Security operations", "Vulnerability management", "Incident handling", "Threat detection", "Security monitoring", "Penetration testing", "Digital forensics" ], "hardSkills" : [ { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Incident handling", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Penetration testing", "level" : "intermediate" }, { "name" : "Digital forensics", "level" : "intermediate" } ], "majorSkills" : "Security operations, Vulnerability management, Incident response", "majorSkillsList" : [ "Security operations", "Vulnerability management", "Incident response" ], "coreResponsibilities" : "Monitor security alerts, Investigate security incidents, Perform vulnerability assessments, Manage vulnerability remediation efforts, Develop and maintain security playbooks, Automate security processes, Conduct threat hunting activities, Analyze security logs, Respond to security breaches, Provide security recommendations", "teamCollaboration" : "Cross-functional teams; Security engineering teams; IT operations teams", "domainKnowledge" : "Cyber threat landscape; Network protocols; Operating systems security; Cloud computing security; OWASP Top 10", "domainList" : [ "cyber-threat-landscape", "network-protocols", "operating-systems-security", "cloud-computing-security", "owasp-top-10" ], "domainSpecificKnowledge" : [ "Cyber threat landscape", "Network protocols", "Operating systems security", "Cloud computing security", "OWASP Top 10" ], "toolProficiency" : [ "SIEM tools", "Vulnerability scanning tools", "Firewalls" ], "communicationSkills" : "Incident reporting; Technical documentation", "documentationSkills" : "Security policies; Procedures; Incident reports", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Forensic analysis", "outcomesObjectives" : "Reduce security incidents; Minimize vulnerability exposure; Improve security posture; Ensure compliance with security standards", "qualificationsBasic" : "5+ years of experience in security operations, 3+ years of experience in vulnerability management, Bachelor's degree in Computer Science or related field, Experience with SIEM tools, Experience with vulnerability scanning tools, Experience with incident response", "qualificationsPreferred" : "Master's degree in Computer Science or related field, Experience with cloud security, Experience with scripting languages (Python, PowerShell), Relevant security certifications (CISSP, CISM, GIAC)", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "At SolarWinds, we’re a people-first company. Our purpose is to enrich the lives of the people we serve—including our employees, customers, shareholders, partners, and communities. Join us in our mission to help customers accelerate business transformation with simple, powerful, and secure solutions. The ideal candidate thrives in an innovative, fast-paced environment and is collaborative, accountable, ready, and empathetic. We’re looking for individuals who believe they can accomplish more as a team and create lasting growth for themselves and others. We hire based on attitude, competency, and commitment. Solarians are ready to advance our world-class solutions in a fast-paced environment and accept the challenge to lead with purpose. If you’re looking to build your career with an exceptional team, you’ve come to the right place. Join SolarWinds and grow with us! We work in hybrid mode 3+2, at least 3 days at the office (with mandatory Wednesdays and Thursdays) and 2 days at the home office. The location of our office is Puszkarska 7J/Building E, 30-644 Kraków, Polska. We employ only via an employment contract – FTE. Role Overview We are looking for a Senior Engineer who views Vulnerability Management as a risk-reduction craft, not a compliance checkbox. While you will be involved in high-level security operations, your primary focus is to evolve our Threat you know how to apply them to prioritize your week. The \"Attacker Mindset\": You understand exploit development and penetration testing methodologies. You know which vulnerabilities are \"low hanging fruit\" for an attacker, even if the scanner says they’re \"Medium.\" Certifications & Education While we value experience over paper, professional certifications like CISSP, GCIH, or GEVA (GIAC Enterprise Vulnerability Assessor) are highly regarded. Specialized cloud certs (CCSP, AWS Security) or a degree in Cybersecurity/CS are a plus, but your ability to solve complex problems is what we’re really looking for. Why you’ll love this role You won't be a cog in a machine. You’ll have the autonomy to rebuild our TVM processes and a seat at the table to influence how the entire organization approaches security risk. Our benefits: 10 study days per year 2 volunteering days per year 30-day holidays after 5-year tenure, Sabbatical Leave 4 weeks of paternity leave Up to 8700 PLN personal education budget per year 300 PLN corrective glasses reimbursement every two years Medical care with Luxmed – individual, partner, or family package fully paid by the company The company fully pays for group life insurance Pension scheme (employee capital plans) with 1.5% employer contribution Unlimited access to LinkedIn Learning English/Polish classes MyBenefit platform with a monthly subsidy of 103 PLN (with various vouchers and Multisport cards available) 500 PLN per year of race fee reimbursement Solarian Referral Program SolarWinds Appreciation Program Employee Assistance Program Free lunches at the office on Wednesdays SolarWinds is an Equal Employment Opportunity Employer. SolarWinds will consider all qualified applicants for employment without regard to race, color, religion, sex, age, national origin, sexual orientation, gender identity, marital status, disability, veteran status or any other characteristic protected by law. All applications are treated in accordance with the SolarWinds Privacy Notice: https://www.solarwinds.com/applicant-privacy-notice", "summaryDescription" : "Senior Security Operations & Vulnerability Management Engineer at SolarWinds. Skills: Security operations, Vulnerability management, Incident response. Monitor security alerts. Investigate security incidents", "postedDate" : "2026-06-14T20:06:17.740", "createdAt" : "2026-06-14T20:06:17.740", "lastUpdated" : "2026-06-16T02:19:05.537", "ingestTimestamp" : "2026-06-14T20:06:17.740", "mongoId" : "6a2c93eb74d8ee00a0989433", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Security operations", "Vulnerability management", "Incident handling", "Threat detection", "Security monitoring", "Penetration testing", "Digital forensics", "Incident response", "Risk assessment", "Security architecture", "Forensic analysis", "Cyber threat landscape", "Network protocols", "Operating systems security", "Cloud computing security", "OWASP Top 10", "CISSP", "CISM", "GIAC", "SIEM tools", "Vulnerability scanning tools", "Firewalls" ], "skillCount" : 22, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 635.1051, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.97 }, { "id" : "6a2ab57974d8ee00a06dd106", "title" : "Staff Software Engineer – Identity & Access Management Platform", "company" : "Kaseya", "industry" : "Software", "salary" : { "min" : 175000.0, "max" : 245000.0, "currency" : "CAD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Lead Staff Software Engineer in the SaaS industry in Canada, adjusted for seniority and remote work." }, "location" : "Canada - Remote", "locations" : [ "Canada - Remote" ], "timestamp" : "2026-06-14T09:29:09.147", "fingerprint" : "d96f99a7cc71d8d2d3d5a5497c1925ac091fabc4b3e5cc19e803f15f54b9d2a9", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.kaseya.com/careers/jobs/id/6014445004/?gh_jid=6014445004", "externalId" : "6014445004", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Canada", "continent" : "na", "workMode" : "remote" } ], "locationText" : "Canada", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "OAuth 2.0, OpenID Connect, OIDC, SAML, JWTs, MFA, SSO, Keycloak, Authentik, Zitadel, Okta, Auth0, Microsoft Entra ID, Google Workspace, Active Directory, Open Policy Agent, OPA, Cedar", "professionalSkills" : [ "System design", "Access governance", "Tenant isolation", "Machine identity management", "Secrets management", "Certificate management", "Compliance requirements", "Audit requirements" ], "hardSkillsList" : [ "Authentication", "Authorization", "Identity governance", "User lifecycle management", "Delegated administration" ], "softSkillsList" : [ "Accountability", "Adaptability", "Commitment" ], "hardSkills" : [ { "name" : "Authentication", "level" : "intermediate" }, { "name" : "Authorization", "level" : "intermediate" }, { "name" : "Identity governance", "level" : "intermediate" }, { "name" : "User lifecycle management", "level" : "intermediate" }, { "name" : "Delegated administration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Accountability" }, { "name" : "Adaptability" }, { "name" : "Commitment" } ], "coreResponsibilities" : "Design IAM platform services, Build IAM platform services, Maintain IAM platform services, Design IAM APIs, Build IAM APIs, Maintain IAM APIs, Develop integrations between identity providers, Develop integrations between authorization systems, Develop integrations between SaaS products, Implement authentication capabilities, Implement authorization capabilities, Implement user lifecycle management, Build services supporting access governance, Build services supporting delegated administration, Build services supporting compliance requirements, Design secure service-to-service authentication, Design machine identity workflows, Improve platform scalability, Improve platform reliability, Improve platform observability, Improve operational performance, Participate in architecture reviews, Participate in technical design discussions, Mentor engineers, Contribute to engineering standards, Contribute to best practices", "teamCollaboration" : "Work with Engineering teams; Work with Security teams; Work with Product teams", "domainKnowledge" : "Identity and Access Management; SaaS products; Cloud-native services; Multi-tenant SaaS", "domainList" : [ "identity-and-access-management", "saas-products", "cloud-native-services", "multi-tenant-saas" ], "domainSpecificKnowledge" : [ "Identity and Access Management", "SaaS products", "Cloud-native services", "Multi-tenant SaaS" ], "toolProficiency" : [ "Keycloak", "Authentik", "Zitadel", "Okta", "Auth0", "Microsoft Entra ID", "Google Workspace", "Active Directory", "Open Policy Agent", "OPA", "Cedar", "GitHub Copilot", "ChatGPT" ], "qualificationsBasic" : "8+ years software engineering experience, Experience building distributed systems, Experience building platform services, Experience implementing authentication, Experience implementing authorization, Experience with OAuth 2.0, Experience with OpenID Connect, Experience with OIDC, Experience with SAML, Experience with JWTs, Experience with MFA, Experience with enterprise SSO, Experience integrating IAM platforms, Experience building cloud-native services", "qualificationsPreferred" : "Multi-tenant SaaS architectures, Tenant isolation models, RBAC, ABAC, Delegated administration, Access governance solutions, Integrating enterprise identity providers, Experience with policy engines, Machine identity management, Secrets management, Certificate management, Supporting compliance requirements, Supporting audit requirements, Using AI-assisted development tools", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "About Kaseya Kaseya is the leading provider of AI-powered IT management and cybersecurity software, serving Managed Service Providers (MSPs) and internal IT organizations worldwide. Our comprehensive platform helps organizations efficiently manage, secure, and automate their IT environments, driving operational efficiency and long-term business success. Backed by Insight Partners, a leading global software investor, Kaseya has experienced sustained double-digit growth and continues to expand its global footprint. Today, Kaseya supports customers in more than 20 countries and manages over 15 million endpoints worldwide. Founded in 2000, Kaseya has built a culture centered around innovation, accountability, and results. We are a high-growth, high-performance organization that values individuals who are driven, adaptable, and committed to delivering exceptional outcomes for our customers and teammates alike. At Kaseya, success comes from embracing challenges, moving with urgency, and continuously raising the bar. Staff Software Engineer – Identity & Access Management Platform Why Kaseya? Join a fast-growing company that’s transforming the IT industry. At Kaseya, you’ll have the opportunity to work with cutting-edge technology, collaborate with a dynamic team, and develop your career in a highimpact role. Join the Kaseya growth rocket ship and see how we are #ChangingLives! Job Summary We’re hiring a Staff Software Engineer to help build and scale Kaseya’s Identity and Access Management (IAM) platform. This role focuses on developing authentication, authorization, and identity governance services that support a growing portfolio of SaaS products. You will work closely with Engineering, Security, and Product teams to deliver secure, reliable, and scalable identity capabilities while contributing to the long-term evolution of the platform. Roles & Responsibilities Design, build, and maintain IAM platform services and APIs Develop integrations between identity providers, authorization systems, and SaaS products Implement authentication, authorization, and user lifecycle management capabilities Build services supporting access governance, delegated administration, and compliance requirements Design secure service-to-service authentication and machine identity workflows Improve platform scalability, reliability, observability, and operational performance Participate in architecture reviews and technical design discussions Mentor engineers and contribute to engineering standards and best practices Required Qualifications 8+ years of software engineering experience building distributed systems or platform services Experience implementing authentication and authorization solutions in production environments Experience with OAuth 2.0, OpenID Connect (OIDC), SAML, JWTs, MFA, or enterprise SSO Experience integrating IAM platforms such as Keycloak, Authentik, Zitadel, Okta, Auth0, or similar technologies Experience building cloud-native services for SaaS applications or platform environments Preferred Qualifications Experience with multi-tenant SaaS architectures and tenant isolation models Experience with RBAC, ABAC, delegated administration, or access governance solutions Experience integrating enterprise identity providers such as Microsoft Entra ID, Okta, Google Workspace, or Active Directory Experience with policy engines such as Open Policy Agent (OPA) or Cedar Experience with machine identity management, secrets management, or certificate management Experience supporting compliance or audit requirements within enterprise environments Experience using AI-assisted development tools (e.g., GitHub Copilot, ChatGPT) in development workflows Additional information Kaseya provides equal employment opportunity to all employees and applicants without regard to race, religion, age, ancestry, gender, sex, sexual orientation, national origin, citizenship status, physical or mental disability, veteran status, marital status, or any other characteristic protected by applicable law.", "summaryDescription" : "Staff Software Engineer – Identity & Access Management Platform at Kaseya. Design IAM platform services. Build IAM platform services", "postedDate" : "2026-06-11T21:20:40.057", "createdAt" : "2026-06-11T21:20:40.057", "lastUpdated" : "2026-06-14T09:29:09.147", "ingestTimestamp" : "2026-06-11T21:20:40.057", "mongoId" : "6a2ab57974d8ee00a06dd106", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ "Authentication", "Authorization", "Identity governance", "User lifecycle management", "Delegated administration", "Accountability", "Adaptability", "Commitment", "System design", "Access governance", "Tenant isolation", "Machine identity management", "Secrets management", "Certificate management", "Compliance requirements", "Audit requirements", "Identity and Access Management", "SaaS products", "Cloud-native services", "Multi-tenant SaaS", "Keycloak", "Authentik", "Zitadel", "Okta", "Auth0", "Microsoft Entra ID", "Google Workspace", "Active Directory", "Open Policy Agent", "OPA", "Cedar", "GitHub Copilot", "ChatGPT" ], "skillCount" : 33, "jobCategory" : "other", "jobSubcategory" : "platform", "dataQualityScore" : 0.8888889, "_score" : 634.69836, "daysOld" : 2, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Software" }, { "id" : "6a305745f292fd229cf36f90", "title" : "Uitvoerder Rope Access", "company" : "Altrad", "industry" : "Rope Access", "salary" : { "min" : 55000.0, "max" : 75000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Lead Uitvoerder Rope Access in Drachten, Netherlands, adjusted for industry and company size." }, "location" : "Drachten, Friesland, Nederland", "locations" : [ "Drachten, Friesland, Nederland" ], "certifications" : [ "VCA-VOL", "IRATA-level 1" ], "timestamp" : "2026-06-16T06:48:03.436", "fingerprint" : "c2779e2f9f7683741e97c4282b1419d042f5361ba2391b0c3cd6c26991b6e192", "source" : "recruitee", "language" : "nl", "applyUrl" : "https://bnlaltradservices.recruitee.com/o/uitvoerder-rope-access-9/c/new", "externalId" : "2640259", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Drachten", "state" : "Friesland", "country" : "Netherlands", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "53.1091111,6.0948102" } ], "locationText" : "Drachten, Friesland, Netherlands", "employmentType" : "FULL_TIME", "minimumEducation" : "vocational training", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "mid", "professionalSkills" : [ "Leidinggeven" ], "hardSkillsList" : [ "Touwtechniek" ], "softSkillsList" : [ "Klantgericht" ], "hardSkills" : [ { "name" : "Touwtechniek", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Klantgericht" } ], "majorSkills" : "Rope access, Leidinggeven", "majorSkillsList" : [ "Rope access", "Leidinggeven" ], "coreResponsibilities" : "Begeleiden van projecten, Coördineren van projecten, Naleven van veiligheidsprotocollen, Aansturen van technicians, Aansturen van supervisors, Verdelen van werk, Geven van duidelijke instructies, Organiseren van team, Bewaken van veiligheid, Bewaken van kwaliteit, Bewaken van productiviteit, Voorbereiden van werkopdrachten, Voorbereiden van instructies, Bestellen van materialen, Bewaken van voorraad, Signaleren van afwijkingen, Onderhouden van contact met klanten, Onderhouden van contact met uitvoerders, Onderhouden van contact met projectleiders, Informeren over voortgang, Informeren over knelpunten", "teamCollaboration" : "Team van specialisten; Team van professionals", "projectManagementSkills" : [ "Projectvoorbereiding" ], "domainKnowledge" : "Touwtechniek", "domainList" : [ "touwtechniek" ], "domainSpecificKnowledge" : [ "Touwtechniek" ], "communicationSkills" : "Technische instructies", "specialRequirements" : "Leaseauto, Privégebruik leaseauto", "outcomesObjectives" : "Kwalitatief afgeronde projecten; Tevreden klanten; Soepel lopende projecten", "qualificationsBasic" : "MBO-werk- en denkniveau, Ervaring leidinggeven industriële dienstverlening, VCA-VOL, Vakgerichte cursussen, IRATA-level 1 of bereidheid deze te halen, Beheersing Nederlandse taal, Spreekvaardigheid Engels, Spreekvaardigheid Duits, Rijbewijs", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Als Uitvoerder Rope Access speel je een cruciale rol in het veilig en efficiënt uitvoeren van projecten op het gebied van touwtechniek. Jij zorgt voor de juiste begeleiding, coördinatie, en naleving van veiligheidsprotocollen terwijl je samenwerkt met een team van specialisten. Klaar om je technische expertise en leiderschap te combineren? Wat ga je doen? Als Uitvoerder Rope Access ben jij de verbindende schakel tussen voorbereiding en uitvoering, waarbij je zorgt voor een soepel verloop van projecten. Aansturen van (startende) technicians en supervisors. Je verdeelt het werk, geeft duidelijke instructies en zorgt voor een goed georganiseerd, efficiënt en veilig team. Bewaken van veiligheid, kwaliteit en productiviteit. Je zorgt ervoor dat werkzaamheden veilig en volgens de regels verlopen en haalt voldoening uit kwalitatief afgeronde projecten. Voorbereiden van werkopdrachten en instructies. Je zorgt voor een goede voorbereiding met duidelijke instructies en overzicht van de te verrichten taken. Bestellen van materialen, bewaken van de voorraad en tijdig signaleren van afwijkingen. Je bestelt materialen, houdt de voorraad bij en signaleert tijdig afwijkingen. Contact onderhouden met klanten, uitvoerders en projectleiders. Je informeert hen over de voortgang en knelpunten en zorgt voor tevreden klanten en soepel lopende projecten. Wat bieden wij jou? * Een uitdagende functie bij een sterk en stabiel bedrijf waar veiligheid altijd op nummer één staat * Een aantrekkelijk salaris en 8% vakantiegeld * 25 vakantiedagen en 13 ADV dagen (o.b.v. 40 uur) met optie tot uitbetaling * Leaseauto met tankpas, ook voor privégebruik * Een gedreven team van deskundige professionals * Afwisselend werk met veel ruimte voor jouw visie * Pensioenregeling via PMT ## Requirements Wat breng je mee? Jij bent proactief, klantgericht en een natuurlijke leider. Daarnaast heb je: * MBO- werk- en denkniveau * Ervaring op het gebied van leidinggeven binnen de industriële dienstverlening * VCA-VOL en vakgerichte cursussen * IRATA-level 1 of bereidheid deze te halen * Beheersing Nederlandse taal en enige spreekvaardigheid in Engels en/of Duits * Een rijbewijs B Wie zijn wij? Altrad is een dynamisch bedrijf gespecialiseerd in isolatie, steigerbouw, engineering, rope access, tracing, painting en meer. Vakmanschap, samenwerking en persoonlijke ontwikkeling staan bij ons centraal. Onze projecten zijn uitdagend en divers. Van het isoleren van industriële installaties tot het bouwen indrukwekkende steigerconstructies: geen dag is hetzelfde. Of je nu een ervaren rot in het vak bent of net komt kijken - bij ons krijg je de kans om je talenten te ontwikkelen. Sluit je bij ons aan en bouw mee aan de toekomst - letterlijk én figuurlijk. Interesse? Solliciteer direct via de sollicitatiebutton! Heb je vragen over deze vacature? Bel of app Tammy voor meer informatie op 0626131821. Together building a sustainable future!", "summaryDescription" : "Uitvoerder Rope Access at Altrad. Skills: Rope access, Leidinggeven. Begeleiden van projecten. Coördineren van projecten", "postedDate" : "2026-06-15T06:23:36.000", "createdAt" : "2026-06-15T22:40:11.309", "lastUpdated" : "2026-06-16T06:48:03.436", "ingestTimestamp" : "2026-06-15T22:40:11.309", "mongoId" : "6a305745f292fd229cf36f90", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Touwtechniek", "Klantgericht", "Rope access", "Leidinggeven", "Projectvoorbereiding", "VCA-VOL", "IRATA-level 1" ], "skillCount" : 7, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Lead", "dataQualityScore" : 1.0, "_score" : 623.4904, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Manufacturing", "llmIndustryConfidence" : 0.92 }, { "id" : "6a2c690f74d8ee00a0905d44", "title" : "Identity & Access Management Specialist - AI Trainer - Freelance", "company" : "10x Team", "industry" : "Technology & Product", "salary" : { "min" : 90.0, "max" : 158.0, "currency" : "EUR", "frequency" : "Yearly" }, "location" : "Belgium", "locations" : [ "Belgium" ], "timestamp" : "2026-06-16T01:43:36.688", "fingerprint" : "abd637019c092bdae997799ce89ef0f2597407a8f0abd2023058d07f4abfe090", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/10xteam/d83366b0-09ea-451a-8bfa-a7baf930a7cd/application", "externalId" : "d83366b0-09ea-451a-8bfa-a7baf930a7cd", "industryFunction" : { }, "structuredLocations" : [ { "country" : "European Union", "continent" : "eu", "workMode" : "remote" }, { "country" : "United Kingdom", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "European Union; United Kingdom", "employmentType" : "CONTRACT", "professionalSkills" : [ "Identity management", "Access control", "Regulatory compliance", "Risk mitigation" ], "hardSkillsList" : [ "Identity governance", "Access provisioning", "Authentication frameworks", "Access management", "Role-based access control", "Identity lifecycle management" ], "hardSkills" : [ { "name" : "Identity governance", "level" : "intermediate" }, { "name" : "Access provisioning", "level" : "intermediate" }, { "name" : "Authentication frameworks", "level" : "intermediate" }, { "name" : "Access management", "level" : "intermediate" }, { "name" : "Role-based access control", "level" : "intermediate" }, { "name" : "Identity lifecycle management", "level" : "intermediate" } ], "majorSkills" : "AI Training", "majorSkillsList" : [ "AI Training" ], "coreResponsibilities" : "Review AI-generated outputs, Refine AI-generated outputs, Assess AI-driven recommendations, Develop real-world case studies, Create scenario variations, Identify gaps in AI recommendations, Articulate risks in AI recommendations, Provide structured feedback, Influence AI system interpretation", "domainKnowledge" : "Identity management; Access control models; Authentication; Identity governance; Regulatory frameworks; GDPR; SOX; Digital identity", "domainList" : [ "identity-management", "access-control-models", "authentication", "identity-governance", "regulatory-frameworks", "gdpr", "sox", "digital-identity" ], "domainSpecificKnowledge" : [ "Identity management", "Access control models", "Authentication", "Identity governance", "Regulatory frameworks", "GDPR", "SOX", "Digital identity" ], "continuousLearning" : "AI Academy", "problemSolvingSkills" : "Analytical", "qualificationsBasic" : "Experienced IAM consultant, Based in the EU or UK, Available 8–20 hours per week", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Updated: 11 June 2026 Freelance | 8–20 hrs/week | Remote (EU/UK) Are you an experienced Identity & Access Management (IAM) professional passionate about shaping the next generation of artificial intelligence? Join 10x Team as a Freelance IAM Consultant – AI Trainer and leverage your IAM expertise to improve leading-edge AI models, all while benefiting from the flexibility of remote, project-based work. About Us: 10x Team connects top independent professionals with leading AI labs to advance artificial intelligence. We are seeking skilled IAM specialists based in the EU or UK to help train AI systems in identity management, access control, regulatory compliance, and IAM best practices. Key Responsibilities: - Review and refine AI-generated outputs related to identity governance, access provisioning, and authentication frameworks - Assess the accuracy and practicality of AI-driven recommendations on access management, role-based access control, and compliance - Develop real-world case studies and scenarios from your professional experience in IAM - Create scenario variations covering identity lifecycle management, regulatory requirements, and risk mitigation - Identify and articulate gaps or risks in AI recommendations, providing clear, structured feedback - Influence how AI systems interpret IAM best practices and security standards About You: - Experienced IAM consultant with a proven track record in identity and access management - Based in the EU or UK - Deep understanding of access control models, authentication, identity governance, and regulatory frameworks (e.g., GDPR, SOX) - Analytical and detail-oriented, able to deliver actionable, structured feedback - Available 8–20 hours per week and comfortable working remotely and asynchronously Why Join 10x Team? - Flexible, project-based freelance assignments – 100% remote - Help shape how AI systems interpret and support the future of digital identity and access management - Access to ongoing professional development through the 10x Team AI Academy - Supportive community of independent experts, clear assignment briefs, and streamlined onboarding How to Apply: After applying, you’ll receive an email detailing the steps to: - ⁠Complete a short written assessment - Participate in an AI-powered interview Important: Your application is only complete once you finish all steps via the email link. Please note: these AI Lab missions are not traditional job openings with fixed start dates. Project demand is highly dynamic and matching depends on your expertise, availability, and current AI Lab needs. Some experts are matched within days, while others may wait longer for a suitable project. Step into the future of AI-powered identity and access management – apply today! #LI-TT1 ----------------------------------------- NOTE At 10x, there are two types of opportunities: 1. Traditional freelance missions These are regular project-based opportunities where the listed mission is the actual project you may work on. 2. AI Lab roles For AI Lab roles, we scout, review, and approve profiles for access to future project opportunities. The missions listed for AI Lab roles are not traditional job openings. AI Lab work is often highly confidential as this exposes information of what an AI Lab is working on, and project requests are unpredictable. When an AI Lab request comes in, we often need to respond within 24 hours with suitable talent. Matching depends on the specific needs of each AI Lab project and your niche expertise. Once your profile is reviewed and approved, you may be matched to relevant AI Lab projects when suitable opportunities arise. This can happen within hours, but it may also take months, depending on the researchers at the AI labs and their project needs.", "summaryDescription" : "Identity & Access Management Specialist - AI Trainer - Freelance at 10x Team. Skills: AI Training. Review AI-generated outputs. Refine AI-generated outputs", "createdAt" : "2026-06-14T19:28:26.513", "lastUpdated" : "2026-06-16T01:43:36.688", "ingestTimestamp" : "2026-06-14T19:28:26.513", "mongoId" : "6a2c690f74d8ee00a0905d44", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "<30k", "hasSalary" : false, "allSkills" : [ "Identity governance", "Access provisioning", "Authentication frameworks", "Access management", "Role-based access control", "Identity lifecycle management", "AI Training", "Identity management", "Access control", "Regulatory compliance", "Risk mitigation", "Access control models", "Authentication", "Regulatory frameworks", "GDPR", "SOX", "Digital identity" ], "skillCount" : 17, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 617.9836, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a309f59f292fd229c109341", "title" : "Technology Consultant (Resilience, PAM & IAM)", "company" : "Talan", "industry" : "Information Technology And Services", "salary" : { "min" : 85000.0, "max" : 120000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Technology Consultant in London, UK, within the Financial Services industry, adjusted for company size and specific resilience, PAM, and IAM expertise." }, "location" : "London, England, United Kingdom", "locations" : [ "London", "England", "United Kingdom" ], "timestamp" : "2026-06-16T12:09:52.533", "fingerprint" : "e0bd73dd19413388a429e1a242a183cc3df2af5e571ae26f4da0d4890b0c88d5", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Talan/744000131490311-technology-consultant-resilience-pam-iam-", "externalId" : "744000131490311", "industryFunction" : { }, "structuredLocations" : [ { "city" : "London", "state" : "England", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "51.5074456,-0.1277653" } ], "locationText" : "London, England, United Kingdom", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "PAM tooling", "professionalSkills" : [ "Control assessment", "Remediation design", "Stakeholder management", "Control operating models" ], "hardSkillsList" : [ "Risk assessment", "Control testing", "Issue management", "Governance processes" ], "hardSkills" : [ { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Control testing", "level" : "intermediate" }, { "name" : "Issue management", "level" : "intermediate" }, { "name" : "Governance processes", "level" : "intermediate" } ], "majorSkills" : "Operational Resilience, PAM, IAM, Control remediation", "majorSkillsList" : [ "Operational Resilience", "PAM", "IAM", "Control remediation" ], "coreResponsibilities" : "Review underperforming controls, Identify root causes, Identify design deficiencies, Identify operating effectiveness gaps, Assess control designs, Define remediation plans, Drive remediation activities, Partner with technology teams, Partner with risk functions, Partner with audit stakeholders, Support control model optimisation, Embed control discipline, Track remediation progress, Escalate risks, Escalate blockers, Escalate overdue actions, Produce reporting, Review remediation evidence, Support audit preparation, Ensure remediation outcomes defensible", "teamCollaboration" : "Technology teams; Risk and compliance; Internal audit; Assurance stakeholders", "projectManagementSkills" : [ "Remediation planning", "Milestone tracking" ], "domainKnowledge" : "Operational Resilience; Privileged Access Management; Identity & Access Management; Critical business services; Disaster recovery; Business continuity; Technology recovery controls; Impact tolerances; Recovery plans; Continuity procedures; Privileged account governance; Joiner-Mover-Leaver processes; Access recertification; Access reviews; Break-glass access; Session monitoring; Privileged account ownership; Access provisioning; Access de-provisioning; Role-based access controls; Segregation of duties; Access reviews governance; IAM control testing; Leaver controls", "domainList" : [ "operational-resilience", "privileged-access-management", "identity-access-management", "critical-business-services", "disaster-recovery", "business-continuity", "technology-recovery-controls", "impact-tolerances", "recovery-plans", "continuity-procedures", "privileged-account-governance", "joiner-mover-leaver-processes", "access-recertification", "access-reviews", "break-glass-access", "session-monitoring", "privileged-account-ownership", "access-provisioning", "access-de-provisioning", "role-based-access-controls", "segregation-of-duties", "access-reviews-governance", "iam-control-testing", "leaver-controls" ], "domainSpecificKnowledge" : [ "Operational Resilience", "Privileged Access Management", "Identity & Access Management", "Critical business services", "Disaster recovery", "Business continuity", "Technology recovery controls", "Impact tolerances", "Recovery plans", "Continuity procedures", "Privileged account governance", "Joiner-Mover-Leaver processes", "Access recertification", "Access reviews", "Break-glass access", "Session monitoring", "Privileged account ownership", "Access provisioning", "Access de-provisioning", "Role-based access controls", "Segregation of duties", "Access reviews governance", "IAM control testing", "Leaver controls" ], "communicationSkills" : "Senior-level reporting; Constructive challenge", "documentationSkills" : "Evidence requirements", "problemSolvingSkills" : "Root cause analysis; Analytical capability", "specialRequirements" : "On-Prem 4 days per week", "outcomesObjectives" : "Strengthen underperforming controls; Enhance controls; Ensure remediation activities evidenced; Ensure robust control improvements; Ensure sustainable control improvements; Ensure remediation outcomes audit-ready", "qualificationsBasic" : "Control remediation experience, Assess control design effectiveness, Assess operating effectiveness, Manage remediation lifecycle", "qualificationsPreferred" : "Resilience testing evidence experience, Impact tolerances experience, Recovery plans experience, Continuity procedures experience, PAM tooling experience, Break-glass access experience, Session monitoring experience, Privileged account ownership models experience, Access provisioning experience, Access de-provisioning experience, Role-based access controls experience, Segregation of duties experience, Access reviews experience, IAM control testing experience, Leaver controls experience", "remoteFriendly" : false, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Talan is supporting a key client in delivering a critical remediation programme focused on strengthening underperforming technology controls. We are seeking an experienced Technology Consultant to drive improvements across control design and operating effectiveness. Contract with strong chance of extensions Location - London On-Prem 4 days per week This role will play a central part in enhancing controls related to: * Operational Resilience * Privileged Access Management (PAM) * Identity & Access Management (IAM) You will work closely with technology, risk, and audit stakeholders to ensure remediation activities are clearly defined, executed effectively, and evidenced to a high standard. Key Responsibilities Control Assessment & Diagnosis * Review underperforming controls to identify: * Root causes * Design deficiencies * Operating effectiveness gaps * Assess whether current control designs are fit for purpose and aligned with regulatory expectations Remediation Planning & Execution * Define structured remediation plans, including: * Actions * Ownership * Milestones * Evidence requirements * Drive delivery of remediation activities in collaboration with control owners and SMEs Stakeholder Engagement * Partner with: * Technology and engineering teams * Risk & compliance functions * Internal audit and assurance stakeholders * Provide constructive challenge to ensure robust and sustainable control improvements Control Framework Enhancement * Support optimisation of control operating models, including: * Control frequency * Evidence standards * Accountability models * Governance processes * Embed consistent control discipline across resilience, PAM, and IAM domains Governance & Reporting * Track remediation progress and proactively escalate: * Risks * Blockers * Overdue actions * Produce clear, concise reporting for: * Senior stakeholders * Governance forums * Review remediation evidence to confirm completeness and sustainability Audit & Assurance Readiness * Support preparation for: * Control testing * Internal/external audit * Regulatory reviews * Ensure remediation outcomes are defensible and audit-ready Essential Experience * Proven experience in one or more of the following: * Technology Risk / IT Controls * Cyber Risk * IT Audit * Operational Resilience * Strong track record delivering control remediation in: * Financial services * Banking * Regulated environments * Experience assessing: * Control design effectiveness * Operating effectiveness * Familiarity with: * Risk & Control Self-Assessments (RCSA) * Audit findings and issue management * Assurance and regulatory reviews * Demonstrated ability to manage remediation lifecycle from identification through to closure Operational Resilience * Understanding of: * Critical business services * Disaster recovery & business continuity * Technology recovery controls * Experience with: * Resilience testing evidence * Impact tolerances * Recovery plans & continuity procedures Privileged Access Management (PAM) * Knowledge of: * Privileged account governance * Joiner-Mover-Leaver processes * Access recertification and reviews * Exposure to: * PAM tooling (e.g. vaulting solutions) * Break-glass access * Session monitoring * Privileged account ownership models Identity & Access Management (IAM) * Experience with: * Access provisioning & de-provisioning * Role-based access controls (RBAC) * Segregation of duties (SoD) * Strong understanding of: * Access reviews and governance * IAM control testing * Leaver controls Key Skills & Attributes * Strong analytical capability in control assessment and remediation design * Ability to translate complex control issues into practical, actionable solutions * Excellent stakeholder management across technical and non-technical audiences * High-quality written communication, including senior-level reporting * Confident in constructively challenging control owners * Comfortable operating in ambiguous, fast-paced environments * Strong attention to detail, particularly in reviewing remediation evidence ## Additional Information #TalanUK", "summaryDescription" : "Technology Consultant (Resilience, PAM & IAM) at Talan. Skills: Operational Resilience, PAM, IAM, Control remediation. Review underperforming controls. Identify root causes", "postedDate" : "2026-06-10T15:50:26.000", "createdAt" : "2026-06-16T03:36:11.242", "lastUpdated" : "2026-06-16T12:09:52.533", "ingestTimestamp" : "2026-06-16T03:36:11.242", "mongoId" : "6a309f59f292fd229c109341", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Risk assessment", "Control testing", "Issue management", "Governance processes", "Operational Resilience", "PAM", "IAM", "Control remediation", "Control assessment", "Remediation design", "Stakeholder management", "Control operating models", "Remediation planning", "Milestone tracking", "Privileged Access Management", "Identity & Access Management", "Critical business services", "Disaster recovery", "Business continuity", "Technology recovery controls", "Impact tolerances", "Recovery plans", "Continuity procedures", "Privileged account governance", "Joiner-Mover-Leaver processes", "Access recertification", "Access reviews", "Break-glass access", "Session monitoring", "Privileged account ownership", "Access provisioning", "Access de-provisioning", "Role-based access controls", "Segregation of duties", "Access reviews governance", "IAM control testing", "Leaver controls" ], "skillCount" : 37, "jobCategory" : "general", "jobSubcategory" : "general", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 612.5633, "daysOld" : 5, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305f20f292fd229cf78f42", "title" : "Technology Consultant (Resilience, PAM & IAM)", "company" : "Talan", "industry" : "Information Technology And Services", "salary" : { "min" : 85000.0, "max" : 120000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Technology Consultant in London, UK, within the Financial Services industry, adjusted for seniority and company size." }, "location" : "London, England, United Kingdom", "locations" : [ "London", "England", "United Kingdom" ], "timestamp" : "2026-06-16T10:07:41.195", "fingerprint" : "59134e0309b7368ba8470fda928edb1a66f91952866d9f0edc8f46c9c2d36c00", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Talan/744000131490311-technology-consultant-resilience-pam-iam-", "externalId" : "744000131490311", "industryFunction" : { }, "structuredLocations" : [ { "city" : "London", "state" : "England", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "51.5074456,-0.1277653" } ], "locationText" : "London, England, United Kingdom", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "PAM tooling, Vaulting solutions", "professionalSkills" : [ "Control design", "Operating effectiveness", "Remediation planning", "Stakeholder management", "Control assessment", "Issue management", "Governance processes", "Audit readiness" ], "hardSkillsList" : [ "Control remediation", "Risk assessment", "Issue resolution", "Access governance", "Access provisioning", "Access de-provisioning", "Role-based access", "Segregation of duties", "Business continuity", "Disaster recovery" ], "hardSkills" : [ { "name" : "Control remediation", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Issue resolution", "level" : "intermediate" }, { "name" : "Access governance", "level" : "intermediate" }, { "name" : "Access provisioning", "level" : "intermediate" }, { "name" : "Access de-provisioning", "level" : "intermediate" }, { "name" : "Role-based access", "level" : "intermediate" }, { "name" : "Segregation of duties", "level" : "intermediate" }, { "name" : "Business continuity", "level" : "intermediate" }, { "name" : "Disaster recovery", "level" : "intermediate" } ], "majorSkills" : "Operational Resilience, PAM, IAM, Control remediation", "majorSkillsList" : [ "Operational Resilience", "PAM", "IAM", "Control remediation" ], "coreResponsibilities" : "Review underperforming controls, Identify root causes, Identify Design deficiencies, Identify Operating effectiveness gaps, Assess control designs, Define structured remediation plans, Drive delivery of remediation activities, Partner with Technology teams, Partner with engineering teams, Partner with Risk functions, Partner with compliance functions, Partner with Internal audit, Partner with assurance stakeholders, Support optimisation of control operating models, Embed consistent control discipline, Track remediation progress, Proactively escalate Risks, Proactively escalate Blockers, Proactively escalate Overdue actions, Produce clear reporting, Produce concise reporting, Review remediation evidence, Support preparation for Control testing, Support preparation for Internal audit, Support preparation for external audit, Support preparation for Regulatory reviews", "teamCollaboration" : "Technology teams; Risk and compliance; Internal audit; Assurance stakeholders; Control owners; SMEs", "projectManagementSkills" : [ "Remediation lifecycle" ], "domainKnowledge" : "Operational Resilience; Privileged Access Management; Identity & Access Management; Financial services; Banking; Regulated environments; Critical business services; Disaster recovery; Business continuity; Technology recovery controls; Privileged account governance; Joiner-Mover-Leaver processes; Access recertification; Access provisioning; Access de-provisioning; Role-based access controls; Segregation of duties; Access reviews; IAM control testing; Leaver controls", "domainList" : [ "operational-resilience", "privileged-access-management", "identity-access-management", "financial-services", "banking", "regulated-environments", "critical-business-services", "disaster-recovery", "business-continuity", "technology-recovery-controls", "privileged-account-governance", "joiner-mover-leaver-processes", "access-recertification", "access-provisioning", "access-de-provisioning", "role-based-access-controls", "segregation-of-duties", "access-reviews", "iam-control-testing", "leaver-controls" ], "domainSpecificKnowledge" : [ "Operational Resilience", "Privileged Access Management", "Identity & Access Management", "Financial services", "Banking", "Regulated environments", "Critical business services", "Disaster recovery", "Business continuity", "Technology recovery controls", "Privileged account governance", "Joiner-Mover-Leaver processes", "Access recertification", "Access provisioning", "Access de-provisioning", "Role-based access controls", "Segregation of duties", "Access reviews", "IAM control testing", "Leaver controls" ], "communicationSkills" : "Senior-level reporting; Constructive challenge", "problemSolvingSkills" : "Analytical capability; Root cause analysis; Translate complex issues", "specialRequirements" : "On-Prem 4 days per week", "outcomesObjectives" : "Strengthening underperforming controls; Enhancing controls; Control design improvements; Operating effectiveness improvements; Sustainable control improvements; Audit-ready remediation outcomes", "qualificationsBasic" : "Proven experience in Technology Risk, Proven experience in IT Controls, Proven experience in Cyber Risk, Proven experience in IT Audit, Proven experience in Operational Resilience, Track record delivering control remediation in Financial services, Track record delivering control remediation in Banking, Track record delivering control remediation in Regulated environments, Experience assessing Control design effectiveness, Experience assessing Operating effectiveness, Familiarity with Risk & Control Self-Assessments, Familiarity with Audit findings and issue management, Familiarity with Assurance and regulatory reviews, Demonstrated ability to manage remediation lifecycle, Understanding of Critical business services, Understanding of Disaster recovery & business continuity, Understanding of Technology recovery controls, Knowledge of Privileged account governance, Knowledge of Joiner-Mover-Leaver processes, Knowledge of Access recertification and reviews, Experience with Access provisioning & de-provisioning, Experience with Role-based access controls, Experience with Segregation of duties, Understanding of Access reviews and governance, Understanding of IAM control testing, Understanding of Leaver controls", "qualificationsPreferred" : "Experience with PAM tooling, Experience with Break-glass access, Experience with Session monitoring, Experience with Privileged account ownership models, Experience with Resilience testing evidence, Experience with Impact tolerances, Experience with Recovery plans & continuity procedures", "remoteFriendly" : false, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Talan is supporting a key client in delivering a critical remediation programme focused on strengthening underperforming technology controls. We are seeking an experienced Technology Consultant to drive improvements across control design and operating effectiveness. Contract with strong chance of extensions Location - London On-Prem 4 days per week This role will play a central part in enhancing controls related to: * Operational Resilience * Privileged Access Management (PAM) * Identity & Access Management (IAM) You will work closely with technology, risk, and audit stakeholders to ensure remediation activities are clearly defined, executed effectively, and evidenced to a high standard. Key Responsibilities Control Assessment & Diagnosis * Review underperforming controls to identify: * Root causes * Design deficiencies * Operating effectiveness gaps * Assess whether current control designs are fit for purpose and aligned with regulatory expectations Remediation Planning & Execution * Define structured remediation plans, including: * Actions * Ownership * Milestones * Evidence requirements * Drive delivery of remediation activities in collaboration with control owners and SMEs Stakeholder Engagement * Partner with: * Technology and engineering teams * Risk & compliance functions * Internal audit and assurance stakeholders * Provide constructive challenge to ensure robust and sustainable control improvements Control Framework Enhancement * Support optimisation of control operating models, including: * Control frequency * Evidence standards * Accountability models * Governance processes * Embed consistent control discipline across resilience, PAM, and IAM domains Governance & Reporting * Track remediation progress and proactively escalate: * Risks * Blockers * Overdue actions * Produce clear, concise reporting for: * Senior stakeholders * Governance forums * Review remediation evidence to confirm completeness and sustainability Audit & Assurance Readiness * Support preparation for: * Control testing * Internal/external audit * Regulatory reviews * Ensure remediation outcomes are defensible and audit-ready Essential Experience * Proven experience in one or more of the following: * Technology Risk / IT Controls * Cyber Risk * IT Audit * Operational Resilience * Strong track record delivering control remediation in: * Financial services * Banking * Regulated environments * Experience assessing: * Control design effectiveness * Operating effectiveness * Familiarity with: * Risk & Control Self-Assessments (RCSA) * Audit findings and issue management * Assurance and regulatory reviews * Demonstrated ability to manage remediation lifecycle from identification through to closure Operational Resilience * Understanding of: * Critical business services * Disaster recovery & business continuity * Technology recovery controls * Experience with: * Resilience testing evidence * Impact tolerances * Recovery plans & continuity procedures Privileged Access Management (PAM) * Knowledge of: * Privileged account governance * Joiner-Mover-Leaver processes * Access recertification and reviews * Exposure to: * PAM tooling (e.g. vaulting solutions) * Break-glass access * Session monitoring * Privileged account ownership models Identity & Access Management (IAM) * Experience with: * Access provisioning & de-provisioning * Role-based access controls (RBAC) * Segregation of duties (SoD) * Strong understanding of: * Access reviews and governance * IAM control testing * Leaver controls Key Skills & Attributes * Strong analytical capability in control assessment and remediation design * Ability to translate complex control issues into practical, actionable solutions * Excellent stakeholder management across technical and non-technical audiences * High-quality written communication, including senior-level reporting * Confident in constructively challenging control owners * Comfortable operating in ambiguous, fast-paced environments * Strong attention to detail, particularly in reviewing remediation evidence ## Additional Information #TalanUK", "summaryDescription" : "Technology Consultant (Resilience, PAM & IAM) at Talan. Skills: Operational Resilience, PAM, IAM, Control remediation. Review underperforming controls. Identify root causes", "postedDate" : "2026-06-10T15:50:26.000", "createdAt" : "2026-06-15T23:48:24.916", "lastUpdated" : "2026-06-16T10:07:41.195", "ingestTimestamp" : "2026-06-15T23:48:24.916", "mongoId" : "6a305f20f292fd229cf78f42", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Control remediation", "Risk assessment", "Issue resolution", "Access governance", "Access provisioning", "Access de-provisioning", "Role-based access", "Segregation of duties", "Business continuity", "Disaster recovery", "Operational Resilience", "PAM", "IAM", "Control design", "Operating effectiveness", "Remediation planning", "Stakeholder management", "Control assessment", "Issue management", "Governance processes", "Audit readiness", "Remediation lifecycle", "Privileged Access Management", "Identity & Access Management", "Financial services", "Banking", "Regulated environments", "Critical business services", "Technology recovery controls", "Privileged account governance", "Joiner-Mover-Leaver processes", "Access recertification", "Role-based access controls", "Access reviews", "IAM control testing", "Leaver controls" ], "skillCount" : 36, "jobCategory" : "general", "jobSubcategory" : "general", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 612.5633, "daysOld" : 5, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2a46b974d8ee00a05d6a7d", "title" : "Senior Identity and Access Management Engineer", "salary" : { "min" : 4500.0, "max" : 6000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : false }, "location" : "Latvia", "locations" : [ "Latvia" ], "timestamp" : "2026-06-12T09:41:29.161", "fingerprint" : "c97b013f103e881c5d8058769d1429b902a4fe4ec56206c5901312657e88331f", "source" : "workday", "language" : "en", "applyUrl" : "https://if.wd3.myworkdayjobs.com/Careers/job/Rga-Central/Senior-Identity-and-Access-Management-Engineer_JobReqID10965", "externalId" : "JobReqID10965", "locationPoint" : "56.8796,24.6032", "structuredLocations" : [ { "city" : "Riga", "country" : "Latvia", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "56.9493977,24.1051846" } ], "locationText" : "Riga, Latvia", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "C#, HTML, CSS, OpenID Connect, OAuth 2.1, SCIM, Azure Entra ID, OKTA, Curity, Virtual machines, Containers, Serverless services, IaC, Gateways, Azure Cloud, Azure DevOps, PostgreSQL, Terraform, React", "professionalSkills" : [ "Identity architecture", "Best practices", "Technical leadership", "Agile planning", "QA process", "IAM integration patterns" ], "hardSkillsList" : [ "Authentication", "Authorization", "Governance workflows", "User provisioning", "Access control" ], "softSkillsList" : [ "Leadership", "Proactive mindset" ], "hardSkills" : [ { "name" : "Authentication", "level" : "intermediate" }, { "name" : "Authorization", "level" : "intermediate" }, { "name" : "Governance workflows", "level" : "intermediate" }, { "name" : "User provisioning", "level" : "intermediate" }, { "name" : "Access control", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Proactive mindset" } ], "majorSkills" : "IAM protocols, Cloud resources", "majorSkillsList" : [ "IAM protocols", "Cloud resources" ], "coreResponsibilities" : "Improve IAM solutions, Build new IAM solutions, Improve developer documentation, Build code examples, Build demo apps, Achieve high availability, Maintain high availability, Implement security practices, Implement security processes, Choose IAM integration patterns, Choose IAM integration practices, Provide technical leadership, Provide guidance to engineers, Participate in Agile planning, Participate in QA process, Develop IAM knowledge, Develop IAM expertise", "teamCollaboration" : "Internal teams; International environment", "projectManagementSkills" : [ "Agile" ], "domainKnowledge" : "Identity and Access Management; Role based access control; Attribute-based access control; Cloud-native architecture", "domainList" : [ "identity-and-access-management", "role-based-access-control", "attribute-based-access-control", "cloud-native-architecture" ], "domainSpecificKnowledge" : [ "Identity and Access Management", "Role based access control", "Attribute-based access control", "Cloud-native architecture" ], "toolProficiency" : [ "Azure DevOps", "Terraform" ], "communicationSkills" : "Presentation skills; Issue tracking; Documentation", "documentationSkills" : "Developer documentation", "continuousLearning" : "Proactively develop knowledge", "outcomesObjectives" : "Improve developer experience; Strengthen security", "qualificationsBasic" : "5+ years of experience with C#, 5+ years of experience with HTML/CSS, Background in IAM protocols, Experience with IAM services, Understanding of role based access control, Understanding of attribute-based access control, Experience working with cloud resources, Motivation to learn IAM practices, Excellent English communication skills, Excellent Latvian communication skills, Excellent English presentation skills, Excellent Latvian presentation skills, Issue tracking skills, Documentation skills for collaboration", "qualificationsPreferred" : "Agile development experience, Azure Cloud hands-on knowledge, Azure DevOps hands-on knowledge, Experience with PostgreSQL, Experience with Terraform, Experience with IaC, React knowledge for frontend", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "**About the role** As an IAM Engineer, you’ll design and build identity and access management systems that support our internal services. You’ll work hands‑on with modern IAM technologies to implement secure authentication, authorization, and governance workflows. You’ll collaborate closely with internal teams to translate business and technical requirements into scalable IAM solutions. You’ll be the expert we’ll rely on for identity related architecture and best practices. Your work will directly shape our IAM infrastructure, improve developer experience, and strengthen security across the organization. **What are you going to do?** * Improve existing and build new IAM solutions * Improve developer documentation, build code examples and demo apps * Ensure we have the right processes and tooling to achieve and maintain high availability * Ensure we have the best security practices and processes in place for IAM service operation * Help new business initiatives choosing correct IAM integration patterns and practices * Provide technical leadership and guidance for less experienced engineers * Participate in team Agile planning process * Participate in team QA process * Proactively develop knowledge and expertise in IAM field **What do we expect from you?** **Must have** * 5+ years of experience with C# and HTML/CSS * Background in IAM protocols (OpenID Connect, OAuth 2.1, and SCIM) supporting authentication and user provisioning * Experience with IAM services (Azure Entra ID, OKTA, Curity etc.) * Understanding of role based and/or attribute-based access control * Experience working with cloud resources – virtual machines, containers, serverless services, IaC, gateways etc. * Motivation to learn all technical aspects of best IAM practices and standards * Excellent English and Latvian communication and presentation skills, including issue tracking and documentation for collaboration locally and in international environment * Proactive mindset with focus on high quality over quantity **Nice to have** * Agile development experience * Azure Cloud and Azure DevOps hands-on knowledge * Experience with PostgreSQL (Or any similar database) * Experience with Terraform, IaC * React knowledge for frontend work **Our promise to you** * Monthly salary: €4500 - €6000 gross depending on your qualifications * Strong company culture: knowledge sharing, company events, interesting speakers, and other inspiring initiatives * Career and development opportunities * Challenging and exciting projects with autonomy to plan own tasks * Extra vacation days, annual bonus, great insurance benefits, discounts on our products for you and your family, gifts, etc. * A flexible hybrid work model, with our office as the main workplace * A recently renovated office in Riga center with a 24/7 gym on the premises Read more about [benefits for our employees.](https://ifpc.teamtailor.com/pages/our-promise-to-you) **Application deadline** : **June 30****, 2026** Your application will be processed according to our [**privacy notice**](https://www.if.lv/globalassets/lv/files/hr/recruitment-privacy-notice.pdf)**.**", "summaryDescription" : "Senior Identity and Access Management Engineer. Skills: IAM protocols, Cloud resources. Improve IAM solutions. Build new IAM solutions", "postedDate" : "2026-06-10T13:44:03.181", "createdAt" : "2026-06-11T13:44:03.123", "lastUpdated" : "2026-06-12T09:41:29.161", "ingestTimestamp" : "2026-06-11T13:44:03.123", "mongoId" : "6a2a46b974d8ee00a05d6a7d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://if.wd3.myworkdayjobs.com/Careers/job/Rga-Central/Senior-Identity-and-Access-Management-Engineer_JobReqID10965", "salaryBand" : "<30k", "hasSalary" : false, "allSkills" : [ "Authentication", "Authorization", "Governance workflows", "User provisioning", "Access control", "Leadership", "Proactive mindset", "IAM protocols", "Cloud resources", "Identity architecture", "Best practices", "Technical leadership", "Agile planning", "QA process", "IAM integration patterns", "Agile", "Identity and Access Management", "Role based access control", "Attribute-based access control", "Cloud-native architecture", "Azure DevOps", "Terraform" ], "skillCount" : 22, "jobCategory" : "engineering", "seniorityLevel" : "senior", "dataQualityScore" : 0.8888889, "_score" : 605.34326, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2c93eb74d8ee00a0989434", "title" : "Senior Security Operations & Vulnerability Management Engineer", "company" : "SolarWinds", "industry" : "Cybersecurity", "salary" : { "min" : 1300000.0, "max" : 1950000.0, "currency" : "CZK", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Security Operations & Vulnerability Management Engineer in Brno, Czech Republic, adjusted for the technology industry and senior experience level." }, "location" : "Brno Office", "locations" : [ "Brno Office" ], "certifications" : [ "CISSP", "GCIH", "GEVA", "CCSP", "AWS Security" ], "timestamp" : "2026-06-15T03:22:04.655", "fingerprint" : "58cb5c96ef3234c5672b44727a6545655f9ad6183f41df9358e0d780f7dd3986", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://jobs.solarwinds.com/job-detail/?gh_jid=4691812005&gh_jid=4691812005", "externalId" : "4691812005", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Brno", "country" : "Czech Republic", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "49.1922443,16.6113382" } ], "locationText" : "Brno, Czech Republic", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Security Operations, Vulnerability Management, Threat intelligence", "professionalSkills" : [ "Risk reduction", "Problem solving" ], "hardSkillsList" : [ "Exploit development", "Penetration testing" ], "softSkillsList" : [ "Accountable", "Empathetic" ], "hardSkills" : [ { "name" : "Exploit development", "level" : "intermediate" }, { "name" : "Penetration testing", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Accountable" }, { "name" : "Empathetic" } ], "majorSkills" : "Vulnerability Management, Security Operations, Threat intelligence", "majorSkillsList" : [ "Vulnerability Management", "Security Operations", "Threat intelligence" ], "coreResponsibilities" : "Evolve Threat intelligence, Prioritize vulnerabilities, Rebuild TVM processes, Influence security risk approach", "teamCollaboration" : "Innovative environment; Fast-paced environment", "domainKnowledge" : "Exploit development; Penetration testing methodologies", "domainList" : [ "exploit-development", "penetration-testing-methodologies" ], "domainSpecificKnowledge" : [ "Exploit development", "Penetration testing methodologies" ], "continuousLearning" : "LinkedIn Learning; English classes; Czech classes; Study days", "problemSolvingSkills" : "Solve complex problems", "qualificationsBasic" : "Vulnerability Management focus, Attacker Mindset, Exploit development, Penetration testing methodologies", "qualificationsPreferred" : "CISSP, GCIH, GEVA, CCSP, AWS Security, Degree in Cybersecurity/CS", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "At SolarWinds, we’re a people-first company. Our purpose is to enrich the lives of the people we serve—including our employees, customers, shareholders, partners, and communities. Join us in our mission to help customers accelerate business transformation with simple, powerful, and secure solutions. The ideal candidate thrives in an innovative, fast-paced environment and is collaborative, accountable, ready, and empathetic. We’re looking for individuals who believe they can accomplish more as a team and create lasting growth for themselves and others. We hire based on attitude, competency, and commitment. Solarians are ready to advance our world-class solutions in a fast-paced environment and accept the challenge to lead with purpose. If you’re looking to build your career with an exceptional team, you’ve come to the right place. Join SolarWinds and grow with us! We work in a hybrid mode 3+2, with a minimum of 3 days at the office (with mandatory Tuesdays and Wednesdays) and a maximum of 2 days at the home office. The location of our office is Holandská 873/6, Brno – Štýřice, 639 00. We employ only via an employment contract – full-time employment (HPP). Role Overview We are looking for a Senior Engineer who views Vulnerability Management as a risk-reduction craft, not a compliance checkbox. While you will be involved in high-level security operations, your primary focus is to evolve our Threat you know how to apply them to prioritize your week. The \"Attacker Mindset\": You understand exploit development and penetration testing methodologies. You know which vulnerabilities are \"low hanging fruit\" for an attacker, even if the scanner says they’re \"Medium.\" Certifications & Education While we value experience over paper, professional certifications like CISSP, GCIH, or GEVA (GIAC Enterprise Vulnerability Assessor) are highly regarded. Specialized cloud certs (CCSP, AWS Security) or a degree in Cybersecurity/CS are a plus, but your ability to solve complex problems is what we’re really looking for. Why you’ll love this role You won't be a cog in a machine. You’ll have the autonomy to rebuild our TVM processes and a seat at the table to influence how the entire organization approaches security risk. Our benefits: 25 days of vacation per year 3 sick days per year 10 study days per year 2 volunteering days per year 4 weeks’ holidays after 5-year tenure, Sabbatical Leave Up to 48 300CZK personal education budget per year Pension or life insurance matching donation up to 3% of the salary or 4000 CZK per month Cash allowance for meals of 95 CZK per working day Unlimited access to LinkedIn Learning English/Czech classes Multisport card Solarian Referral Program SolarWinds Appreciation Program Giving – Donation Matching Employee Assistance Competitive Race Reimbursement Breakfast on Wednesdays Fresh fruits and snacks on Mondays On-site gym Twice-weekly workout classes at the office Once a week yoga sessions at the office SolarWinds is an Equal Employment Opportunity Employer. SolarWinds will consider all qualified applicants for employment without regard to race, color, religion, sex, age, national origin, sexual orientation, gender identity, marital status, disability, veteran status or any other characteristic protected by law. All applications are treated in accordance with the SolarWinds Privacy Notice: https://www.solarwinds.com/applicant-privacy-notice", "summaryDescription" : "Senior Security Operations & Vulnerability Management Engineer at SolarWinds. Skills: Vulnerability Management, Security Operations, Threat intelligence. Evolve Threat intelligence. Prioritize vulnerabilities", "postedDate" : "2026-06-13T20:48:33.668", "createdAt" : "2026-06-13T20:48:33.668", "lastUpdated" : "2026-06-15T03:22:04.655", "ingestTimestamp" : "2026-06-13T20:48:33.668", "mongoId" : "6a2c93eb74d8ee00a0989434", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Exploit development", "Penetration testing", "Accountable", "Empathetic", "Vulnerability Management", "Security Operations", "Threat intelligence", "Risk reduction", "Problem solving", "Penetration testing methodologies", "CISSP", "GCIH", "GEVA", "CCSP", "AWS Security" ], "skillCount" : 15, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 604.5721, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "69e104422beec4dd3def2881", "title" : "Operations Engineer, Operations Engineering", "company" : "Amazon.com Services LLC", "industry" : "Operations, IT, Support Engineering, Ops Engineering, operations", "salary" : { "min" : 60000.0, "max" : 126400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Austin, Texas, USA", "locations" : [ "Austin, Texas, USA" ], "timestamp" : "2026-06-15T07:36:14.576", "fingerprint" : "18a0e87dc4bbf4ac36cf3535b691bc3218d87b28b810a8060cc81cb178c2cf34", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10385958/apply", "externalId" : "f1b41285-1794-4847-8d4c-bbebaa534d32", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "AutoCAD, REVIT, BIM 360, VBA, SQL", "professionalSkills" : [ "Project lifecycle management", "Distribution systems design", "Fulfillment center design", "Distribution center design", "Process improvement" ], "hardSkillsList" : [ "Systems design", "Equipment design", "Throughput qualification", "Safety qualification", "Change order management", "Purchase order management", "Invoice approval" ], "softSkillsList" : [ "Leadership", "Customer obsessed" ], "hardSkills" : [ { "name" : "Systems design", "level" : "intermediate" }, { "name" : "Equipment design", "level" : "intermediate" }, { "name" : "Throughput qualification", "level" : "intermediate" }, { "name" : "Safety qualification", "level" : "intermediate" }, { "name" : "Change order management", "level" : "intermediate" }, { "name" : "Purchase order management", "level" : "intermediate" }, { "name" : "Invoice approval", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Customer obsessed" } ], "majorSkills" : "Operations Engineering, Project management, Distribution solutions", "majorSkillsList" : [ "Operations Engineering", "Project management", "Distribution solutions" ], "coreResponsibilities" : "Manage project lifecycles, Deliver on objectives, Deliver on targets, Participate in engineering reviews, Provide impact on solutions, Provide impact on architecture, Provide impact on processes, Partner with internal teams, Partner with stakeholders, Partner with vendors, Set priorities, Establish milestones, Drive schedules, Identify dependencies, Mitigate risks, Lead execution of designs, Perform installation qualification, Perform throughput qualification, Perform safety qualification, Optimize systems, Resolve technical deficiencies, Facilitate effective meetings, Document discussions, Document decisions, Document action items, Communicate project status, Communicate risk analysis, Communicate mitigation plans, Provide summaries to leadership, Articulate system designs, Articulate equipment designs, Manage change orders, Manage purchase orders, Approve invoices, Build stakeholder relationships, Identify process improvement initiatives, Lead process improvement initiatives, Enhance team efficiency, Deliver cost-effective solutions", "teamCollaboration" : "Cross-functional projects; Internal customers; Internal stakeholders; External stakeholders; External equipment vendors; Partners", "projectManagementSkills" : [ "Project lifecycle management", "Schedule management", "Risk mitigation", "Scope control", "Milestone establishment", "Dependency identification" ], "domainKnowledge" : "Sortation solutions; Distribution solutions; Facility network infrastructure; Physical distribution systems; Fulfillment center design; Distribution center design; Automated equipment; Integrated systems; Conveyors; Sorters; High speed manufacturing; Packaging lines; Robotic work cells", "domainList" : [ "sortation-solutions", "distribution-solutions", "facility-network-infrastructure", "physical-distribution-systems", "fulfillment-center-design", "distribution-center-design", "automated-equipment", "integrated-systems", "conveyors", "sorters", "high-speed-manufacturing", "packaging-lines", "robotic-work-cells" ], "domainSpecificKnowledge" : [ "Sortation solutions", "Distribution solutions", "Facility network infrastructure", "Physical distribution systems", "Fulfillment center design", "Distribution center design", "Automated equipment", "Integrated systems", "Conveyors", "Sorters", "High speed manufacturing", "Packaging lines", "Robotic work cells" ], "toolProficiency" : [ "AutoCAD", "REVIT", "BIM 360", "Microsoft Project", "Smartsheet" ], "communicationSkills" : "Project status communication; Risk analysis communication; Mitigation plan communication; Leadership summaries", "documentationSkills" : "Document discussions; Document decisions; Document action items", "problemSolvingSkills" : "Problem-solve; Risk mitigation; Technical deficiency resolution", "specialRequirements" : "Up to 80% travel, Availability to work from corporate office, Relocation assistance", "outcomesObjectives" : "Deliver next generation solutions; Ensure timely handover; Meet project goals; Deliver on objectives; Deliver on targets; Enhance team efficiency; Deliver cost-effective solutions", "qualificationsBasic" : "4+ years industrial engineer experience, 4+ years operations engineer experience, 4+ years manufacturing engineer experience, 4+ years project engineer experience, Bachelor's Degree STEM, Manage project lifecycles, Implement automated equipment, Implement integrated systems", "qualificationsPreferred" : "Knowledge of AutoCAD intermediate, Knowledge of VBA intermediate, Knowledge of SQL intermediate, Manage third party vendors, Experience with Six Sigma, Experience with lean manufacturing, Master's degree Engineering, Master's degree Operations, Master's degree Business, Master's degree STEM, Operations Management experience, Distribution Center experience, Manage material handling projects, Manage automation projects, Manage technical projects, Experience with design automation solutions, Experience with implementation automation solutions", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "As an Operations Engineer, you will lead and manage the lifecycle of challenging cross-functional projects, developing and delivering the next generation of sortation and distribution solutions. You are a customer obsessed leader that will play an integral part in planning and implementation of the facility network infrastructure including new builds, retrofits, expansions and program initiatives. Partnering with internal customers and internal/external stakeholders to engage as a team and ensure a timely handover will be part of your critical tasks. As an Operations Engineer for Amazon, you will work with some of the most talented engineers in the design, development, and delivery of physical distribution systems around the globe. You are responsible for managing a technology or integration project, successfully delivering the solution to meet project goals. You may work directly with external equipment vendors, customers, or partners, and you have a solid understanding of the design approaches and industry technologies utilized in fulfillment and distribution center designs. To meet timelines and minimize disruption to support teams, you manage the overall schedule, proactively mitigate risks, and keep the scope of engineering deliverables under control. This role requires up to 80% travel and availability to work from a corporate office when not traveling. Candidates should either live near or be willing to relocate within a reasonable commuting distance of the office. Relocation assistance may be provided. Key job responsibilities • Independently manage complex project lifecycles across organizations and geographies, delivering on objectives and targets as project owner. • Participate in engineering reviews, providing tangible impact on system solutions, architecture, and facility processes. • Partner with internal teams, stakeholders, and vendors to set priorities, establish milestones, and drive schedules. Proactively identify dependencies, problem-solve, and mitigate risks. • Lead execution of systems and automated equipment designs per established standards. Perform installation, throughput, and safety qualifications. Optimize systems and resolve technical deficiencies. • Facilitate effective meetings with clear objectives and appropriate stakeholders. Document discussions, decisions, and action items to ensure alignment. • Communicate project status, risk analysis, and mitigation plans promptly and accurately. Provide clear, concise summaries to leadership. • Articulate system and equipment designs, including layouts, specifications, and capabilities to internal customers and partners. • Manage change orders, purchase orders, and invoice approvals efficiently. • Build strong relationships with internal and external stakeholders across multiple projects. • Identify and lead process improvement initiatives that enhance team efficiency and deliver cost-effective solutions. • Travel up to 80% domestically, with variable intensity including extended trips up to three weeks. Basic Qualifications: - 4+ years of industrial engineer, operations engineer, manufacturing engineer, or project engineer in a manufacturing environment experience - Bachelor’s Degree in Industrial Engineering, Mechanical Engineering, or other STEM field - Experience managing the lifecycle of cross-functional projects, implementing automated equipment and/or integrated systems - Experience with CAD software (AutoCAD, REVIT, BIM 360, etc.) Preferred Qualifications: - Knowledge of AutoCAD, VBA, and SQL at the intermediate level - Experience working with and managing third party vendors - Experience with Six Sigma, lean manufacturing - Master’s degree in Engineering, Operations, Business Administration, or a related STEM field - Operations Management/Distribution Center experience with direct management or responsibility for material handling, automation, or other technical projects - Experience with Six Sigma and/or Lean Manufacturing - Experience with Microsoft Project, Smartsheet programs - Experience with design and/or implementation automation solutions, such as Conveyors, Sorters, high speed manufacturing and packaging lines, Robotic work cells - Proven technical leadership for industrial engineering projects or program Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, AZ, Pheonix - 76,600.00 - 114,900.00 USD annually USA, CA, SAN FRANCISCO - 84,300.00 - 126,400.00 USD annually USA, CA, San Francisco - 84,300.00 - 126,400.00 USD annually USA, IL, CHICAGO - 76,600.00 - 114,900.00 USD annually USA, IL, Chicago - 76,600.00 - 114,900.00 USD annually USA, MA, BOSTON - 76,600.00 - 114,900.00 USD annually USA, MA, Boston - 76,600.00 - 114,900.00 USD annually USA, NY, New York City - 84,300.00 - 126,400.00 USD annually USA, TN, NASHVILLE - 68,900.00 - 103,400.00 USD annually USA, TN, Nashville - 68,900.00 - 103,400.00 USD annually USA, TX, AUSTIN - 76,600.00 - 114,900.00 USD annually USA, TX, Austin - 76,600.00 - 114,900.00 USD annually USA, TX, DALLAS - 76,600.00 - 114,900.00 USD annually USA, TX, Dallas - 76,600.00 - 114,900.00 USD annually USA, TX, HOUSTON - 76,600.00 - 114,900.00 USD annually USA, TX, Houston - 76,600.00 - 114,900.00 USD annually USA, WA, SEATTLE - 82,700.00 - 114,900.00 USD annually USA, WA, Seattle - 82,700.00 - 114,900.00 USD annually", "summaryDescription" : "Operations Engineer, Operations Engineering at Amazon.com Services LLC. Skills: Operations Engineering, Project management, Distribution solutions. Manage project lifecycles. Deliver on objectives", "postedDate" : "2026-06-13T16:51:28.076", "createdAt" : "2026-06-13T16:51:28.076", "lastUpdated" : "2026-06-15T07:36:14.576", "ingestTimestamp" : "2026-06-13T16:51:28.076", "mongoId" : "69e104422beec4dd3def2881", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10385958/apply", "salaryAnnualMin" : 60000, "salaryAnnualMax" : 126400, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ "Systems design", "Equipment design", "Throughput qualification", "Safety qualification", "Change order management", "Purchase order management", "Invoice approval", "Leadership", "Customer obsessed", "Operations Engineering", "Project management", "Distribution solutions", "Project lifecycle management", "Distribution systems design", "Fulfillment center design", "Distribution center design", "Process improvement", "Schedule management", "Risk mitigation", "Scope control", "Milestone establishment", "Dependency identification", "Sortation solutions", "Facility network infrastructure", "Physical distribution systems", "Automated equipment", "Integrated systems", "Conveyors", "Sorters", "High speed manufacturing", "Packaging lines", "Robotic work cells", "AutoCAD", "REVIT", "BIM 360", "Microsoft Project", "Smartsheet" ], "skillCount" : 37, "jobCategory" : "operations", "dataQualityScore" : 0.8888889, "_score" : 604.48914, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2ab57874d8ee00a06dd0d6", "title" : "Senior Staff Software Engineer – Identity & Access Management Platform", "company" : "Kaseya", "industry" : "IT Management", "salary" : { "min" : 165000.0, "max" : 230000.0, "currency" : "CAD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Staff Software Engineer in Canada, adjusted for the SaaS industry and remote work." }, "location" : "Canada - Remote", "locations" : [ "Canada - Remote" ], "timestamp" : "2026-06-14T21:41:46.905", "fingerprint" : "2a25ca25d936deb9e06e69f68a4f5d9b1067820b49e5459ea1fc3122aa040565", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.kaseya.com/careers/jobs/id/6017310004/?gh_jid=6017310004", "externalId" : "6017310004", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Canada", "continent" : "na", "workMode" : "remote" } ], "locationText" : "Canada", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "OAuth 2.0, OpenID Connect, SAML, JWTs, MFA, SSO", "professionalSkills" : [ "Platform architecture", "Identity governance", "Technical leadership" ], "hardSkillsList" : [ "Authentication", "Authorization", "Identity management" ], "softSkillsList" : [ "Accountability", "Adaptability", "Urgency", "Leadership" ], "hardSkills" : [ { "name" : "Authentication", "level" : "intermediate" }, { "name" : "Authorization", "level" : "intermediate" }, { "name" : "Identity management", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Accountability" }, { "name" : "Adaptability" }, { "name" : "Urgency" }, { "name" : "Leadership" } ], "teamCollaboration" : "Cross-functional teams; Engineering organizations; Security teams; Compliance teams; Product teams", "domainKnowledge" : "Identity and Access Management; Authentication; Authorization; Identity governance; RBAC; ABAC; Multi-tenant environments; Machine identities; Secrets management; Workload authentication; Cloud-based environments; SaaS environments; SOC 2; ISO 27001; HIPAA; PCI-DSS; NIST", "domainList" : [ "identity-and-access-management", "authentication", "authorization", "identity-governance", "rbac", "abac", "multi-tenant-environments", "machine-identities", "secrets-management", "workload-authentication", "cloud-based-environments", "saas-environments", "soc-2", "iso-27001", "hipaa", "pci-dss", "nist" ], "domainSpecificKnowledge" : [ "Identity and Access Management", "Authentication", "Authorization", "Identity governance", "RBAC", "ABAC", "Multi-tenant environments", "Machine identities", "Secrets management", "Workload authentication", "Cloud-based environments", "SaaS environments", "SOC 2", "ISO 27001", "HIPAA", "PCI-DSS", "NIST" ], "toolProficiency" : [ "Zitadel", "Keycloak", "Authentik", "Okta", "Auth0", "Ping Identity", "Microsoft Entra ID", "Google Workspace", "Active Directory", "Open Policy Agent", "Cedar" ], "qualificationsBasic" : "10+ years software engineering experience, Experience building distributed systems, Experience building platform services, Experience designing IAM solutions, Experience implementing IAM solutions, Experience designing authentication solutions, Experience implementing authentication solutions, Experience designing authorization solutions, Experience implementing authorization solutions, Experience designing identity governance solutions, Experience implementing identity governance solutions, Experience with OAuth 2.0, Experience with OpenID Connect, Experience with SAML, Experience with JWTs, Experience with MFA, Experience with enterprise SSO, Experience implementing enterprise IAM platforms, Experience integrating enterprise IAM platforms, Experience designing secure services, Experience designing scalable services, Experience in cloud-based environments, Experience in SaaS environments", "qualificationsPreferred" : "Experience designing multi-tenant identity platforms, Experience designing delegated administration models, Experience with RBAC, Experience with ABAC, Experience with policy-based authorization, Experience with entitlement management, Experience integrating enterprise identity providers, Experience with policy engines, Experience supporting machine identities, Experience supporting secrets management, Experience supporting workload authentication, Experience leading large-scale platform migrations, Experience leading modernization initiatives, Experience supporting SOC 2 compliance, Experience supporting ISO 27001 compliance, Experience supporting HIPAA compliance, Experience supporting PCI-DSS compliance, Experience supporting NIST compliance", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "About Kaseya Kaseya is the leading provider of AI-powered IT management and cybersecurity software, serving Managed Service Providers (MSPs) and internal IT organizations worldwide. Our comprehensive platform helps organizations efficiently manage, secure, and automate their IT environments, driving operational efficiency and long-term business success. Backed by Insight Partners, a leading global software investor, Kaseya has experienced sustained double-digit growth and continues to expand its global footprint. Today, Kaseya supports customers in more than 20 countries and manages over 15 million endpoints worldwide. Founded in 2000, Kaseya has built a culture centered around innovation, accountability, and results. We are a high-growth, high-performance organization that values individuals who are driven, adaptable, and committed to delivering exceptional outcomes for our customers and teammates alike. At Kaseya, success comes from embracing challenges, moving with urgency, and continuously raising the bar. Senior Staff Software Engineer – Identity & Access Management Platform Why Kaseya? Join a fast-growing company that’s transforming the IT industry. At Kaseya, you’ll have the opportunity to work with cutting-edge technology, collaborate with a dynamic team, and develop your career in a high impact role. Join the Kaseya growth rocket ship and see how we are #ChangingLives! Job Summary We’re hiring a Senior Staff Software Engineer to lead the design and evolution of Kaseya’s Identity and Access Management (IAM) platform. This role focuses on building a centralized identity foundation supporting authentication, authorization, governance, and compliance across multiple products and business domains. You will provide technical leadership for platform architecture, drive adoption across engineering organizations, and deliver secure, scalable identity services that support customers, employees, partners, APIs, and machine identities. Roles & Responsibilities Define architecture and technical direction for the IAM platform across multiple products and services Lead design and implementation of authentication, authorization, and identity governance capabilities Build and operate core IAM platform services, APIs, and integrations Drive platform adoption and migration initiatives across engineering teams Design solutions supporting RBAC, ABAC, delegated administration, and multi-tenant environments Partner with Security, Compliance, and Product teams to meet governance and regulatory requirements Lead architecture reviews and technical design discussions for identity-related initiatives Mentor engineers and establish engineering standards for identity platform development Required Qualifications 10+ years of software engineering experience building distributed systems or platform services Experience designing and implementing IAM, authentication, authorization, or identity governance solutions Experience with OAuth 2.0, OpenID Connect (OIDC), SAML, JWTs, MFA, and enterprise SSO Experience implementing or integrating enterprise IAM platforms (e.g., Zitadel, Keycloak, Authentik, Okta, Auth0, Ping Identity) Experience designing secure, scalable services in cloud-based or SaaS environments Preferred Qualifications Experience designing multi-tenant identity platforms or delegated administration models Experience with RBAC, ABAC, policy-based authorization, or entitlement management Experience integrating enterprise identity providers such as Microsoft Entra ID, Okta, Google Workspace, or Active Directory Experience with policy engines such as Open Policy Agent (OPA) or Cedar Experience supporting machine identities, secrets management, or workload authentication Experience leading large-scale platform migrations or modernization initiatives Experience supporting compliance requirements such as SOC 2, ISO 27001, HIPAA, PCI-DSS, or NIST Additional information Kaseya provides equal employment opportunity to all employees and applicants without regard to race, religion, age, ancestry, gender, sex, sexual orientation, national origin, citizenship status, physical or mental disability, veteran status, marital status, or any other characteristic protected by applicable law.", "summaryDescription" : "Senior Staff Software Engineer – Identity & Access Management Platform at Kaseya", "postedDate" : "2026-06-11T19:32:37.442", "createdAt" : "2026-06-11T19:32:37.442", "lastUpdated" : "2026-06-14T21:41:46.905", "ingestTimestamp" : "2026-06-11T19:32:37.442", "mongoId" : "6a2ab57874d8ee00a06dd0d6", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ "Authentication", "Authorization", "Identity management", "Accountability", "Adaptability", "Urgency", "Leadership", "Platform architecture", "Identity governance", "Technical leadership", "Identity and Access Management", "RBAC", "ABAC", "Multi-tenant environments", "Machine identities", "Secrets management", "Workload authentication", "Cloud-based environments", "SaaS environments", "SOC 2", "ISO 27001", "HIPAA", "PCI-DSS", "NIST", "Zitadel", "Keycloak", "Authentik", "Okta", "Auth0", "Ping Identity", "Microsoft Entra ID", "Google Workspace", "Active Directory", "Open Policy Agent", "Cedar" ], "skillCount" : 35, "jobCategory" : "other", "jobSubcategory" : "platform", "dataQualityScore" : 0.8888889, "_score" : 597.3224, "daysOld" : 3, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "IT Management" }, { "id" : "6a30753bf292fd229c00d529", "title" : "Access Control Specialist", "company" : "Amazon.com Services LLC", "industry" : "Operations, IT, Support Engineering, amazon security", "salary" : { "min" : 80200.0, "max" : 130700.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-16T13:03:41.697", "fingerprint" : "f39627c0ce0b2dc0fb06954e814052ccc1b963379e06289abd321a44b503a595", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10449441/apply", "externalId" : "a0d5f8ac-b166-4a6b-b3ba-a03dc86a1f07", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "remoteFriendly" : false, "workSiteFlexibility" : "onsite", "rawDescription" : "This position is vital for integrating and managing permissions requested via tickets across a variety of enterprise tools, enhancing both security and operational efficiency. This role is responsible for provisioning access, troubleshooting access issues, and finding ways to optimize and automate the provisioning process. The Identity and Security Abuse Prevention’s Access Control Operations team safeguards customers, employees and their data across World Wide Customer Service. We collaborate with our Operations partners to make sure users have the access they need to provide top tier delivery and support to our Customers. This role requires effective written and verbal communication, a desire to explore new technology integration to improve efficiency and security, as well as an understanding of the threats to users and their data. Learning and understanding complex role and permissioning structures is also required. Key job responsibilities - Access Control Specialists are expected to both improve and streamline processes while also maintaining a high level of ticket closure within SLA. - Access Control specialists are the face to our internal customers and must be customer service oriented. - As an Access Control Specialist you will use identity and access management (IAM) tools to assign permissions that align with each user’s role and responsibilities, ensuring they have the minimum access needed to perform their job efficiently. - You will be responsible for provisioning access within enterprise software. This includes creating, updating, and revoking user access while configuring permissions in line with company policies and regulatory standards. - The Access Control Specialist oversees compliance by auditing access regularly and utilizing automation tools to streamline the user access lifecycle. - As an Access Control Specialist you will provide access governance oversight to ensure a high security bar by evaluating, creating, and streamlining access policies and mechanisms. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Experience in development or technical support - Experience troubleshooting and debugging technical systems Preferred Qualifications: - Knowledge of Access Control methodology such as RBAC and ABAC Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, CA, Irvine - 74,700.00 - 130,700.00 USD annually USA, TX, Austin - 74,700.00 - 130,700.00 USD annually USA, WA, Seattle - 80,200.00 - 130,700.00 USD annually", "summaryDescription" : "Access Control Specialist at Amazon.com Services LLC", "postedDate" : "2026-06-15T00:00:00.000", "createdAt" : "2026-06-16T01:54:01.938", "lastUpdated" : "2026-06-16T13:03:41.697", "ingestTimestamp" : "2026-06-16T01:54:01.938", "mongoId" : "6a30753bf292fd229c00d529", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10449441/apply", "salaryAnnualMin" : 80200, "salaryAnnualMax" : 130700, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 596.69214, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a25145374d8ee00a00bb31d", "title" : "Software Development Engineer, AWS Resource Access Manager Team", "company" : "Amazon Development Center U.S., Inc.", "industry" : "Software Development, Cloud Computing", "salary" : { "min" : 70000.0, "max" : 194400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Arlington, Virginia, USA", "locations" : [ "Arlington, Virginia, USA" ], "timestamp" : "2026-06-15T04:13:37.081", "fingerprint" : "d37710f95f067e69ecb851145f62c48e87387d9163bd44f968c5cc9a7104be26", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10441293/apply", "externalId" : "27726a06-23a9-4b4b-bb48-caf2fdf74da0", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" } ], "locationText" : "Arlington, Virginia, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 3, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, Java, Spring Boot, Kafka, Redis", "professionalSkills" : [ "System design", "API design" ], "hardSkillsList" : [ "Reliability", "Scalability", "Fault tolerance", "Event-driven architectures", "Eventual consistency", "Resource indexing", "API development" ], "softSkillsList" : [ "Operational excellence" ], "hardSkills" : [ { "name" : "Reliability", "level" : "intermediate" }, { "name" : "Scalability", "level" : "intermediate" }, { "name" : "Fault tolerance", "level" : "intermediate" }, { "name" : "Event-driven architectures", "level" : "intermediate" }, { "name" : "Eventual consistency", "level" : "intermediate" }, { "name" : "Resource indexing", "level" : "intermediate" }, { "name" : "API development", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Operational excellence" } ], "majorSkills" : "Distributed systems, Resource sharing, API design", "majorSkillsList" : [ "Distributed systems", "Resource sharing", "API design" ], "coreResponsibilities" : "Build next generation infrastructure, Operate identity stack, Innovate identity stack, Build distributed systems, Design API, Manage resource sharing, Advocate for alarms, Eliminate toil, Squash flaky tests", "teamCollaboration" : "Distributed systems; Multi-tenant environment", "domainKnowledge" : "Identity; Authentication; Authorization; Resource access management; Multi-account governance; Access controls; Distributed systems; Multi-tenant environment; Event-driven architectures; Eventual consistency; High-throughput resource indexing", "domainList" : [ "identity", "authentication", "authorization", "resource-access-management", "multi-account-governance", "access-controls", "distributed-systems", "multi-tenant-environment", "event-driven-architectures", "eventual-consistency", "high-throughput-resource-indexing" ], "domainSpecificKnowledge" : [ "Identity", "Authentication", "Authorization", "Resource access management", "Multi-account governance", "Access controls", "Distributed systems", "Multi-tenant environment", "Event-driven architectures", "Eventual consistency", "High-throughput resource indexing" ], "innovationCreativity" : "Innovate identity stack", "problemSolvingSkills" : "Troubleshooting; Root cause analysis", "qualificationsBasic" : "3+ years professional software development, 2+ years design or architecture, Programming experience", "qualificationsPreferred" : "3+ years full software development life cycle, Bachelor's degree in computer science", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Amazon Web Services (AWS) Identity team builds, operates, and innovates the identity, authentication, and authorization stack for the AWS cloud. Our mission is to push the technical boundaries to enable AWS customers to run their business workloads confidently and securely. As part of this mission, AWS Resource Access Manager (RAM) enables customers to securely share their AWS resources across accounts, organizations, and organizational units — simplifying multi-account governance while maintaining fine-grained access controls. AWS RAM allows customers to centrally manage resource sharing at scale, eliminating the need to create duplicate resources in every account. As AWS grows and customers adopt increasingly complex multi-account strategies, RAM must evolve to support new resource types, richer sharing policies, and higher-order scalability demands. We are looking for strong software engineers to build the next generation of resource sharing infrastructure. Individuals interested in this position should have experience building high-performing, reliable systems in a distributed, multi-tenant environment at a fast pace. You'll thrive in this role if you are passionate about building highly available, fault-tolerant distributed systems that operate seamlessly across organizational boundaries. You care deeply about API design that makes complex sharing workflows intuitive — making \"the right thing, the easy thing.\" You think about the customer experience when weighing engineering trade-offs, whether that's designing retention behaviors for departing accounts, enabling resource discovery, or ensuring consistent state across asynchronous workflows. You value operational excellence — advocating for actionable alarms, eliminating toil, and squashing flaky tests before they erode confidence. You also believe that having fun and tackling hard problems go hand-in-hand: event-driven architectures, eventual consistency challenges, high-throughput resource indexing, and building APIs that scale to millions of shared resources — all while maintaining the security and reliability customers depend on. Basic Qualifications: - 3+ years of non-internship professional software development experience - 2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience - Experience programming with at least one software programming language Preferred Qualifications: - 3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience - Bachelor's degree in computer science or equivalent Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, VA, Arlington - 143,700.00 - 194,400.00 USD annually", "summaryDescription" : "Software Development Engineer, AWS Resource Access Manager Team at Amazon Development Center U.S., Inc.. Skills: Distributed systems, Resource sharing, API design. Build next generation infrastructure. Operate identity stack", "postedDate" : "2026-06-13T10:45:50.709", "createdAt" : "2026-06-13T10:45:50.709", "lastUpdated" : "2026-06-15T04:13:37.081", "ingestTimestamp" : "2026-06-13T10:45:50.709", "mongoId" : "6a25145374d8ee00a00bb31d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10441293/apply", "salaryAnnualMin" : 70000, "salaryAnnualMax" : 194400, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ "Reliability", "Scalability", "Fault tolerance", "Event-driven architectures", "Eventual consistency", "Resource indexing", "API development", "Operational excellence", "Distributed systems", "Resource sharing", "API design", "System design", "Identity", "Authentication", "Authorization", "Resource access management", "Multi-account governance", "Access controls", "Multi-tenant environment", "High-throughput resource indexing" ], "skillCount" : 20, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 593.1485, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "69d5e4952beec4dd3d93185b", "title" : "Operations Engineer, Operations Engineering", "company" : "Amazon.com Services LLC", "industry" : "Operations, IT, Support Engineering, Ops Engineering, operations", "salary" : { "min" : 60700.0, "max" : 85000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Austin, Texas, USA", "locations" : [ "Austin, Texas, USA" ], "timestamp" : "2026-06-15T07:24:51.680", "fingerprint" : "d7a1289043a41a1d862b19d152ea5ba305b5d2a99e66c9ac36e75bef0ec03f5c", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10385593/apply", "externalId" : "f6650390-3fb9-4487-8f33-a0a60fab2c97", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "CAD software, AutoCAD, REVIT, BIM 360, Microsoft Project, Smartsheet", "professionalSkills" : [ "Project management", "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement", "Distribution systems design", "Fulfillment center design", "Automation solutions design", "Industrial engineering" ], "hardSkillsList" : [ "Project lifecycle management", "System solutions", "Architecture design", "Facility processes", "Systems design", "Automated equipment design", "Installation qualification", "Throughput qualification", "Safety qualification", "System optimization", "Technical deficiency resolution", "Change order management", "Purchase order management", "Invoice approval" ], "softSkillsList" : [ "Leadership", "Customer obsessed" ], "hardSkills" : [ { "name" : "Project lifecycle management", "level" : "intermediate" }, { "name" : "System solutions", "level" : "intermediate" }, { "name" : "Architecture design", "level" : "intermediate" }, { "name" : "Facility processes", "level" : "intermediate" }, { "name" : "Systems design", "level" : "intermediate" }, { "name" : "Automated equipment design", "level" : "intermediate" }, { "name" : "Installation qualification", "level" : "intermediate" }, { "name" : "Throughput qualification", "level" : "intermediate" }, { "name" : "Safety qualification", "level" : "intermediate" }, { "name" : "System optimization", "level" : "intermediate" }, { "name" : "Technical deficiency resolution", "level" : "intermediate" }, { "name" : "Change order management", "level" : "intermediate" }, { "name" : "Purchase order management", "level" : "intermediate" }, { "name" : "Invoice approval", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Customer obsessed" } ], "majorSkills" : "Project lifecycle management, Cross-functional projects, Distribution solutions", "majorSkillsList" : [ "Project lifecycle management", "Cross-functional projects", "Distribution solutions" ], "coreResponsibilities" : "Manage project lifecycles, Deliver on objectives and targets, Participate in engineering reviews, Provide impact on system solutions, Provide impact on architecture, Provide impact on facility processes, Partner with internal teams, Partner with stakeholders, Partner with vendors, Set priorities, Establish milestones, Drive schedules, Identify dependencies, Problem-solve, Mitigate risks, Lead execution of systems, Lead execution of automated equipment designs, Perform installation qualification, Perform throughput qualification, Perform safety qualification, Optimize systems, Resolve technical deficiencies, Facilitate effective meetings, Document discussions, Document decisions, Document action items, Communicate project status, Communicate risk analysis, Communicate mitigation plans, Provide summaries to leadership, Articulate system designs, Articulate equipment designs, Manage change orders, Manage purchase orders, Manage invoice approvals, Build relationships with stakeholders, Identify process improvement initiatives, Lead process improvement initiatives, Enhance team efficiency, Deliver cost-effective solutions", "teamCollaboration" : "Cross-functional projects; Internal customers; Internal stakeholders; External stakeholders; External equipment vendors; Partners", "projectManagementSkills" : [ "Project lifecycle management", "Schedule management", "Risk mitigation", "Scope control" ], "domainKnowledge" : "Sortation solutions; Distribution solutions; Facility network infrastructure; Physical distribution systems; Fulfillment center designs; Distribution center designs; Material handling; Automation solutions; Conveyors; Sorters; Manufacturing lines; Packaging lines; Robotic work cells", "domainList" : [ "sortation-solutions", "distribution-solutions", "facility-network-infrastructure", "physical-distribution-systems", "fulfillment-center-designs", "distribution-center-designs", "material-handling", "automation-solutions", "conveyors", "sorters", "manufacturing-lines", "packaging-lines", "robotic-work-cells" ], "domainSpecificKnowledge" : [ "Sortation solutions", "Distribution solutions", "Facility network infrastructure", "Physical distribution systems", "Fulfillment center designs", "Distribution center designs", "Material handling", "Automation solutions", "Conveyors", "Sorters", "Manufacturing lines", "Packaging lines", "Robotic work cells" ], "toolProficiency" : [ "AutoCAD", "REVIT", "BIM 360", "Microsoft Project", "Smartsheet" ], "communicationSkills" : "Communicate project status; Communicate risk analysis; Communicate mitigation plans; Provide clear summaries", "documentationSkills" : "Document discussions; Document decisions; Document action items", "problemSolvingSkills" : "Problem-solve; Mitigate risks; Resolve technical deficiencies", "specialRequirements" : "Up to 80% travel, Availability to work from corporate office when not traveling, Willing to relocate within commuting distance", "outcomesObjectives" : "Deliver next generation solutions; Ensure timely handover; Meet project goals; Deliver on objectives and targets; Enhance team efficiency; Deliver cost-effective solutions", "qualificationsBasic" : "Bachelor's degree in Industrial Engineering, Mechanical Engineering, or other STEM field, Experience with CAD software, 1+ years of experience as a Project Engineer, Process Engineer, Project Manager, Manufacturing Engineer, or related occupation", "qualificationsPreferred" : "Master's degree in Engineering, Operations, Business Administration, or a related STEM field, Operations Management/Distribution Center experience, Experience with Six Sigma and/or Lean Manufacturing, Experience with Microsoft Project, Smartsheet programs, Experience with design and/or implementation automation solutions, Proven technical leadership for industrial engineering projects or program", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "As an Operations Engineer, you will lead and manage the lifecycle of challenging cross-functional projects, developing and delivering the next generation of sortation and distribution solutions. You are a customer obsessed leader that will play an integral part in planning and implementation of the facility network infrastructure including new builds, retrofits, expansions and program initiatives. Partnering with internal customers and internal/external stakeholders to engage as a team and ensure a timely handover will be part of your critical tasks. As an Operations Engineer for Amazon, you will work with some of the most talented engineers in the design, development, and delivery of physical distribution systems around the globe. You are responsible for managing a technology or integration project, successfully delivering the solution to meet project goals. You may work directly with external equipment vendors, customers, or partners, and you have a solid understanding of the design approaches and industry technologies utilized in fulfillment and distribution center designs. To meet timelines and minimize disruption to support teams, you manage the overall schedule, proactively mitigate risks, and keep the scope of engineering deliverables under control. This role requires up to 80% travel and availability to work from a corporate office when not traveling. Candidates should either live near or be willing to relocate within a reasonable commuting distance of the office. Relocation assistance may be provided. Key job responsibilities • Independently manage complex project lifecycles across organizations and geographies, delivering on objectives and targets as project owner. • Participate in engineering reviews, providing tangible impact on system solutions, architecture, and facility processes. • Partner with internal teams, stakeholders, and vendors to set priorities, establish milestones, and drive schedules. Proactively identify dependencies, problem-solve, and mitigate risks. • Lead execution of systems and automated equipment designs per established standards. Perform installation, throughput, and safety qualifications. Optimize systems and resolve technical deficiencies. • Facilitate effective meetings with clear objectives and appropriate stakeholders. Document discussions, decisions, and action items to ensure alignment. • Communicate project status, risk analysis, and mitigation plans promptly and accurately. Provide clear, concise summaries to leadership. • Articulate system and equipment designs, including layouts, specifications, and capabilities to internal customers and partners. • Manage change orders, purchase orders, and invoice approvals efficiently. • Build strong relationships with internal and external stakeholders across multiple projects. • Identify and lead process improvement initiatives that enhance team efficiency and deliver cost-effective solutions. • Travel up to 80% domestically, with variable intensity including extended trips up to three weeks. Basic Qualifications: - Bachelor's degree in Industrial Engineering, Mechanical Engineering, or other STEM field - Experience with CAD software (AutoCAD, REVIT, BIM 360, etc.) - 1+ years of experience as a Project Engineer, Process Engineer, Project Manager, Manufacturing Engineer, or related occupation Preferred Qualifications: - Master’s degree in Engineering, Operations, Business Administration, or a related STEM field • Operations Management/Distribution Center experience with direct management or responsibility for material handling, automation, or other technical projects • Experience with Six Sigma and/or Lean Manufacturing • Experience with Microsoft Project, Smartsheet programs • Experience with design and/or implementation automation solutions, such as Conveyors, Sorters, high speed manufacturing and packaging lines, Robotic work cells • Proven technical leadership for industrial engineering projects or program Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, AZ, Phoenix - 60,700.00 - 85,000.00 USD annually USA, CA, LOS ANGELES - 70,400.00 - 84,900.00 USD annually USA, CA, Los Angeles - 70,400.00 - 84,900.00 USD annually USA, CA, SAN FRANCISCO - 70,400.00 - 93,500.00 USD annually USA, CA, San Francisco - 70,400.00 - 93,500.00 USD annually USA, GA, ATLANTA - 60,700.00 - 85,000.00 USD annually USA, GA, Atlanta - 60,700.00 - 85,000.00 USD annually USA, GA, Atlanta - 70,400.00 - 84,900.00 USD annually USA, MA, BOSTON - 60,700.00 - 85,000.00 USD annually USA, MA, Boston - 60,700.00 - 85,000.00 USD annually USA, TN, NASHVILLE - 54,600.00 - 76,500.00 USD annually USA, TN, Nashville - 54,600.00 - 76,500.00 USD annually USA, TX, AUSTIN - 60,700.00 - 85,000.00 USD annually USA, TX, Austin - 60,700.00 - 85,000.00 USD annually USA, TX, HOUSTON - 60,700.00 - 85,000.00 USD annually USA, TX, Houston - 60,700.00 - 85,000.00 USD annually USA, VA, ARLINGTON - 60,700.00 - 85,000.00 USD annually USA, VA, Arlington - 60,700.00 - 85,000.00 USD annually USA, WA, SEATTLE - 80,200.00 - 85,000.00 USD annually USA, WA, Seattle - 80,200.00 - 85,000.00 USD annually", "summaryDescription" : "Operations Engineer, Operations Engineering at Amazon.com Services LLC. Skills: Project lifecycle management, Cross-functional projects, Distribution solutions. Manage project lifecycles. Deliver on objectives and targets", "postedDate" : "2026-06-13T13:11:52.550", "createdAt" : "2026-06-13T13:11:52.550", "lastUpdated" : "2026-06-15T07:24:51.680", "ingestTimestamp" : "2026-06-13T13:11:52.550", "mongoId" : "69d5e4952beec4dd3d93185b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10385593/apply", "salaryAnnualMin" : 60700, "salaryAnnualMax" : 85000, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ "Project lifecycle management", "System solutions", "Architecture design", "Facility processes", "Systems design", "Automated equipment design", "Installation qualification", "Throughput qualification", "Safety qualification", "System optimization", "Technical deficiency resolution", "Change order management", "Purchase order management", "Invoice approval", "Leadership", "Customer obsessed", "Cross-functional projects", "Distribution solutions", "Project management", "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement", "Distribution systems design", "Fulfillment center design", "Automation solutions design", "Industrial engineering", "Schedule management", "Risk mitigation", "Scope control", "Sortation solutions", "Facility network infrastructure", "Physical distribution systems", "Fulfillment center designs", "Distribution center designs", "Material handling", "Automation solutions", "Conveyors", "Sorters", "Manufacturing lines", "Packaging lines", "Robotic work cells", "AutoCAD", "REVIT", "BIM 360", "Microsoft Project", "Smartsheet" ], "skillCount" : 50, "jobCategory" : "operations", "dataQualityScore" : 0.8888889, "_score" : 591.9703, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true } ], "status" : 200, "message" : "OK", "pagination" : { "page" : 0, "limit" : 50, "totalCount" : 199003, "totalPages" : 3981, "hasNext" : true, "hasPrevious" : false } }

Remote Privileged Access Management Pam Operations Engineer Jobs

Privileged Access Management(PAM) Engineer

Staff Security Engineer, Privileged Access (PAM)

Senior Professional System Platform Engineer (w/m/d) Privileged Access Management

Senior Engineer - Privileged Access Management

Professional System Platform Engineer (w/m/d) Privileged Access Management

Identity & PAM Security Engineer

Identity & PAM Security Engineer

Identity & PAM Security Engineer

Identity & PAM Security Engineer

Identity & PAM Security Engineer

Product Owner (w/m/d) System Engineering / Privileged Access Management

Managing Director, PAM

Cybersecurity Analyst - Privileged Access Management

Cybersecurity Consultant (Access & Identity)

Senior Identity and Access Management (IAM) Engineer

Development & Access Management Engineer II-V

Identity & PAM Security Engineer

Senior Security Engineer, Identity & Access Management

Director, Identity & Access Management

Identity and Access Management Engineer

Manager, Identity & Access Management (IAM)

Identity & Access Management (IAM) Apprentice

Access Services Manager

Embedded Firmware Engineer (Access)

Identity Access Management (IAM) Engineer

Senior Engineer - IT Security

Patient Access Manager

Commercial Lead & Market Access Operations

Identity and Access Management Engineer

Identity and Access Management Engineer

Manager, Accessibility Services

DQA Engineer (Door Access/Sensor)

Senior Software Development Engineer, AWS Identity and Access Management

Staff Software Engineer - Instant Access

Lead PAM Engineer – Senior

Software Development Engineer - AWS Identity & Access Management, AWS Identity

Identity & Access Management Analyst

Senior Security Operations & Vulnerability Management Engineer

Staff Software Engineer – Identity & Access Management Platform

Uitvoerder Rope Access

Identity & Access Management Specialist - AI Trainer - Freelance

Technology Consultant (Resilience, PAM & IAM)

Technology Consultant (Resilience, PAM & IAM)

Senior Identity and Access Management Engineer

Senior Security Operations & Vulnerability Management Engineer

Operations Engineer, Operations Engineering

Senior Staff Software Engineer – Identity & Access Management Platform

Access Control Specialist

Software Development Engineer, AWS Resource Access Manager Team

Operations Engineer, Operations Engineering

Common Questions