Identity & Access Management (IAM/PAM) Specialist

Job description

Contract: project‑based managed cybersecurity services for a 13‑month term. Role purpose: operate and govern enterprise identity, access, authentication, IGA and privileged‑access services across the entity’s environment. Key responsibilities: manage joiner, mover and leaver identity lifecycle processes and automated provisioning across connected systems; review access requests, approvals, role assignments, segregation‑of‑duties conflicts and least‑privilege controls; operate SSO and MFA services and investigate failed, suspicious or anomalous authentication activity; monitor identity synchronization, resolve provisioning failures and maintain identity‑data consistency; run access‑certification campaigns, coordinate with business owners and escalate overdue reviews; identify and remediate inactive, orphaned, excessive or high‑risk accounts and entitlements; govern privileged access requests, session monitoring, recordings, shared accounts and just‑in‑time access; support audits, provide compliance evidence, investigate IAM/PAM incidents, track remediation and produce periodic operational reports.

Requirements

• Bachelor’s degree in Computer Science, Information Security or a related field
• at least 6 years of experience in IAM governance, engineering or operations
• hands‑on experience with enterprise IAM, IGA and PAM platforms
• strong understanding of identity lifecycle, access‑control models, SSO, MFA, RBAC, least‑privilege and segregation of duties
• experience integrating IAM solutions with enterprise applications and applying Zero Trust and modern authentication principles
• knowledge of Saudi regulatory requirements and international identity‑security practices
• strong stakeholder coordination and service ownership
• careful, systematic and able to handle sensitive access data responsibly
• strong troubleshooting, reporting and documentation skills
• able to balance operational responsiveness with strict governance controls
• preferred professional certifications such as CIAM, CISSP, Microsoft Identity certification or equivalent IAM‑related certification.

Skills