Identity Engineer - Privilege Access
RemoteFull-time10–18 yrsPosted over a month ago
Leadership identity and access role at Ibwujb. Needs 10+ years and a degree. Remote.
About the role
The Identity Engineer is responsible for administering, securing, and supporting the enterprise's privileged access management (PAM) and non-human identity (NHI) environment, with a primary focus on CyberArk Privileged Cloud and the lifecycle governance of service accounts, API keys, certificates, and machine/workload identities.
What you'll do
- Administer and support the CyberArk Privileged Cloud platform , including user and group management, safe management, vault configuration, and PSM/CPM operations
- Configure and enforce password, access, and workflow policies to manage privileged account onboarding, rotation, and least-privilege access
- Own non-human identity (NHI) management end to end, including service accounts, API keys, secrets, certificates, and machine/workload identities
- Implement NHI lifecycle governance , including discovery, ownership assignment, credential rotation, expiration tracking
- Administer secrets management and vaulting for applications, automation, and CI/CD pipelines, reducing hard-coded credentials and standing privileged access
What you need
- SIEM
- Incident response
- IAM
- ISO 27001
- Firewalls
- Python
Good to have
- CISSP
- CISM
- CI/CD
- Active Directory
- REST APIs
- SOX