Job Opportunities API

D-ploy is a dynamic IT and Engineering Solutions company operating across Europe and the USA, including Switzerland, Germany, the Czech Republic, Austria and the UK. We are committed to delivering reliable and efficient services to our clients through strong partnerships and a people-focused culture. We are looking for an experienced Security Engineer specializing in Identity and Access Management to strengthen the security of enterprise identities, authentication services, privileged access and access governance processes. This is a hands-on role combining security engineering, operational ownership and continuous improvement. You will design, implement and maintain identity security controls, reduce access-related risks and contribute to broader Zero Trust initiatives. You will work closely with Infrastructure, Cloud, Workplace Technology, Enterprise Architecture, HR, application owners, Security Operations and external technology partners. Responsibilities: Manage and improve security controls for employee, contractor, partner, service and privileged identities throughout their lifecycle. Contribute to and, when required, lead identity security and access governance projects. Configure, maintain and enhance security controls across Microsoft Entra ID, Okta and other IAM platforms. Manage Conditional Access, Multi-Factor Authentication, passwordless authentication and risk-based access policies. Develop and maintain identity security standards, authentication requirements and access governance guidelines. Ensure roles, permissions, service identities and privileged accounts are properly documented and governed. Improve processes for joiners, movers and leavers, access reviews, access certification and service account management. Support the implementation and governance of Role-Based Access Control across applications and technology platforms. Review security-sensitive changes and participate in identity-related technical risk assessments. Translate identified risks into practical remediation plans with clear actions, owners and timelines. Help reduce excessive permissions, standing privileges and unnecessary local administrator access. Coordinate privileged access activities, including Privileged Identity Management and administrative role reviews. Collaborate with Enterprise and Security Architecture teams on identity strategy, authentication models and Zero Trust principles. Support internal audits, external assessments and regulatory reviews. Work with Security Operations and Incident Response teams to ensure identity events generate appropriate logs and security telemetry. Assist with investigations involving compromised identities, suspicious authentication activity or access control weaknesses. Requirements At least five years of relevant experience in Identity and Access Management, Security Engineering, Cybersecurity Engineering or Security Architecture. Strong hands-on experience with enterprise IAM technologies, particularly Microsoft Entra ID and Okta. Strong knowledge of authentication, authorization, federation, identity provisioning and deprovisioning. Practical experience with Conditional Access, Multi-Factor Authentication, Identity Protection, Privileged Identity Management and access governance. Experience administering and securing Okta environments. Good understanding of identity and authentication protocols, including SAML, OAuth 2.0, OpenID Connect and SCIM. Strong understanding of Privileged Access Management and least-privilege principles. Knowledge of Role-Based Access Control, entitlement management, access certification and segregation of duties. Experience implementing and governing authentication, authorization, privileged access and identity governance controls. Experience supporting IAM transformation programmes, access governance initiatives or Zero Trust implementations. Familiarity with Microsoft Defender, ServiceNow or comparable security and IAM tools.