Identity & Access Management (IAM) System Engineer MMCTech

Company:

Description:

Join Our Team at Marsh McLennan (MMC) in Cluj Romania!

Marsh McLennan (MMC) has established its EMEA Technology Hub in Cluj Romania reflecting our commitment to innovation and excellence; this hub is central to our digital strategy addressing emerging challenges and enhancing service delivery through advanced technology solutions that empower our clients and promote sustainable growth;

We are seeking a talentedIdentity & Access Management (IAM) System Engineerto join our dynamic team; if you are passionate about security cloud integrations and cutting-edge IAM solutions we want to hear from you!

We will count on you to:

• Implement and manage PAM systems and solutions using CyberArk Delinea or Beyond Trust integration into legacy and cloud identity systems for both human and non-human identities

• Manage IAM systems and solutions including Single Sign-On (SSO) Multi-Factor Authentication (MFA) and role-based access control (RBAC)

• Configure and maintain PAM and IAM management tools

• Work with the business to implement secret management service account management elevated account management meeting security policy

• Work with security teams to define and enforce security policies and user access controls

• Assist in the management of user and elevated lifecycle processes such as onboarding offboarding and role changes

• Integrate PAM systems with various internal and third-party applications and services

• Manage the backup and recovery auditing and reporting on PAM system for security incidents and access violations

• Ensure compliance with regulatory requirements and internal security policies related to identity and access management

• Troubleshoot and resolve IAM-related issues including access problems and authentication failures

• Stay up to date with the latest PAM and IAM technologies trends and security vulnerabilities

• Develop and maintain documentation for PAM and IAM configurations processes and procedures

• Collaborate with security teams to identify and mitigate identity-related risks and vulnerabilities

What you need to have:

• Extensive experience in design development and implementation of PAM solutions based on CyberArk Delines Beyond Trust or Centrify

• Experience in design development and implementation of Microsoft Active Directory (including DNS AD Sites GPO Domain DFS Trusts Schema Backup and Restore PKI)

• Experience in designing and implementing Directory Services with cloud services such as Entra ID AWS Identity Centre OKTA Workforce and CIAM

• Experience designing and implementing SSO integrations using federation SAML OpenID two-factor authentication and risk-based authentication

• Provide advanced design and engineering functions to secure PAM Directory Services Identity and Access Management Windows Server automation and scripting

• Support projects in development with designs for PAM and IAM

• Experience integrating new organizations into existing PAM and IAM solutions

• Extensive and demonstrated experience in end-to-end deployment of OKTA WIC and CIC (CIAM) solutions Entra ID including B2B and B2C

• Experience configuring Okta and Entra ID to provide enterprise Single Sign-On services and enable Multi-Factor Authentication (MFA) platform features for internal and external applications

• Develop and maintain enterprise-wide Identity runtime authorization solutions (Zero Trust)

• Experience of least privilege access models and IDP granular control boundaries across cloud environments

• Document Operational procedures and hand-off to the Identity Operations team

• Stay up to date with current PAM and IAM threats and industry solutions

• Develop and implement technical solutions leveraging modern authentication services

• Perform business use case analysis to implement authentication and authorization solutions

• Extensive knowledge and experience of Privileged Access Management best practices and procedures using software solutions such as CyberArk Delinea Beyond Trust

• Comprehensive knowledge of Active Directory and Entra ID Backup and Recovery

• Experience with Windows Operating systems registry local policy events and Windows Firewall

• Experience with one or more scripting in languages including PowerShell C Jave Python JavaScript or C#

• Strong knowledge of PKI and Certificate Services templates and management

What makes you stand out:

• Certifications in IAM security or cloud platforms;

• Experience working in a global or multi-cloud environment;

• Strong problem-solving skills and a proactive approach to security challenges;

• Excellent communication skills and ability to collaborate across teams;

Why join our team:

• We help you be your best through professional development opportunities interesting work and supportive leaders;

• We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and have an impact for colleagues clients and communities;

• Our scale enables us to provide a range of career opportunities as well as benefits and rewards to enhance your well-being;

• A yearly budget and the opportunity to build your flexible benefits package (up to 20% of your annual salary);

• 30 days off (including legal days birthday public holiday replacements and benefits options);

• Performance bonus scheme;

• Matching charity contributions charity days off and the Pay it Forward charity challenge;

• Core benefits: Pension Life and Medical Insurance Meal Vouchers Travel Insurance;
  
  #MMCTech