Identity & Security Specialist

We are seeking a skilled Identity & Security Specialist with a strong focus on Privileged Access Management (PAM) and modern identity security practices. This role is ideal for a technically strong professional with hands-on experience across Active Directory, Microsoft Intune, CyberArk, and Microsoft Sentinel, who can enhance and secure enterprise identity infrastructure.

You will play a key role in strengthening our security posture by implementing, managing, and optimising identity and privileged access controls across on-premises and cloud environments.

Key Responsibilities

• Design, implement, and manage Privileged Access Management (PAM) solutions, primarily CyberArk
• Administer and secure Active Directory (AD) environments
• Manage endpoint and identity policies via Microsoft Intune
• Monitor, detect, and respond to security events using Microsoft Sentinel
• Implement least privilege access models and Zero Trust principles
• Conduct access reviews, privileged account audits, and remediation activities
• Support identity lifecycle management (joiners, movers, leavers automation)
• Strengthen authentication controls including MFA, Conditional Access, and RBAC
• Collaborate with Security Operations and Infrastructure teams to mitigate identity-based risks
• Contribute to identity governance and compliance initiatives

Required Skills & Experience

• Strong hands-on experience with:
• Active Directory (AD)
• CyberArk (PAM administration & onboarding)
• Microsoft Sentinel (SIEM monitoring & alerting)
• Solid understanding of:
• Privileged Access Management frameworks
• Identity governance & administration (IGA)
• Zero Trust security principles
• Conditional Access & MFA
• Experience supporting hybrid (on-prem & Azure) environments
• Knowledge of PowerShell scripting for automation
• Understanding of security best practices and compliance requirements
• Experience with Azure AD / Entra ID
• Exposure to Defender for Identity / Endpoint
• Security certifications (e.g., CISSP, SC-300, AZ-500, CyberArk Defender)

#J-18808-Ljbffr…