Global Access Management (GAM) Engineer

Role overview

Key responsibilities

• Design, implement, and manage IAM/IGA solutions; assess access governance and develop operating models and implementation roadmaps.
• Configure platforms and integrate with HR, Active Directory, ITSM, PAM, and other enterprise systems.
• Design RBAC, role-mining, approval, exception-handling, and access models; automate joiner, mover, and leaver workflows.
• Plan and run UAR and access certification campaigns; maintain SoD frameworks, rulesets, conflict remediation, and mitigating controls.
• Manage application onboarding, privileged access integrations, emergency access, and access exceptions.
• Monitor service SLAs and KPIs, maintain dashboards, and support service delivery.
• Provide audit evidence, track findings, coordinate remediation, and support regulatory compliance.
• Manage toolchain configuration, integration, upgrades, and vendors; prepare runbooks, support models, and audit-ready operational documentation.

Required technical skills

• Seven to ten years of experience in IAM, IGA, access governance, or access management roles.
• Hands-on experience with major IAM/IGA platforms and strong understanding of identity lifecycle, governance, and provisioning workflows.
• Experience designing and executing enterprise UAR and access certification campaigns.
• Practical knowledge of Microsoft Active Directory and LDAP; strong knowledge of RBAC, access models, approval workflows, and role design.
• Experience designing and operating SoD frameworks, rulesets, and conflict-remediation processes.
• Experience integrating IAM/IGA with PAM platforms and other enterprise systems.
• Familiarity with MFA, SSO, service accounts, ITSM request workflows, and defining and monitoring operational SLAs and KPIs.
• Strong analytical, problem-solving, documentation, and stakeholder-management skills.

Preferred qualifications

• Exposure to PAM solutions and privileged-access governance is preferred.
• Experience with legacy systems, network devices, or operational technology environments is preferred.
• Implementation, configuration, integration, testing, and production-deployment experience is preferred.
• Enterprise application onboarding, access-governance playbooks, and audit, compliance, or regulatory assessment experience are preferred.
• IAM, IGA, or PAM vendor certifications and relevant cybersecurity or information-security certifications are preferred.