IAM/PAM PKI Engineer
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
Operate and enhance identity security using MFA and PAM tools, ensuring compliance, automation, and strong troubleshooting skills are essential.
Key Skills for This Role
Full Job Posting
Overview
Operate and improve enterprise Identity security capabilities with focus on
Cerebra mPass (MFA)
and
Cyberark (Pam)
.
You will stabilize day to day operations, drive onboarding and policy improvements, and prepare the roadmap for
Windows Hello For Business
migration and future adoption of
Sailpoint (Iga)
,
Beyondtrust (Pam)
, and
Thales Hsm For Pki
.
Strong troubleshooting, documentation, and audit evidence discipline are essential.
Key Responsibilities
- MFA.
- Cerebra mPass
- Design, configure, and support Cerebra mPass MFA policies, integrations, and user onboarding.
- Integrate MFA with enterprise systems (VPN, remote access, cloud apps, internal applications) using standard authentication protocols.
- Monitor authentication flows, troubleshoot access issues, and improve reliability and user experience.
- Prepare and execute the migration roadmap from mPass to
Windows Hello For Business
, including pilot planning, risk management, and cutover support.
PAM. CyberArk (Current). BeyondTrust (Future)
- Operate and scale CyberArk (safes, platforms, CPM/PSM health, onboarding, rotations, access workflows).
- Drive privileged account onboarding and operational hygiene (break glass, vault policies, RBAC, session controls).
- Support evaluation and future rollout of BeyondTrust as needed (requirements, migration planning, operational model).
IGA. SailPoint (Future)
- Support readiness for IGA adoption (joiner mover leaver flows, SoD concepts, connector requirements, campaign approach, reporting needs).
- Contribute to implementation planning and operational runbooks once adopted.
PKI coordination. Thales HSM (Future)
- Coordinate certificate lifecycle processes and integrations with the AD and PKI stakeholders.
- Support discovery, inventory, renewal tracking, and certificate operational processes.
- Participate in planning for
Hsm-Backed Pki With Thales
- (key ceremony concepts, dual control, CRL/OCSP operational readiness).
- Note: day to day AD CS administration is owned by the AD team.
- Operations, compliance, and delivery hygiene
- Ensure IAM, MFA, and PAM events are visible in SIEM. Maintain health KPIs and reduce alert noise.
- Execute changes via ITSM with clear testing, validation, rollback, and post change checks.
- Lead or support RCA for major incidents. Publish SOPs, runbooks, and hardening guidance.
- Produce audit ready evidence aligned with KSA cybersecurity requirements, including access controls and privileged access governance.
Automation
- Use PowerShell, Python, and REST APIs to automate onboarding, rotations, reporting, and operational checks.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at IT-Security C&T
SOC Analyst L1
Saudi Arabia, KSA
The Security Analyst will participate and be part of information security monitoring and incident handling team in order to monitor and manage all information security incidents...
SOC Analyst L1
Eastern Province, KSA
The Security Analyst will participate and be part of information security monitoring and incident handling team in order to monitor and manage all information security incidents...
SOC Analyst L1
Saudi Arabia, KSA
Monitor security incidents, perform forensic analysis, and provide security recommendations; requires IT degree, certifications, and knowledge of security operations.
IAM/PAM PKI Engineer
Saudi Arabia, KSA
Operate and improve enterprise Identity security capabilities with focus on Cerebra mPass (MFA) and CyberArk (PAM). You will stabilize day to day operations, drive onboarding an...
Sr. Splunk Engineer
Saudi Arabia, KSA
Design and implement Splunk solutions, develop custom alerts and dashboards, and support threat detection with strong Splunk and scripting skills.
L3 Data Classification Engineer
Saudi Arabia, KSA
Responsible for data classification architecture, integration with Forcepoint DLP, and compliance audits; requires expertise in Fortra Titus and data protection.
Network Security Engineer
Riyadh, KSA
Manage complex network security incidents, optimize firewall configurations, lead incident response, and mentor engineers while ensuring compliance with cybersecurity frameworks.
Sr. Splunk Engineer
Saudi Arabia, KSA
The role involves designing, implementing, and optimizing Splunk solutions, focusing on security operations, log onboarding, and automation using scripting languages.
SOC Analyst L1
Saudi Arabia, KSA
SOC Analyst L1
Eastern Province, KSA
SOC Analyst L1
Saudi Arabia, KSA
IAM/PAM PKI Engineer
Saudi Arabia, KSA
Sr. Splunk Engineer
Saudi Arabia, KSA
L3 Data Classification Engineer
Saudi Arabia, KSA
Network Security Engineer
Riyadh, KSA
Sr. Splunk Engineer
Saudi Arabia, KSA