Senior Identity & Access GRC Engineer
Tasks
- Act as SME for identity during security incidents
- Align IAM controls with zero trust
- Assess IAM platform health and risks
- Coordinate with IT operations network operations HR application owners cloud and devops teams CSOC
- Create IAM maturity roadmap
- Define IAM governance framework
- Define authentication assurance levels
- Define deprovisioning service level agreements
- Define privileged access governance
- Design IAM operational model
- Design enterprise RBAC models
- Design joiner mover leaver processes
- Enforce segregation of functions controls
- Ensure privileged session monitoring and logging
- Establish access recertification governance
- Establish key risk indicators and control effectiveness metrics
- Identify coverage gaps in applications and cloud environments
- Implement Least Privilege
- Implement access provisioning and revocation
- Implement just in time access
- Integrate IAM with authoritative sources
- Lead IAM modernization and integration
- Maintain IAM documentation and records
- Provide IAM records and remediation plans
- Support internal and external audits
- Track and remediate IAM non conformities
- Translate IAM policies into technical controls
- Validate SSO and federation configurations
Perks/Benefits
- Development programs
- Extra vacation days
- Hybrid working
- Insurance for hospitalization
- Life insurance
- Meal tickets
- Medical subscription
- Wellbeing and recognition events
Skills/Tech-stack
ABAC | Access Management | Access Recertification | Access Revocation | Access provisioning | Active Directory | Audit Support | Authentication Assurance | Conditional Access | Federation | Governance Risk | Governance risk compliance | IAM architecture | IAM integration | Identity Lifecycle Management | Identity Platform | Identity and Access Management | Identity and access | Identity audit support | Identity governance | Identity lifecycle | Identity platform modernization | Joiner-Mover-Leaver | LDAP | Lifecycle Management | Logging and Monitoring | MFA | OAuth 2 | OAuth 2 0 | OpenID Connect | Platform Modernization | Privileged Access | Privileged Access Management | RBAC | Risk Assessment | Risk compliance | SAML | SSO | Segregation of Duties | Service Level | Service Level Agreement | Zero Trust
Education
N/A
Related jobs
-
Data Security Engineer RON 312K-396KAPI Security | Access Governance | Access Management | Bash | Cloud SecurityCareer advancement | Competitive compensation packages | Flexible work settingSenior-level Full TimeRomania - Remote R2d ago
-
IAM Governance Lead RON 312K-396KAWS | Access Control | Access Management | Active Directory | AuthenticationAdditional vacation days | Counseling services | International certifications support | Language development opportunities | Leadership programSenior-level Full TimeBucharest, Bucuresti, RO, ROU: 020335d ago
-
Senior Information Security Engineer RON 295K-443KARM | Advanced Security | Bash | Bicep | Conditional AccessFlexible work schedule | Generous time off | Remote-first work environment | Wellbeing programsSenior-level Full TimeRomania5d ago
-
Linux Systems Administrator RON 61K-86KAWS | Active Directory | Ansible | Argo CD | Azure Active DirectoryFamily medical coverage | Free fruits and coffee | Game borrowing | Life insurance | Meal ticketsEntry-level Full TimeBucharest, Bucharest, Romania5d ago
-
Senior DevOps Engineer ID69152 RON 312K-396K.NET | ARM Templates | AWS | Access Management | AlertingEducation budget | Fitness budget | Flextime | Mentorship | Professional growthSenior-level Full TimeCluj-Napoca, Romania6d ago
-
Senior DevOps Engineer ID69152 RON 312K-396KAWS | AWS CloudFormation | Access Management | Azure | Azure ResourceFlextime | Mentorship | Personalized growth roadmaps | Professional growth | Remote work optionsSenior-level Full TimeSector 1, Romania6d ago
-
Senior DevOps Engineer ID69152 RON 312K-396KARM Templates | AWS CloudFormation | Access Management | Amazon Web Services | BashEducation budget | Fitness budget | Flextime | Mentorship | Office optionsSenior-level Full TimeCluj-Napoca, Romania6d ago
-
Senior DevOps Engineer ID69152 RON 312K-396K.NET | ARM Templates | AWS | Access Management | AlertingFlextime | Professional growth | Remote and office optionsSenior-level Full TimeBraşov, Romania6d ago
-
Senior DevOps Engineer ID69152 RON 312K-396K.NET | ARM Templates | AWS | Access Management | AlertingEducation budget | Fitness budget | Flextime | Mentorship | Professional growthSenior-level Full TimeIaşi, Romania6d ago
-
API Security | AWS | Access Management | Amazon EKS | Application SecurityAnnual leave | Career growth opportunities | Flexible international work environment | Full equipment and technology setup provided | Fully remote work optionSenior-level Full TimeRomania R7d ago
-
Senior Microsoft System Engineer RON 312K-396KAD Connect | Active Directory | Ansible | Autopilot | AzureSenior-level Full TimeBucurești, București, RO7d ago
-
Senior Data Security & Cryptography Engineer EUR 84K-125KAES 256 | AWS Key Management Service | Azure Key Vault | BigID | C++Comprehensive benefits | Growth opportunities | Hybrid work model | In-office option | Inclusive cultureSenior-level Full TimeSpain; Portugal; Poland; Romania; Serbia; Czechia8d ago
-
Platform Engineer RON 180K-312KARM Templates | Active Directory | Azure Active Directory | Azure Compute | Azure DevOpsMid-level Full TimeBucharest, Romania8d ago
-
Senior Security Engineer RON 312K-396KAWS | Application Security | CI/CD | Data Loss Prevention | Data lossSenior-level Full TimeRomania8d ago
-
Senior Penetration Test Engineer RON 312K-396KApplication Testing | Burp Suite | C++ | Exploit Development | Infrastructure TestingSenior-level Full TimeIași, Romania9d ago
-
Cybersecurity Engineering Specialist (2) RON 312K-396K.NET | API Security | Access Control | CI/CD | CSPME-learning platforms | Flexible benefits system | Flexible hours | Health subscription | Holiday vouchersSenior-level Full TimeRomania - Bucharest - Edenred Digital …9d ago
-
Cloud Engineer RON 312K-396KArgo CD | Azure DevOps | Azure Kubernetes | Azure Kubernetes Service | Azure MonitorSenior-level Full TimeBucharest - 1A Poligrafiei Boulevard, Romania12d ago
-
Senior-level Full TimeBucuresti - Ilfov, Romania16d ago
-
Sr. SRE Engineer II - EPICS, NG-SIEM (Hybrid) RON 147K-221KAutomation | Backpressure | Bash | C++ | CI/CDEmployee networks | Great Place to Work certification | Paid adoption leave | Paid parental leave | Paid vacation and holidaysMid-level Full TimeBucharest, Romania R20d ago
-
Active Directory | Ansible | Antimalware | Antivirus | Change ManagementCoursera subscription | Flexible working hours | GoFluent subscription | Life insurance | Medical coverageEntry-level Full TimeBucharest Orhideea, Romania21d ago
-
Network Security Engineer RON 312K-396KCloud Security | Deep Packet Inspection | Firewall | IPS | Incident ResponseCareer coaching | Certifications | Conferences | Employee assistance programme | Employee referral bonusMid-level Full TimeBucharest, Bucharest, Romania29d ago
-
Senior Cloud SecOps Engineer RON 312K-396KAWS | AWS CloudFormation | Access Management | Azure Resource | Azure Resource ManagerDiscounts | Employee assistance program | Extra vacation days | Life and accident insurance | Medical coverageSenior-level Full TimeTimisoara, RO, 3000111mo ago
-
Access Management | Audit compliance | Certificates | ELK | EncryptionHybrid work | Meal vouchers | Occasional travel | Private medical | Sport benefitsSenior-level Full TimeBucharest Orhideea, Romania1mo ago
-
Global IT Security Expert - OT RON 312K-396KAccess Management | Adversary simulation | Azure | CASB | Cause analysisComfortable working environment | Professional growth opportunities | Remote Work ModeSenior-level Full TimeROU - Bucharest - Aluminium Can, …1mo ago
-
Senior IT Engineer Network & Firewalls - CTBC RON 312K-396KAnsible | Automation | BGP | DNS | DevOps13th salary | Book borrowing | Discounts at partners | Extra vacation days | Happy daysSenior-level Full TimeTimișoara, TM, Romania R1mo ago