The Role
Lead IAM governance, design and operate SailPoint-based identity governance with Okta integration, enforce least-privilege and RBAC/ABAC, manage secrets (AWS Secrets Manager), validate patch compliance, define encryption controls, enable Zero Trust, and support audits and compliance evidence.
Summary Generated by Built In
This is a remote position.
Role Overview
We are seeking an experienced Senior Security & Identity and Access Management (IAM) Engineer with 5+ years of experience to lead IAM governance, access control strategy, and compliance initiatives across the environment. This role requires deep expertise in SailPoint Identity Security Cloud/IdentityIQ (primary IAM platform) and Okta (secondary IAM platform), along with expertise in least-privilege models, secrets management, encryption controls, patch compliance validation, and audit readiness, while championing Zero Trust security principles.
Key Responsibilities
IAM Governance & Access Management
Lead and maintain IAM governance frameworks aligned with security best practices and regulatory requirements.
Design, implement, and manage Identity Governance using SailPoint (primary), with Okta integration and administration (secondary).
Enforce least-privilege and role-based access models across users, services, and privileged accounts.
Oversee and lead quarterly access reviews, ensuring timely certification and remediation of access exceptions.
Provide guidance on access lifecycle management, including JML processes.
Secrets Management & Credential Security
Design, implement, and maintain secrets management solutions such as AWS Secrets Manager or equivalent platforms.
Ensure secure storage, access controls, rotation policies, and lifecycle management for secrets, API keys, and credentials.
Advise engineering teams on secure secret handling and integration patterns.
Patch Compliance & Security Validation
Validate and monitor patch compliance across platforms to ensure adherence to defined SLAs and risk thresholds.
Analyze patching gaps, drive remediation efforts, and manage exception processes where necessary.
Provide compliance and risk visibility to stakeholders through reports and dashboards.
Encryption & Data Protection Controls
Define and enforce encryption standards for data at rest and in transit across cloud and enterprise systems.
Validate implementation of encryption controls and secure communication protocols.
Support key management practices and integration with identity and access controls.
Zero Trust Enablement
Champion Zero Trust security principles, with a focus on identity-centric access, continuous verification, and network controls.
Promote Zero Trust awareness and best practices across engineering and IT teams.
Support design and implementation of identity-driven security architectures.
Compliance, Audit & Evidence Management
Lead creation and maintenance of compliance evidence artifacts for internal reviews and external audits.
Support audit activities by providing documentation related to IAM controls, encryption posture, patch compliance, and secrets management.
Partner with GRC and audit teams to address findings and implement corrective actions.
Required Skills & Qualifications
5+ years of experience in Security Engineering, IAM, or Identity Governance roles with strong hands-on experience in SailPoint (primary) and Okta (secondary).
Deep expertise in IAM concepts including RBAC, ABAC, least-privilege, and privileged access management.
Strong hands-on experience with secrets management solutions (AWS Secrets Manager or equivalent).
Proven experience validating patch compliance and security SLAs.
Strong understanding of encryption standards and secure communication protocols.
Excellent documentation, communication, and stakeholder management skills.
Preferred Qualifications
Hands-on experience with cloud platforms such as AWS, Azure, or GCP.
Familiarity with Zero Trust architectures and frameworks.
Exposure to compliance frameworks such as ISO 27001, SOC 2, PCI-DSS, or NIST.
Experience operating in large-scale or regulated enterprise environments.
Skills Required
- 5+ years experience in Security Engineering, IAM, or Identity Governance
- Hands-on experience with SailPoint Identity Security Cloud or IdentityIQ
- Hands-on experience with Okta administration and integration
- Deep expertise in IAM concepts including RBAC, ABAC, least-privilege, and privileged access management
- Hands-on experience with secrets management solutions (AWS Secrets Manager or equivalent)
- Proven experience validating patch compliance and managing security SLAs
- Strong understanding of encryption standards and secure communication protocols
- Excellent documentation, communication, and stakeholder management skills
- Hands-on experience with cloud platforms such as AWS, Azure, or GCP
- Familiarity with Zero Trust architectures and frameworks
- Exposure to compliance frameworks such as ISO 27001, SOC 2, PCI-DSS, or NIST
- Experience operating in large-scale or regulated enterprise environments
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
SRM Technologies is a global IT services company specialising in automotive technologies, digital transformation and product engineering services. We provide technology consulting, platform development, data analytics, artificial intelligence, cloud enablement, digital infrastructure, quality assurance, embedded software and design to manufacturing product solutions to various industries and enterprises across the North America, Japan, Europe and India. At the heart of our organization are passionate employees who embody our core belief - 'ideas@work.' We firmly believe that ideas and innovation truly matter only when they create a meaningful impact on our customers' businesses and the lives of their end customers. Therefore, we prioritize the practical application of these ideas and their transformative impact through our talented and ever-growing workforce. 𝘚𝘙𝘔 𝘛𝘦𝘤𝘩 𝘪𝘴 𝘢 𝘱𝘳𝘰𝘶𝘥 𝘮𝘦𝘮𝘣𝘦𝘳 𝘰𝘧 𝘵𝘩𝘦 𝘚𝘙𝘔 𝘎𝘳𝘰𝘶𝘱, 𝘢 𝘮𝘶𝘭𝘵𝘪𝘯𝘢𝘵𝘪𝘰𝘯𝘢𝘭 𝘤𝘰𝘯𝘨𝘭𝘰𝘮𝘦𝘳𝘢𝘵𝘦 𝘸𝘪𝘵𝘩 𝘢 𝘳𝘪𝘤𝘩 𝘩𝘪𝘴𝘵𝘰𝘳𝘺 𝘴𝘱𝘢𝘯𝘯𝘪𝘯𝘨 𝘰𝘷𝘦𝘳 𝘧𝘰𝘶𝘳 𝘥𝘦𝘤𝘢𝘥𝘦𝘴. 𝘛𝘩𝘦 𝘚𝘙𝘔 𝘎𝘳𝘰𝘶𝘱 𝘰𝘱𝘦𝘳𝘢𝘵𝘦𝘴 𝘪𝘯 𝘥𝘪𝘷𝘦𝘳𝘴𝘦 𝘴𝘦𝘤𝘵𝘰𝘳𝘴, 𝘪𝘯𝘤𝘭𝘶𝘥𝘪𝘯𝘨 𝘌𝘥𝘶𝘤𝘢𝘵𝘪𝘰𝘯, 𝘛𝘦𝘤𝘩𝘯𝘰𝘭𝘰𝘨𝘺, 𝘏𝘦𝘢𝘭𝘵𝘩𝘤𝘢𝘳𝘦, 𝘢𝘯𝘥 𝘔𝘦𝘥𝘪𝘢
