Security Engineer III (~Senior Identity Security Engineer)

The role

You will be a hands-on contributor to the identity security function. You will administer the IGA capability, build out the PAM programme, and shape governance for non-human and AI agent identities.

What you will do

• Administer and develop the Identity Governance and Administration platform.
• Support the full identity lifecycle including joiner, mover, and leaver processes.
• Configure and maintain application connectors and role models.
• Run access certification campaigns.
• Evaluate, select, and implement Privileged Access Management capability.
• Develop governance frameworks for non-human identities like service accounts and API keys.
• Provide identity security for AI agents and automated workflows.
• Build and maintain automation for identity processes and workflows.
• Support access review, certification, and SoD policy enforcement.
• Contribute to identity security architecture using Zero Trust principles.

Required qualifications

• Hands-on experience administering an enterprise IGA platform.
• Understanding of Privileged Access Management concepts and technologies.
• Experience governing non-human identities at scale.
• Working knowledge of identity protocols including SAML 2.0, OAuth 2.0, OIDC, SCIM, LDAP, and Kerberos.
• Hands-on experience with cloud IAM platforms such as AWS IAM, Microsoft Entra ID, or GCP IAM.
• Proficiency in one or more scripting or programming languages such as Python, PowerShell, or Java/BeanShell.
• Familiarity with security frameworks and compliance standards like NIST SP 800-63, NIST CSF, ISO 27001, or SOC 2.
• Ability to translate complex identity security concepts for non-technical stakeholders.
• Clear documentation skills.

Nice to have

• Strong preference for SailPoint (IdentityNow or IdentityIQ).
• Familiarity with additional IGA platforms such as Saviynt, Omada, or One Identity.
• Prior experience evaluating or implementing a PAM solution.
• Experience contributing to a PAM programme build from the ground up.
• Familiarity with enterprise secrets management platforms like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, or CyberArk Conjur.
• Experience in AI agent and agentic workflow identity.

About the company

Anaplan is a team of innovators focused on optimizing business decision-making through an AI-infused scenario planning and analysis platform. Their customers include global companies like Coca-Cola, LinkedIn, Adobe, LVMH, and Bayer.