Senior DevOps Engineer (Identity & Access Management)

We are seeking a Senior DevOps Engineer to join our team and drive automation, reliability, and scalability across our production environments. The role focuses on building robust DevOps pipelines, implementing infrastructure as code, and optimizing cloud-native systems to ensure seamless deployment, monitoring, and maintenance.

Key Responsibilities:

• Design, develop, automate, and operate services and systems that manage the full lifecycle of user accounts across all infrastructure environments (User Lifecycle Management – Joiner, Mover, Leaver processes).


• Implement identity and access management features such as JIT (Just-In-Time), JML (Joiner-Mover-Leaver), PIM (Privileged Identity Management), PAM (Privileged Access Management), and RBAC (Role-Based Access Control) in a robust and scalable manner.


• Partner cross-functionally with security, compliance, and engineering teams to build tooling that ensures all access activities are logged and properly audited.


• Constantly evaluate current trends in identity and access management and adopt new tools and features in a timely manner.


• Mentor junior engineers and help them grow their technical skills.


• Participate in an on-call rotation schedule.

Requirements:

• Bachelor’s degree in Computer Science, Electrical Engineering, Information Systems, Informatics, or equivalent.


• 5+ years of development experience focused on identity and access management systems.


• Proven experience in User Lifecycle Management (ULM), including onboarding, role changes, and offboarding of users across multiple systems (Active Directory, cloud platforms, internal applications).


• Extensive hands-on experience with Active Directory, including:

1. Domain controller maintenance


2. Group Policy Object (GPO) configuration and management


3. AD deployment and replication


4. Role-Based Access Control (RBAC) for users and groups

• Strong understanding of DNS and basic networking concepts.


• Proficiency in PowerShell for automation and scripting within identity environments.


• Experience with additional programming languages and automation tools such as C#, .NET, Ansible, Python, Java, Go, Node.js, Terraform, Docker, etc.


• Proven track record of developing scalable, maintainable, and secure software solutions with a focus on automating identity workflows.


• Understanding of infrastructure at scale, including load balancing, cloud environments, and certificate management.

Preferred Skills:

• Master’s degree in Computer Science.


• Experience working with and building solutions that integrate with Entra ID or similar third-party systems.


• Experience developing software for hybrid cloud environments.


• Experience working cross-functionally with security and compliance functions.


• Ability to communicate effectively with both technical and non-technical audiences.


• Demonstrated experience working with multiple vendors in the identity and access management ecosystem.


• Experience with hybrid Active Directory and Entra ID environments.


• Experience with Terraform, Bicep, or ARM templates.


• Knowledge of authentication protocols: Kerberos, LDAP(S), SAML, OIDC, OAuth.