Identity & Access Management (IAM) Specialist

This advert was translated automatically from Portuguese. Read the original.

Do you want to join one of the largest professional services organisations on the market? Then Deloitte is for you. Here, you will have the opportunity to boost your career and strengthen your skills in our technology universe. We are an international Tech Hub and we are looking for the best Cybersecurity specialists to join our centres of excellence and our community. At Deloitte, you will transform the world as we know it and develop unique and innovative solutions across the most varied and complex transformation projects, from Portugal to the world. We are strengthening our Cyber area and we are looking for experienced professionals who have a natural aptitude and enjoyment for working in a team and in a multi-project environment. You can discover all the functions you will perform, according to your profile, to take a leap in your career! Will you join us? We are waiting for you. About the Role The IAM (Identity and Access Management) Specialist is responsible for ensuring secure, efficient and compliant processes for identity lifecycle management, supporting authentication, authorisation and privileged access management initiatives. Your day-to-day and responsibilities: - Manage the access lifecycle: onboarding, access assignment and access removal. - Administer IAM and IGA platforms, such as Azure AD / Entra ID, Okta, SailPoint and Ping Identity. - Implement and maintain MFA (Multi-Factor Authentication), SSO (Single Sign-On), RBAC (Role-Based Access Control), ABAC (Attribute-Based Access Control) mechanisms and Zero Trust principles. - Integrate IAM solutions with cloud services, APIs and enterprise applications. - Support PAM (Privileged Access Management) solutions, such as CyberArk, BeyondTrust and Delinea. - Carry out periodic access reviews and support audit and compliance activities. - Resolve authentication issues related to SAML, OAuth2, OIDC and Kerberos. - Ensure that identity governance policies are aligned with security frameworks. Governance - Implementation of access certification processes. - Segregation of Duties. - Access auditing and evidence management. - Compliance with standards and regulations (RGPD/GDPR, NIS2, ISO 27001). - Identity-related risk management. Access Administration - Creation and management of access profiles. - Definition of permission matrices. - Management of privileged accounts. - Monitoring of access and detection of anomalous behaviour. Identity Architecture - Design of hybrid identity architectures. - Implementation of adaptive authentication policies. - Planning of identity modernisation strategies. - Definition of security standards for identity services. Are you who we are looking for? - Academic background in Telecommunications Engineering, Electrical Engineering, Computer Science or a similar field. - More than 4 years of relevant experience in Identity & Access Management (IAM/IGA) solutions, namely Microsoft Entra ID (Azure AD), Okta, SailPoint IdentityIQ/IdentityNow and PingFederate; - Experience in the implementation, configuration and operation of Privileged Access Management (PAM) solutions, such as CyberArk PAS, BeyondTrust Password Safe or Delinea Secret Server; - Solid knowledge of the main authentication, authorisation and federation protocols, including SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), WS-Federation, SCIM, LDAP and RADIUS; - Experience in identity and access management in cloud environments, namely Microsoft Azure, AWS IAM and Google Cloud IAM; - Experience in automation and scripting, using PowerShell, Python and API integrations for process optimisation and identity management; - Knowledge of security frameworks and standards, such as Zero Trust, NIST 800-63, ISO 27001 and CIS Controls; - Ability to analyse risks, identify vulnerabilities and assess impacts related to identity and access; - Experience in stakeholder management and in monitoring projects related to digital identity and security; - We value certifications such as Microsoft SC-300: Identity and Access Administrator, Okta Certified Professional/Administrator, SailPoint IdentityNow or IdentityIQ, CyberArk Defender, Sentry or Guardian, CompTIA Security+, as well as ADSelfService Plus and ADManager Plus certifications (Administrator and Expert). - Strong analytical and problem-solving skills, with critical thinking applied to complex environments. - Excellent communication and interpersonal skills, essential in a consulting context with direct client contact. - Autonomy, proactivity and strong organisational and time management skills. - Team spirit, collaborative mindset and ability to build trusting relationships with clients and colleagues. - Fluency in Portuguese and English, both spoken and written. - Availability to participate in international projects. Develop a career tailored to you - In a diverse working context that allows for continuous development and learning; - Through a personalised career development plan (technical and functional skills/opportunities), suited to your moment, needs and objectives; - By participating in national and international projects, with relevant scale and impact in this area of specialisation; - Unlimited access to the largest online learning platforms (LinkedIn Learning and Udemy); - Opportunity for training and certifications in the latest technologies, namely in Cloud technologies. Experience a culture of unity - A culture of innovation and excellence that makes us leaders and pioneers of trends; - A friendly environment of respect, trust, transparency and informality; - A network for life that keeps you connected to the best knowledge alongside leaders and specialists; - An opportunity to be part of our communities (Tech, innovation, sport and other interests) and to actively participate in social responsibility projects. About Deloitte At Deloitte you will never work alone. You will have the opportunity to join various transformation projects and be part of a team that will inspire you and help you develop differentiating solutions, in a dynamic and collaborative environment where you can give your best and benefit from our wellbeing and flexibility initiatives. We are more than 5,500 people in Portugal, of which more than 2,600 work in technology areas, from offices and Digital Studios in Lisbon, Porto, Braga, Viseu, Coimbra and Faro and from technology hubs in Braga. Furthermore, our teams in Portugal have an international reach, which demonstrates our strong global leadership in low code/no code, telecommunications network engineering, organisational transformation technology platforms (ServiceNow and Apptio) and the financial services industry (Finastra, TIA and Guidewire). If you are interested in exploring and developing your skills in any of these areas in technology solutions – software engineering, cloud, systems integration, data analytics & data science, cyber risk, telecommunications network engineering, UX design – and would like to work with technologies such as AWS, Google, Oracle, Salesforce, SAP, Mulesoft, Feedzai and SAS, among others, then you are in the right place! Find out more at www.deloitte.com/pt/careers. Keywords: Consulting; Technology LI-HYBRID #LI-CA1 #TECHDTT #Experienced