2.1 Identity Management Specialist (CyberArk / PAM, SailPoint, DLP)

Identity Management Specialist

Purpose

Manage privileged identities for tenants and subscriptions and administer DLP controls.

Key Responsibilities

• Onboard privileged accounts and secrets to CyberArk and manage safe / vault structure.
• Manage privileged access across tenants and subscriptions; enforce least-privilege and just-in-time access.
• Configure SailPoint identity lifecycle, access certifications and provisioning workflows.
• Administer and monitor DLP policies, controls and alerts across the cloud estate.

Required Skills

CyberArk (PAM), SailPoint (IGA), DLP administration, identity lifecycle, multi-cloud IAM.

Qualifications & Experience

• Experience (by band) in IAM / PAM administration: PA/GenC 02 yrs; A 2–4 yrs; SA 4–8 yrs; SM/M 8–12 yrs.
• Hands-on CyberArk (PAM) and SailPoint (IGA) experience.
• Working knowledge of cloud IAM across Azure / AWS / GCP.
• Relevant certification preferred (CyberArk Defender, SailPoint, or cloud IAM).

Day-to-Day & Deliverables

• Process privileged-access onboarding and recertification requests.
• Monitor PAM session and DLP alerts and escalate as needed.
• Support access reviews and audit-evidence requests.
• Deliverables: onboarded privileged identities, access-certification campaigns, DLP enforcement, audit evidence.

Tools & Tech Stack

• CyberArk PAM, SailPoint IdentityIQ / IdentityNow, DLP platform (Microsoft Purview or equivalent), Entra ID / AWS IAM / GCP IAM, ServiceNow.