Senior Security IAM & PAM Consultant

Required Skills

• Define IAM and PAM architecture, strategy, and roadmap aligned with business and security requirements
• Design and implement OKTA-based IAM solutions including SSO, MFA, federation, and lifecycle management
• Design and implement BeyondTrust PAM solutions including privileged access workflows, vaulting, and session control
• Define and enforce identity governance processes (JML, RBAC, access certification)
• Integrate IAM/PAM solutions with AD, Entra ID, cloud platforms, and enterprise applications
• Establish Zero Trust access models and least privilege principles across environments
• Ensure compliance with regulatory frameworks (NIST, ISO 27001, CIS, NIS2)
• Lead solution design reviews and oversee implementation by specialist teams
• Implement automation and integration via APIs and identity workflows
• Define monitoring, logging, and SIEM integration for identity events
• Provide technical leadership, mentorship, and stakeholder engagement

Qualifikation & Experience

• Relevant Experience should be 7+ years
• OKTA Identity platform (SSO, MFA, Federation, Lifecycle Management)
• BeyondTrust PAM (privileged access, vaulting, session monitoring)
• Protocols: SAML, OAuth, OIDC, LDAP, Kerberos
• Identity governance: RBAC, ABAC, JML processes
• Integration: AD, Entra ID, Azure/AWS IAM, API integrations
• Security concepts: Zero Trust, least privilege, identity protection
• SIEM integration (Sentinel, Splunk)

Preferred Certifications:

• OKTA Certified Professional / Administrator / Consultant

• BeyondTrust PAM Certification (or equivalent)

• Microsoft SC-300 (Identity and Access Administrator)

• CISSP / CISM

• CompTIA Security+

Tools & Plattform (indicative):

• Network Security: Palo Alto, Fortinet, Cisco, F5/WAF, Cloudflare/Proxies

• Cloud: Azure, Defender for cloud Apps, security center, CAP, etc.