Identity Security Engineer

Key Responsibilities

• Improve the execution quality and timeliness of identity lifecycle processes, including joiner/mover/leaver provisioning, access changes, and third‑party identity governance.
• Own and support identity and privileged access security policies, standards, and architecture patterns across Active Directory (AD), Microsoft Entra, and Identity Governance and Administration (IGA) platforms.
• Design, implement, and maintain identity lifecycle workflows and access governance processes using SailPoint.
• Support the implementation and ongoing development of Privileged Access Management (PAM) controls, platforms, and lifecycle governance processes.
• Engineer continuous improvements to IAM and PAM controls, enabling scalable, automated, and self‑service identity management capabilities.
• Deliver identity security posture monitoring and drive remediation of identity‑related control gaps in collaboration with technology owners.
• Provide subject‑matter expertise in identity‑related security incidents, supporting investigation, containment, and remediation activities.
• Develop and maintain identity security metrics, dashboards, and reporting to provide visibility of control effectiveness, coverage, and risk.
• Collaborate with application and platform teams to embed secure‑by‑design identity patterns, including authentication, authorisation, RBAC, and least privilege principles.
• Maintain identity architecture documentation, blueprints, and configuration standards for identity security platforms.
• Contribute to cross‑domain security architecture reviews and ensure alignment with enterprise security principles.
• Partner with cyber defence teams to ensure appropriate identity telemetry is monitored and integrated into detection capabilities.
• Support compliance and regulatory alignment for identity security controls and governance.
• Provide oversight and direction to third‑party providers delivering identity services and platforms.

Requirements

• Minimum 10 years of IT industry experience, with at least 5 years focused on identity management or identity security engineering.
• Hands‑on experience with Active Directory and/or Microsoft Entra in an enterprise environment.
• Strong experience designing and implementing identity lifecycle and access governance processes using an IGA platform such as SailPoint.
• Proven experience designing and implementing Privileged Access Management (PAM) solutions and controls.
• Strong understanding of IAM principles including zero trust, least privilege, RBAC, segregation of duties, and access certification processes.
• Experience working with stakeholders to implement access governance and enforce least privilege across enterprise environments.
• Ability to define identity security architecture patterns and translate them into practical standards, controls, and documentation.
• Strong analytical and troubleshooting skills related to identity and access management issues.
• Experience working across technical, cyber security, and business stakeholders with strong communication and collaboration skills.
• Familiarity with identity security and protection tools such as CyberArk, BeyondTrust, Microsoft Defender for Identity, CrowdStrike Identity, or similar platforms.
• Experience supporting identity‑related security incident investigation and coordination with SOC or cyber defence teams.
• Exposure to scripting or automation (e.g., PowerShell) for identity process improvement is desirable.
• Understanding of identity telemetry, threat detection concepts, and integration with security monitoring systems is desirable.
• Experience with non‑human identity governance and modern authentication protocols is desirable.
• Relevant certifications such as Microsoft security/identity certifications, CISSP, CISM, CIAM, or CRISC are advantageous.

The role is open to candidates based in Dublin or with a 3‑day onsite expectation.

Must be in Ireland holding Stamp 4, EU, Irish Passport with full working rights – No Sponsorship supported.