Senior Engineer

NielsenIQ (NIQ) is seeking a Senior Engineer to join its expanding Identity and Access Management (IAM) program in Chennai, Tamil Nadu. This role focuses on enhancing IAM capabilities by managing the complete lifecycle of the IAM product stack, with a special emphasis on Cloud IAM and Privileged Access Management (PAM) technologies and their associated processes.

Key responsibilities include research, analysis, design, automation, integration, and day-to-day administration of IAM solutions and workflows. The selected candidate will participate in an on-call rotation and provide engineering support.

Responsibilities:

• Design, implement, manage, and secure on-premises and cloud-based infrastructure, focusing on IAM and PAM (e.g., CyberArk) using DevOps tools such as GitHub, Jenkins, Terraform, and Kubernetes. Utilize coding languages like Python, Go, and PowerShell, preferably within cloud environments like Azure and AWS.
• Evaluate current IAM and PAM posture, recommend integration strategies aligned with organizational goals, conduct gap analysis, and automate/manage on-premises and cloud IAM processes.
• Collaborate with cross-functional teams to define access management requirements.
• Develop and implement secure coding practices to mitigate risks from hardcoded secrets.
• Provide technical expertise and support for incident response related to IAM tools (e.g., CyberArk, SailPoint, Active Directory) and cloud environments.
• Demonstrate a strong understanding of Microsoft Azure EntraID concepts, including MFA, SSO, Conditional Access, and on-premise Active Directory.
• Serve as a subject matter expert on IAM, PAM, cloud services, and security-related technology automation and integrations for both technical and non-technical audiences.
• Monitor and analyze key usage metrics to identify opportunities for continuous improvement.
• Partner with cybersecurity teams to ensure compliance with industry standards and regulations.
• Conduct regular audits and vulnerability assessments to identify secret management risks.
• Design and implement secure mechanisms for controlled secret sharing.
• Stay current with the latest security trends, threats, and best practices, proactively applying this knowledge to enhance the organization's security posture.
• Manage identities across highly available, hybrid, and multi-cloud environments.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 5 years of proven experience in cybersecurity, with a strong focus on IAM, PAM, cloud identities, and DevOps.
• Proficiency in IAM technologies such as CyberArk, SailPoint, Active Directory, and native cloud IAM platforms.
• Ability to integrate automated processes into CI/CD pipelines, with hands-on coding experience in PowerShell, Python, Go, or other scripting languages, and practical use of GitHub, Docker, and Kubernetes.
• Strong knowledge of developing DevOps workflows in cloud environments like Azure, AWS, and GCP.
• In-depth understanding of secure coding practices and identifying hardcoded secrets.
• Experience working in both Windows and Unix environments.
• Familiarity with the IAM cybersecurity landscape, including identity stores, authentication/authorization, and privileged access management methodologies.
• Knowledge of key management principles, such as rotation, expiration, and lifecycle management.
• Familiarity with cybersecurity best practices and industry standards.
• Proficiency in operating within multi-cloud, DevOps, and CI/CD environments.
• Strong verbal and written communication skills, with the ability to articulate technical details clearly and concisely.
• Ability to thrive in a dynamic and fast-paced work environment.
• Relevant certifications such as CISSP are a plus.
• Knowledge of Secrets Management solutions like HashiCorp Vault or CyberArk Conjur is beneficial.

Join our team to contribute to the security and integrity of our organization's secrets management infrastructure!

Additional Information:

• Flexible working environment
• Volunteer time off
• LinkedIn Learning
• Employee Assistance Program (EAP)