Senior Engineer

NielsenIQ (NIQ) is seeking a Senior Engineer to join our expanding Identity and Access Management (IAM) program in Pune, Maharashtra, India. This role focuses on enhancing our IAM capabilities, with a particular emphasis on Cloud IAM and Privileged Access Management (PAM) technologies and processes.

The Senior Engineer will manage the entire lifecycle of the IAM product stack, encompassing research, analysis, design, automation, integration, and daily administration of IAM solutions and workflows. This position requires participation in an on-call rotation and provision of engineering support.

Responsibilities

• Design, implement, manage, and secure on-premises and cloud-based infrastructure, specializing in IAM and PAM (e.g., CyberArk). Utilize DevOps tools like GitHub, Jenkins, and Terraform, and containerization technologies such as Kubernetes. Develop solutions using Python, Go, and PowerShell, preferably within cloud environments like Azure and AWS.
• Assess current IAM and PAM postures, recommend integration strategies aligned with organizational goals, and conduct gap analyses. Automate and manage on-premises and cloud identity and access management processes.
• Collaborate with cross-functional teams to gather and address access management requirements.
• Develop and enforce secure coding practices to prevent risks associated with hardcoded secrets.
• Provide expert technical support for incident response related to IAM tools such as CyberArk, SailPoint, Active Directory, and cloud platforms.
• Demonstrate a strong understanding of Microsoft Azure Entra ID concepts, including MFA, SSO, and Conditional Access, as well as on-premises Active Directory.
• Serve as a subject matter expert on IAM, PAM, cloud services, automation, and security-related technology integrations for both technical and non-technical audiences.
• Monitor and analyze key usage metrics to drive continuous improvement.
• Partner with cybersecurity teams to ensure adherence to industry standards and regulations.
• Conduct regular audits and vulnerability assessments to identify and mitigate secret management risks.
• Design and implement secure mechanisms for controlled secret sharing.
• Stay current with emerging security trends, threats, and best practices to proactively enhance the organization's security posture.
• Manage identities across highly available, hybrid, and multi-cloud environments.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• A minimum of 5 years of demonstrated experience in cybersecurity, with a specific focus on IAM, PAM, cloud identities, and DevOps.
• Proficiency in identity and access management technologies including CyberArk, SailPoint, Active Directory, and native cloud IAM platforms.
• Experience integrating automated processes into CI/CD pipelines, with hands-on coding skills in PowerShell, Python, Go, or other scripting languages, and familiarity with GitHub, Docker, and Kubernetes.
• Strong knowledge of developing DevOps workflows in cloud environments such as Azure, AWS, and GCP.
• Solid understanding of secure coding practices and identifying hardcoded secrets.
• Experience working in both Windows and Unix environments.
• A comprehensive understanding of the IAM cybersecurity landscape, including identity stores, authentication/authorization mechanisms, and privileged access management methodologies.
• Knowledge of key management principles, such as rotation, expiration, and lifecycle management.
• Familiarity with cybersecurity best practices and industry standards.
• Proficiency in operating within multi-cloud, DevOps, and CI/CD environments.
• Excellent verbal and written communication skills, with the ability to articulate technical details clearly and concisely.
• Ability to thrive in a dynamic and fast-paced work environment.
• Relevant certifications such as Certified Information Systems Security Professional (CISSP) are advantageous.
• Familiarity with secrets management solutions like HashiCorp Vault or CyberArk Conjur is a plus.

Join our team to contribute to the security and integrity of our organization's secrets management infrastructure!