[Hiring] Security Engineer II - Identity and Access Security @Unisys

Role Description

We are looking for an experienced Senior IAM Engineer to join our Identity & Access Security team. In this role, you will design, implement, and support enterprise Identity and Access Management (IAM), Privileged Access Management (PAM), Identity Governance (IGA), and Machine Identity Security solutions. You will work closely with security, infrastructure, and application teams to ensure secure and compliant access across the organization.

• Design, implement, and support IAM, IGA, and PAM solutions using platforms such as Microsoft Entra ID, Microsoft Identity Manager (MIM), and Delinea PAM.
• Manage identity lifecycle processes including onboarding, offboarding, access provisioning, role changes, and access reviews.
• Administer privileged access controls and support Zero Trust security initiatives.
• Support machine identity security, certificate lifecycle management, PKI integrations, and service account governance.
• Develop automation solutions using PowerShell, Python, or similar scripting technologies.
• Troubleshoot complex identity, authentication, and access-related issues while ensuring compliance with security standards and best practices.

Qualifications

• 8+ years of hands-on experience in Identity & Access Management (IAM) engineering and administration.
• Strong experience with IAM, Identity Governance (IGA), and Privileged Access Management (PAM) solutions.
• Hands-on experience with Microsoft Entra ID and Microsoft Identity Manager (MIM), or similar platforms such as SailPoint, Saviynt, or OneIdentity.
• Experience with identity lifecycle management, access provisioning, deprovisioning, role changes, and access reviews.
• Knowledge of Privileged Identity Management (PIM), RBAC, least-privilege principles, and Zero Trust architecture.
• Strong understanding of PKI, certificate lifecycle management, and machine identity security.
• Experience with service account governance, application identities, and secrets management.
• Scripting and automation skills using PowerShell, Python, or similar technologies.
• Strong troubleshooting, analytical, and communication skills.

Requirements

• Experience with PAM solutions such as CyberArk, BeyondTrust, or Delinea.
• Experience with enterprise PKI and certificate management platforms such as Venafi, Keyfactor, or DigiCert Trust Lifecycle Manager.
• Familiarity with machine identity governance, workload identities, and advanced secrets management solutions.
• Understanding of AI Security, AI governance frameworks, non-human identities, and AI agent access controls.
• Experience integrating IAM/PAM solutions with SIEM or SOC platforms.
• Knowledge of programming languages such as Python, Java, or C#.
• Relevant certifications such as Microsoft SC-300, CISSP, Security+, Certified Identity Management Professional (CIMP), or PAM/PKI-related certifications.

Benefits

• Full-remote working conditions.
• Monthly gross 44,200 HUF cafeteria, regardless of weekly working hours.
• Home office allowance.
• Private Health Insurance (Generali Premium Package) for all Unisys associates after 6 months.
• A supportive, collaborative team with plenty of learning and development opportunities.