Directory & Privileged Access Engineer

Job description

Who are we?

Sanlam Group Technology is responsible for the provision of a digitally enabled technology service as a group COE, drive business and transformation and provide group-wide digital and data architecture.

We operate the various technology platforms and shared services, ensure Cyber and Information Security resilience, and act as technology governance and riskorchestrator for technology across Sanlam.

What will you do?

The IAM Engineer will provide subject matter expertise and execution of the Organization's Directory & Privileged Access and Identity Management landscape, including SSO and MFA.

Functions will include delivering and operating solutions towards authentication and access management as a service for both cloud and on-premises solutions.

What will make you successful in this role?

• Responsible for the implementation, configuration, administration, maintenance and operation of Directory and Privileged Access in accordance with the business's reliability and capacity requirements.
  
  
• Collaborate with stakeholders, including business leaders, project managers, developers and architects to understand requirements and constraints.
  
  
• Act as subject matter expert on Directory and Privileged Access -related matters such as user role-based access control (RBAC), privilege escalation, Privileged Access Management (PAM), LDAP etc.
  
  
• Active engagement with technology partners to deliver an integrated solution across platforms.
  
  
• Collaborate with Security Architecture as is applicable.
  
  
• Collaborate with IAM (Identity and Access Management) and Role Based Access platforms and services teams.
  
  
• Design and implement procedures and best practices in Directory and Privileged Access as applicable for cloud and on-premises solutions.
  
  
• Stay up to date with the latest industry trends, technology, emerging threats, and best practices in Directory
• Services, Privileged Access, Cloud Identity, RBAC and security.
  
  
• Ensure appropriate standards, patterns, best practices and operational maturity models are in place and monitored.
  
  
• Provide guidance to internal and external stakeholders.
  
  
• Research and implement new technologies in the Directory and Privileged Access technology space.
  
  
• Responsible for day-to-day operations and onboarding of accounts in the Directory and Privileged Access space.
  
  
• Receive and process requests for account provisioning, modification and deprovisioning.
  
  
• Participate in Directory and Logical Access Platforms and Services Product Development Lifecycle.
  
  

Qualification

• Matric
• A relevant IT qualification
• Cloud certification or technologies prefarable.
  
  
• AWS Certified Solutions Architect or Microsoft Azure Solutions Architect Expert preferable.
  
  

Experience

• Minimum 4 years of experience in technology roles.
  
  
• Proven experience in designing and implementing Directory & Privileged Access solutions for large enterprises.
  
  
• Proven experience delivering and managing Active Directory, Azure AD/Microsoft Entra ID, Azure AD Domain Service/Microsoft Entra Domain Services, Azure AD Connect/Microsoft Entra Connect Sync, AWS Managed Microsoft AD and similar technologies.
  
  
• Real-world experience in IAM technologies or Directory & Privileged Access
• Working experience with Windows, scripting (e.g. Powershell), and Linux Scripting.
  
  
• Experience working in a hybrid- and multi-cloud environment (AWS preferred) and cloud technologies (AWS & Azure technologies preferred).
  
  
• Hands on experience of deploying and supporting IAM Federation capabilities like SSO, SAML, OAuth, OpendID and SCIM.
  
  
• Experience in cloud security concepts.
  
  
• Experience working in an Agile environment.
  
  
• Proven experience delivering long-term, repeatable IaC solutions into an overall CI/CD process and Terraform.
  
  
• Scripting skills in at least one interpreted language (Bash/PowerShell/Python)

• Expertise with PAM solutions (BeyondTrust preferred; StrongDM, Hashicorp Boundary in addition would be ideal)
• Working in a DevOps environment (including proven CI/CD experience with technologies such as GitLab or Github, Nexus and others).
  
  
• Understanding of Security Architecture concepts including encryption, authentication, database security, Identity
• Providers, Enterprise single sign-on (SSO), Federated SSO, multi-factor authentication, API security.
  
  
• Understanding of Cloud technologies and best practices, Networking in Public and Hybrid Cloud environments, Network protocols, network architecture and security.
  
  

Knowledge and Skills

Operating system software and hardware and utility software Software installations and upgrades Business requirements Security management and data recovery Change control

Personal Attributes

Organisational savvy - Contributing through others Manages complexity - Contributing through others Plans and aligns - Contributing through others Optimises work processes - Contributing through others

Build a successful career with us

We’re all about building strong, lasting relationships with our employees.

We know that you have hopes for your future – your career, your personal development and of achieving great things.

We pride ourselves in helping our employees to realise their worth.

Through its five business clusters – Sanlam Fintech, Sanlam Life and Savings, Sanlam Investment Group, Sanlam Allianz, Santam, as well as MiWay and the Group Office – the group provides many opportunities for growth and development.

Core Competencies

Cultivates innovation - Contributing through others Customer focus - Contributing through others Drives results - Contributing through others Collaborates - Contributing through others Being resilient - Contributing through others

Turnaround time

The shortlisting process will only start once the application due date has been reached.

The time taken to complete this process will depend on how far you progress and the availability of managers.

Our commitment to transformation

The Sanlam Group is committed to achieving transformation and embraces diversity.

This commitment is what drives us to achieve a diverse, inclusive and equitable workplace as we believe that these are key components to ensuring a thriving and sustainable business in South Africa.

The Group's Employment Equity plan and targets will be considered as part of the selection process.

Required Skill Profession

Software Architecture & Engineering