As a Security Engineer | Identity, you will provide design, review, and analysis expertise across the client's privileged access management, identity and access management, multi-factor authentication, and PKI controls.

This is a design, review and advisory role.

You will work within Expleo's offshore consultancy team, outside the client's operational environment.

You will not have access to the client's operational systems or data and will not make live changes.

Operational changes are implemented by UK-based, security-cleared personnel; your work provides the designs, analysis, recommendations and assurance that those changes depend on.

You will work from information released to the team through Expleo's controlled UK service boundary.

Responsibilities :

- Provide subject matter expertise on privileged access management (PAM) architecture, configuration and policy, and recommend improvements.

- Assess PAM change requests for security risk and prepare change designs for implementation by UK-based personnel.

- Design access review approaches and analyse access review, joiner-mover-leaver and MFA allocation reporting released through the UK service boundary.

- Report on the status of PKI, keys and certificates; track expiries and produce renewal plans.

- Support the Senior Security Architect in evaluating PKI and secrets management tooling.

- Maintain PAM, identity and PKI diagrams, policy and configuration documentation.

- Define audit logging requirements for remote access, PAM and PKI in line with the logging design.

- Track PAM platform vendor support status and produce upgrade recommendations.

- Support the growth of Expleo's Cybersecurity Practice through knowledge sharing and technical contribution.

Qualifications :

- Degree in computer science, cybersecurity or a related discipline, or equivalent professional experience.

- Vendor PAM certification, e.g. CyberArk Defender or Sentry, BeyondTrust or Delinea (at least one required).

- Microsoft SC-300, CompTIA Security+ or ISC2 SSCP would be advantageous.

Essential Skills :

- PAM platform expertise (e.g. CyberArk, BeyondTrust, Delinea).

- Active Directory, Entra ID, conditional access and MFA technologies.

- Enterprise PKI and certificate lifecycle management (e.g. Microsoft AD CS, Venafi, Keyfactor).

- Identity governance and access certification concepts.

- PowerShell scripting, reporting and data analysis.

- ITIL change processes and clear technical documentation.

Desired Skills :

- Identity governance platforms (e.g. SailPoint, Saviynt).

- HSM concepts and secrets management tooling.

- Energy, utilities or other CNI sector experience.

Experience :

- 4 - 7 years in identity and access management or PAM engineering.

- Experience with PAM policy design, access reviews and certificate lifecycle management in enterprise environments.

What Do I Need Before I Apply :

- Have the right to work in India.

- Be based in, or willing to relocate to, Chennai.

- Be willing to complete Expleo enhanced pre-employment background screening (equivalent in standard to the UK Baseline Personnel Security Standard) and any additional vetting the client requires.

- Be able to work hours that overlap with the UK business day, with occasional out-of-hours advisory support during major incidents.

- Have excellent written and spoken English, suitable for engagement with senior UK stakeholders.

- Be comfortable working within a strict security boundary, with no access to the client's operational systems or data.

Benefits :

- Collaborative working environment : we stand shoulder to shoulder with our clients and our peers through good times and challenges.

- We empower all passionate, technology-loving professionals to expand their skills and take part in inspiring projects.

- Expleo Academy enables you to acquire and develop the right skills by delivering a suite of accredited training courses.

- Competitive local company benefits (India HR to confirm the benefits package).

- Always working as one team, our people are not afraid to think big and challenge the status quo.

- We are an equal opportunities employer and welcome applications from all suitably qualified persons regardless of their race, sex, disability, religion/belief, sexual orientation or age.

- If you are an identity security engineer who enjoys designing strong, well-governed access controls, we encourage you to apply today.