SaaS Security Data Analyst

Exp : 5 - 10 Years of exp

Immediate joinee

About the Role :

SaaS Security Data Analyst to strengthen how privileged and identity - based access is managed across its Linux and cloud infrastructure. You will help move teams away from shared and root credentials to secure, auditable, identity - based access, and you will build the automation and documentation that keeps it running. This is a remote role that works closely with US stakeholders.

Key Responsibilities :

- Implement and manage privileged access using Okta Privileged Access, CyberArk or BeyondTrust.

- Design and operate SSH access control, including certificate - based SSH, key management, and bastion and jump hosts.

- Migrate systems and teams from shared or root credentials to individual, identity - based access.

- Administer and harden Linux systems, including sudo policies, user and group permissions, and PAM modules.

- Apply AuthN/AuthZ principles (SSO, SAML, OIDC, RBAC, least privilege) across access workflows.

- Onboard EC2 instances and Azure VMs into the access management platform and manage related IAM.

- Build scripts and automation in Python, Go, Java or Node.js, using REST APIs and secure API authentication.

- Document onboarding procedures and operational standards clearly for engineering and security teams.

- Work with US stakeholders to gather requirements, report progress and resolve access issues.

Must-Have Skills :

- Privileged access management : Okta Privileged Access, or CyberArk / BeyondTrust

- SSH access control : certificate - based SSH, key management, bastion and jump hosts

- Linux administration : sudo, user and group permissions, PAM modules, hardening

- Identity - based access : experience migrating from shared or root credentials

- AuthN/AuthZ concepts : SSO, SAML, OIDC, RBAC, least privilege

- Scripting in Python, Go, Java or Node.js, with REST API and API authentication experience

- AWS and/or Azure : EC2 or VM onboarding, IAM

Strong Plus :

- Okta admin or integration experience, SCIM, and SaaS integrations

- Terraform, Ansible or other infrastructure - as - code

- Red - team or offensive - security exposure: reading pentest findings, privilege escalation, re - testing and closing findings

- Network segmentation and secure design

- Vulnerability management tools such as Nessus or Qualys

- Certifications : OSCP, OSWE, Security+, CISSP Associate, AWS Security Specialty, AZ - 500

Soft Skills :

- Clear written and verbal communication with US stakeholders

- Strong documentation habits for onboarding procedures and operational standards

- Comfortable working the 4:00 PM IST start with overlap into the US Pacific morning