Access Engineer, IAM Auditor

This is a fully remote position, open to applicants in Poland.

📋 Description

• Develop and implement a standardized framework for access audits, encompassing methodology, frequency, evidence gathering, and reporting templates.

• Establish a risk-based audit scope and sampling methodology tailored for a large, intricate, multi-system environment.

• Conduct regular scheduled and ad-hoc access audits, focusing on privileged and administrative accounts.

• Perform audits on GCP IAM, LDAP, and PAM tools to identify stale accounts, excessive permissions, orphaned access, and misconfigurations.

• Generate audit-ready reports and evidence packages for both internal review and external auditors.

• Monitor remediation efforts with system and application owners until resolution, escalating overdue issues as necessary.

• Sustain audit documentation and process runbooks.

• Continuously enhance the audit methodology based on findings, changes in tooling, and evolving compliance requirements.

⛳️ Requirements

• A minimum of 2 years of experience as an Access Engineer/IAM Auditor or in a similar role.

• Proven experience in creating and establishing an access audit process from the ground up.

• Practical experience with GCP/LDAP, including roles, permissions, service accounts, and organizational policies.

• Hands-on experience with Privileged Access Management (PAM) tools and audits of privileged/admin accounts.

• Experience collaborating with IGA tools such as One Identity, Okta, Entra ID, and Keycloak.

• Knowledge of compliance frameworks including ISO 27001, SOC 2, and NIST.

• Capability to hold system and application owners accountable for remediation deadlines without formal authority over their teams.

🏝️ Benefits

• Competitive salary with performance-based incentives.

• Comprehensive health and wellness benefits.

• Opportunities for professional development and certifications.

• Flexible working arrangements to promote work-life balance.