Information Security Operations Engineer

Key Responsibilities

• Identity & Access Management (IAM) User Lifecycle Management, maintaining roles(RBAC), entitlements, and policy violations in SailPoint IIQ, Okta (SSO, MFA, SCIM), and Keeper. Troubleshooting authentication/authorization failures and managing quarterly access certifications.
• Secrets & Key Management Operating and tuning HashiCorp Vault, provision accounts, manage PKI/TTL policies, champion best practices.
• Secure Endpoint Management - Operating and Managing EDR / NDR to ensure the tools are configured as per industry best practices
• Secure Network Access Administering Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) policies, SSL-inspection exceptions, and environmental health.
• Ticket & Workflow Governance Monitoring inbound ticket queues, review access and change requests, and approve or decline workflows in line with internal security policies.
• Third-Party Risk Coordination Facilitating vendor-led third-party risk assessments: act as primary liaison between the external assessment partner and internal system owners, gather evidence, track remediation items, and ensure assessments are completed on schedule.
• Client-Facing Communication Owning ticket queues, status calls, and post-mortems; ensure SLAs are met and stakeholders remain informed.

Required Qualifications

• 3+ years in security operations, IT ops, or IAM engineering.
• Hands-on admin experience with at least three of the following: SailPoint IIQ, Okta, HashiCorp Vault, Zscaler, Keeper, Duo, AWS IAM, Azure AD.
• Working knowledge of authentication protocols (SAML, OAuth 2.0/OIDC, Kerberos, LDAP) and network fundamentals (TCP/IP, TLS, DNS).
• Familiar with ITIL-based incident, change, and problem-management processes.
• Excellent written and verbal communication skills; able to run client calls and produce clear after-action reports.

Preferred / Nice-to-Have

• SailPoint IdentityIQ or Okta Certified Professional/Administrator.
• Experience with zero-trust architectures or ZTNA products (Zscaler, Netskope, etc.).
• Exposure to secrets-as-a-service and dynamic secrets in HashiCorp Vault.
• Cloud-security certifications (AWS SAA/Security Specialty, AZ-500, or equivalent).
• Familiarity with GRC tooling (ServiceNow IRM, Archer) and evidence gathering for third party questionnaires and audits (SOC 2, ISO 27001).
• Familiarity in scripting/automation (PowerShell, Python, or Bash) and using REST APIs for integration or remediation.
• Core Competencies
• Customer Obsession: Close the loop with customers and internal partners.
• Drive to Learn & Share : Learn new technologies and contribute to overall growth of the team Operational Rigor: Value checklists, metrics, and continuous improvement.
• Bias for Automation: If you do it twice, script it.