As an Associate Cybersecurity Engineer in the IAM Team, you will play a pivotal role in Visa s global Identity and Access Management (IAM) program a cornerstone of our cybersecurity strategy. You will focus on implementing, managing, and automating IAM solutions covering the entire identity lifecycle: from provisioning and authentication to privileged access and governance, with a strong emphasis on leveraging AI-driven automation.
This position is ideal for professionals passionate about IAM domains (Identity Governance & Administration, Privileged Access Management, Authentication & Authorization, and Access Reviews/Certifications) and hands-on experience with leading IAM technologies.
Essential Functions:
IAM Operations & Technology Management
-
Operate, administer, and optimize enterprise IAM solutions, including:
-
Identity Governance & Administration (IGA): SailPoint, ForgeRock, Microsoft Azure AD
-
Privileged Access Management (PAM): BeyondTrust, CyberArk, Password Safe, Enterprise Random Password Manager
-
Access Management & Federation: Okta, Azure AD, SAML, OIDC, OAuth
-
Directory Services: Active Directory, LDAP
-
Manage robust onboarding and lifecycle management of identities (workforce, privileged, application, and non-human identities) across on-premises and cloud environments.
-
Automate user provisioning, deprovisioning, and access certification processes using scripts, APIs, and AI-powered workflows.
IAM Governance, Risk & Compliance
-
Automate and validate IAM controls, evidence collection, and access reviews to ensure compliance with regulatory standards (GDPR, SOX, PCI-DSS, HIPAA).
-
Support audit activities by interpreting requests, compiling accurate access data, and driving remediation of IAM-related findings.
-
Monitor and enforce least privilege and Zero Trust access principles across all systems.
Privileged Access Security
-
Implement, manage, and maintain PAM solutions:
-
Secure vaulting of privileged credentials
-
Session management and recording
-
Automated password rotation and compliance reporting
-
Optimize and automate patching, vulnerability remediation, and compliance of PAM infrastructure.
Access Governance & Analytics
-
Develop and enhance AI/ML-driven analytics for access anomalies, role mining, and segregation of duties (SoD) analysis.
-
Integrate Gen AI and automation to detect, respond, and mitigate identity-related risks and threats.
Incident Response & Change Management
-
Triage and respond to IAM/PAM incidents (privilege misuse, access anomalies, identity compromise), ensuring rapid containment and recovery.
-
Implement change management for IAM platforms, ensuring operational continuity and security integrity.
Continuous Improvement & Collaboration
-
Drive continuous improvement by integrating best practices, automation, and innovative technologies into IAM workflows.
-
Collaborate with application owners, infrastructure, security, and compliance teams to deliver scalable, secure, and user-friendly IAM solutions.
-
Maintain documentation, runbooks, and knowledge base articles for operational excellence.
Basic Qualifications
Bachelor s degree OR 3+ years of relevant work experience.
Preferred Qualifications 2 or more years of work experience. 1-2 years of hands-on experience in IAM domains: governance, PAM, authentication, a