IS Global Infra Identity and Access Management Engineer

This Position reports to:

Are you passionate about securing digital identities and enabling seamless access across global platforms? Join our Robotics IS team and play a pivotal role in shaping the future of identity infrastructure for a hybrid workforce spanning 50 countries and 150 sites. As an Identity and Access Management Engineer, you will be responsible for designing, implementing, and maintaining secure, scalable, and compliant identity solutions that support our global operations.

Your responsibilities:

This role offers a unique opportunity to work at the intersection of identity, security, and infrastructure, supporting critical cloud services and digital products across our Robotics business. You will engage with line managers, application managers, project leaders, and business stakeholders to deliver secure and efficient identity solutions.

• Design and maintain identity lifecycle workflows, including joiner, mover, and leaver processes, ensuring seamless onboarding, transfers, and offboarding.
• Implement and manage authentication and federation protocols, including SSO, MFA, SAML, OAuth, and OpenID, to secure enterprise access.
• Administer on-premises Active Directory and Azure AD environments, managing user accounts, groups, and permissions effectively.
• Manage enterprise PKI and privileged access solutions, handling certificate issuance, renewal, revocation, and ensuring auditability across systems.
• Integrate IAM with HR systems, ITSM platforms, and cloud services, enforce RBAC/ABAC models, maintain logs and reports, and support governance, audits, and compliance initiatives in collaboration with InfoSec.

Your background:

• 7-10 years of experience in enterprise networking, ideally in global or multi-site environments.
• Expertise in Cisco networking technologies, SD-WAN, MPLS, VPN, and cloud connectivity.
• Hands-on experience with network monitoring and performance tools, such as SolarWinds and PRTG.
• Familiarity with cloud networking platforms like Azure or ZScaler.
• Knowledge of network automation and scripting (e.g., Python, Ansible) is a plus.
• Strong understanding of network security principles, including ZeroTrust and secure remote access.
• Experience in incident response, root cause analysis, vendor management, and ITIL processes.