Cyber Data & Tech Risk Managed Services JD – IAM POD (L3/ L4) – Associate A career at PwC Cyber Data & Tech Risk Managed Services offers you the opportunity to deliver strategic cybersecurity solutions that safeguard our clients’ critical business and data assets. As an engineer, the IAM Engineer is responsible for the end-to-end delivery, engineering, and operational support of Identity and Access Management (IAM) capabilities across enterprise client environments. This role focuses on Identity Governance & Administration (IGA), Privileged Access Management (PAM), and Access Management (AM), driving secure identity lifecycle processes, automation, and continuous improvement while ensuring governance, compliance, and audit readiness.

You will collaborate closely with clients, internal stakeholders, and global experts to drive cyber resilience, regulatory compliance, and innovation. You will provide hands-on technical delivery, operational excellence, and continuous improvement across cyber managed services programs.

• Share and collaborate effectively with others, creating a positive team spirit.
• Identify and make suggestions for improvements when problems and/or opportunities arise.
• Validate data and analysis for accuracy and relevance.
• Follow risk management and compliance procedures.
• Keep up to date with developments in my area of specialty
• Communicate confidently in a clear, concise and articulate manner - verbally and in written form.
• Seek opportunities to learn about the wider economy alongside the business models/corporate governance and/or regulatory environment of our clients
• Uphold the firm's code of ethics and business conduct

Basic Qualifications

Degree Required: Bachelors or masters

Minimum Years of Experience: Over 2 to 4 years of hands-on IAM implementation, and operations support

Preferred Knowledge/Skills: Relevant experience in end-to-end support of IAM services and certifications like CISSP, CISM, CISA, GIAC (GCIH, GSEC, GCIA), CCSP, or equivalent is desirable.

Certifications specific to IAM are an advantage.

• IGA (SailPoint IIQ) - SailPoint Certified IdentityIQ Engineer
• IGA (SailPoint ISC) - SailPoint Certified Identity Security Engineer (Cloud)
• IGA (Saviynt) - Saviynt Certified IGA Professional (SCIP)
• PAM(CyberArk) - Cyberark CDE
• PAM (Delinea) - Delinea Secret Server
• AM (Okta) - Okta Certified Professional
• AM (Ping)- Ping Federate Professional
• AM (Ping) - Ping Directory Professional
• AM (Ping) - Ping Identity Professional

Demonstrates knowledge and/or a proven record of success in one or more of the following areas:

Identity Governance and Administration:

• Configuring, administering, and supporting Identity Governance and Administration (IGA) tools such as SailPoint ISC/IIQ, Saviynt, or equivalent platforms.
• Implementing and optimizing access request management, approval of workflows, and automated provisioning/de-provisioning processes to enhance efficiency and governance adherence.
• Applying user lifecycle management best practices including role-based access control (RBAC), segregation of duties (SoD), and least privilege principles aligned to client policy and regulatory requirements.
• Managing identity workflows, role and entitlement models, and access approval processes tailored to client-specific business needs and compliance requirements.
• Performing periodic access reviews/certifications, supporting remediation activities, and maintaining audit-ready evidence for IAM controls and processes.
• Having experience in integrating applications with IGA solutions.

Privileged Access Management (PAM)

• Administering Privileged Access Management (PAM) solutions including CyberArk, Delinea, ensuring secure privileged account onboarding, credential rotation, session management, and policy enforcement.
• Strong knowledge of CyberArk solutions, including PAM, PAS, Cloud, and other related modules (PTA, EPM, Alero, etc).
• Experience in Secrets Server administration and policy management.
• Experience in the upgrade of the CyberArk or Delinea PAM components.
• Provide overall direction and oversight into the PAM functions across the organization, including Password Vaulting of elevated user and application service accounts.
• Coordination with infrastructure, security, and application teams for privileged access controls
• Well versed with automation scripts in Rest-API.
• Knowledge on customization of CyberArk Platforms, Connectors/Plugins (with AutoIT/Shell Scripting) and good knowledge on auto-detection configuration and usage of Discovery Scanning tools.

Access