Job description

Job :

SecOps IGA Engineer – KPMG France, Information Systems Department

As part of the implementation of access management and operations, and the maintenance in operational condition and security of the SailPoint IdentityNow solution, and more broadly within the framework of compliance with KPMG's local and global security policies, the SecOps IGA Engineer will be involved in the following areas:

Design, develop, test, and integrate the IGA SailPoint IdentityNow solution with business applications, directories, and the firm's systems

Support business users in the adoption and use of the solution

Provide L3 support for the tool

Implement workflows, connectors, policies, and reports based on business requirements.

Write documentation related to the solution's integration, maintenance, and support

Develop skills and provide support for the maintenance of the CyberArk PAM solution

INTERACTIONS:

CIO

o SecOps Teams

o CIO Architecture and Production Teams,

o CIO Business Relation Managers,

o Information Security Officer,

Identity Solution Users.

Technical Skills:

Expertise (required) in SailPoint IdentityNow

Privileged Account Management: CyberArk

Directory Technology: AD, LDAP

Authentication Solutions: SSO, Identity Federation, MFA

Knowledge of Microsoft environments (Azure and Windows), Linux

Proficiency in PowerShell and Java BeanShell Scripting

Have a good general understanding of IT Operations (constraints, complexities...)

Interpersonal Skills:

Client Focus,

Rigor and Organization,

Teamwork,

Adaptability and Flexibility,

Analysis and Synthesis,

Oral and Written Communication

Languages: Fluent English, essential for communicating with colleagues around the world.

PROFILE

Education Level and Experience Required:

Master's Degree (Bac + 5): Engineering school or Master's degree

Experience: Minimum 3 years

Previous confirmed experience with Sailpoint's IdentityNow solution, a certification would be a plus. Good knowledge of various IAM solutions: Active Directory, Entra ID (Azure AD), CyberArk, or equivalent.

Experience in developing and configuring the most common connectors: Active Directory (AD), LDAP, JDBC, Entra ID (Azure AD), SCIM, Web Services.