Tech Lead (Cyber Security IAM)
Description
At Aristocrat, we are dedicated to crafting innovative solutions in gaming. We are growing our team with an outstanding opportunity. We seek a hardworking and experienced Tech Lead (Cyber Security IAM) to join our dynamic IT team. This role ensures the security and integrity of our systems. It is crucial to our mission of bringing happiness to life by means of play. Join us and contribute your expertise in a collaborative environment where you will make a significant impact!
Responsibilities
- Architect and manage Single Sign-On (SSO) and Multi-Factor Authentication (MFA) integrations with tools like Okta, Ping Identity, and Microsoft Entra ID.
- Build and maintain the Joiner, Mover, Leaver lifecycle processes, automating provisioning and de-provisioning workflows for seamless Day 1 access and immediate revocation upon termination.
- Manage enterprise PAM solutions such as CyberArk, BeyondTrust, and Thycotic to secure high-value credentials.
- Maintain the integrity and hygiene of Active Directory (AD) and Entra ID (Azure AD), supervising Group Policy Objects (GPO) and applying Conditional Access Policies according to risk.
- Implement passwordless authentication solutions (FIDO2, Windows Hello for Business) and drive the migration of legacy applications to modern authentication standards (SAML, OIDC, OAuth).
- Conduct periodic access reviews and recertifications to meet compliance audits (SOX, ISO 27001).
- Implement and manage Identity Governance & Administration (IGA) platforms like SailPoint, Saviynt, Oracle, and Azure Identity Governance.
- Maintain Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) frameworks, ensuring a least-privilege access build.
- Monitor IAM logs to detect anomalous behavior and blocking issues, configuring and investigating identity-based attacks.
- Implement identity controls across Azure, AWS, and GCP, including IAM roles, policies, least-privilege access, conditional access, identity protection, workload identities/service principals, and key rotation.
Requirements
- 5+ years of experience in Cybersecurity specializing in IAM/PAM.
- Extensive expertise in Active Directory (On-prem) and Azure AD/Entra ID.
- Hands-on experience with IGA tools (e.g., SailPoint, Saviynt) and PAM tools (e.g., CyberArk).
- Deep understanding of federation protocols: SAML 2.0, OAuth 2.0, OIDC, SCIM.
- Strong proficiency in PowerShell or Python for automating IAM tasks and querying APIs.
- Ability to develop "Least Privilege" models and Role-Based Access Control (RBAC) frameworks.
- Certifications such as CEH, CISSP, CIAM, or vendor-specific certifications (e.g., CyberArk Defender/Sentry, Okta Certified Consultant).
- Experience managing machine identities and secrets in DevOps pipelines.
- Experience consolidating AD forests or migrating from on-prem to cloud identity.
Benefits
- World Leader in Gaming Entertainment
- Robust benefits package
- Global career opportunities
