Senior Security Infrastructure Engineer
Sezzle
Design and establish a standardized access audit framework, including methodology, cadence, evidence collection, and reporting templates;
Define risk-based audit scope and sampling methodology appropriate for a large, complex, multi-system landscape;
Run regular (scheduled/periodic) and ad-hoc access audits across the environment, including privileged and administrative accounts;
Audit GCP IAM, LDAP, and PAM tools for stale accounts, excessive permissions, orphaned access, and misconfigurations;
Prepare clear, audit-ready reports and evidence packages suitable for internal review and external auditors;
Track remediation actions with system and application owners through to closure, escalating overdue items as needed;
Maintain audit documentation and process runbooks to ensure repeatability and continuity;
Continuously refine the audit methodology based on findings, tooling changes, and evolving compliance requirements.
2+ years in the position of Access Engineer/IAM Auditor or similar;
Experience designing and building an access audit process from scratch;
Hands-on experience with GCP/LDAP (roles, permissions, service accounts, org policies);
Hands-on experience with Privileged Access Management (PAM) tools and privileged/admin account audits;
Experience working across IGA tools (e.g., One Identity, Okta, Entra ID, Keycloak);
Familiarity with compliance frameworks such as ISO 27001, SOC 2, and NIST;
Strong team-player orientation with the ability to maintain a positive and constructive atmosphere within the team;
High reliability and consistency in delivering work to a high standard of accuracy and attention to detail;
A growth mindset - comfortable acknowledging mistakes, learning from them, and implementing corrective measures to prevent recurrence.
GROWE TOGETHER: Our team is our main asset. We work together and support each other to achieve our common goals;
DRIVE RESULT OVER PROCESS: We set ambitious, clear, measurable goals in line with our strategy and driving Growe to success;
BE READY FOR CHANGE: We see challenges as opportunities to grow and evolve. We adapt today to win tomorrow.
Originally posted on Himalayas
Sezzle
Soteria
Look4IT
Malleum
Softtek
Galaxy
Müller`s Solutions
Motive
General Dynamics Mission Systems
Growe
CybelAngel
Ping Identity
spiderSilk
Level Access
Doordash
Blue Yonder
PartsBase
Velera
Ford
OutSystems
Multiview Financial Software
Sezzle
Level Access
P1 Security
Chainguard
Imagine Pediatrics
Aras Corporation
Keyfactor, Inc.
PingWind
Centene Corporation
Design and establish a standardized access audit framework, including methodology, cadence, evidence collection, and reporting templates;
Define risk-based audit scope and sampling methodology appropriate for a large, complex, multi-system landscape;
Run regular (scheduled/periodic) and ad-hoc access audits across the environment, including privileged and administrative accounts;
Audit GCP IAM, LDAP, and PAM tools for stale accounts, excessive permissions, orphaned access, and misconfigurations;
Prepare clear, audit-ready reports and evidence packages suitable for internal review and external auditors;
Track remediation actions with system and application owners through to closure, escalating overdue items as needed;
Maintain audit documentation and process runbooks to ensure repeatability and continuity;
Continuously refine the audit methodology based on findings, tooling changes, and evolving compliance requirements.
2+ years in the position of Access Engineer/IAM Auditor or similar;
Experience designing and building an access audit process from scratch;
Hands-on experience with GCP/LDAP (roles, permissions, service accounts, org policies);
Hands-on experience with Privileged Access Management (PAM) tools and privileged/admin account audits;
Experience working across IGA tools (e.g., One Identity, Okta, Entra ID, Keycloak);
Familiarity with compliance frameworks such as ISO 27001, SOC 2, and NIST;
Strong team-player orientation with the ability to maintain a positive and constructive atmosphere within the team;
High reliability and consistency in delivering work to a high standard of accuracy and attention to detail;
A growth mindset - comfortable acknowledging mistakes, learning from them, and implementing corrective measures to prevent recurrence.
GROWE TOGETHER: Our team is our main asset. We work together and support each other to achieve our common goals;
DRIVE RESULT OVER PROCESS: We set ambitious, clear, measurable goals in line with our strategy and driving Growe to success;
BE READY FOR CHANGE: We see challenges as opportunities to grow and evolve. We adapt today to win tomorrow.
Originally posted on Himalayas