IAM Senior Engineer📣 Job Ad

About the Role

Inbox Business Technologies is seeking an IAM Senior Engineer to join its team in Riyadh, Saudi Arabia. This full-time position is central to designing, implementing, and maintaining enterprise Identity and Access Management (IAM) solutions, ensuring secure and seamless access to systems and data across the organization.

Role Overview

The IAM Senior Engineer leads technical initiatives, automates identity lifecycle processes, integrates applications, and enforces security policies. This role involves close collaboration with security, infrastructure, and application teams to align IAM strategies with business needs and zero-trust security principles.

Core Responsibilities

• Design and implement comprehensive IAM architectures, including identity lifecycle management, authentication and authorization models, access governance (RBAC/ABAC), and Privileged Access Management (PAM).
• Implement Zero-Trust aligned identity controls and develop system integrations utilizing APIs, SSO, federation (SAML, OAuth, OIDC), and SCIM provisioning.
• Automate joiner/mover/leaver (JML) workflows, build custom connectors and provisioning scripts using PowerShell and Windows Script, and optimize identity data flows between HR systems, directories, and applications.
• Manage enterprise identity directories such as Active Directory, Entra ID, and LDAP, while implementing MFA, passwordless authentication, and adaptive access policies.
• Troubleshoot authentication issues across various protocols, including Kerberos, LDAP, SAML, OAuth , and OIDC.
• Ensure adherence to access policies and regulatory requirements (*, ISO 27001, SOX, HIPAA, PCI), support access certifications/attestations, and conduct periodic access reviews and risk analysis.
• Administer PAM platforms (*, CyberArk, BeyondTrust, Delinea), implementing vaulting, credential rotation, session monitoring, and just-in-time access to reduce standing privileges and legacy admin accounts.
• Onboard applications for SSO and provisioning using SAML, OAuth, and SCIM, working with developers and product teams to implement secure, modern identity patterns.
• Investigate and resolve IAM-related security incidents, support the Security Operations Center (SOC) with identity-specific detection, alerts, and forensics, and perform root-cause analysis for identity access failures.

Technical Expertise and Platforms

• Proficiency in IAM architectures including identity lifecycle management, authentication/authorization models, RBAC/ABAC, and PAM.
• Experience with integration technologies such as APIs, SSO, federation (SAML, OAuth, OIDC), and SCIM provisioning.
• Hands-on scripting and automation skills using PowerShell and Windows Script.
• Expertise in managing enterprise identity directories including Active Directory, Entra ID, and LDAP.
• Familiarity with MFA, passwordless authentication, adaptive access policies, and troubleshooting various authentication protocols.
• Knowledge of regulatory compliance standards such as ISO 27001, SOX, HIPAA, and PCI.
• Experience with leading PAM platforms including CyberArk, BeyondTrust, and Delinea.

Required Experience and Qualifications

• 5-10 years of professional experience in Identity and Access Management.
• Eligibility to work in Saudi Arabia.

Location and Employment Type

This is a full-time position based in Riyadh, Saudi Arabia.