Identity & PAM Security Engineer

📋 Description

• Manage privileged access controls, including PIM, JIT access, and approvals.
• Define admin access processes for high-risk roles, privileged sessions, break-glass.
• Lead access reviews, track remediation, ensure least-privilege rights.
• Manage lifecycle of service and machine accounts: ownership, rotation, monitoring.
• Configure and monitor conditional access policies, MFA, and identity risk.
• Design automation for identity workflows, approvals, and reporting.

🎯 Requirements

• 4+ years of IAM, Cloud Security, Infrastructure Security, or Security Eng.
• Hands-on with Microsoft Entra ID and Google Cloud IAM.
• Strong knowledge of least privilege, RBAC, MFA, conditional access, PAM.
• Experience managing service accounts, machine identities, secrets, API keys, rotation.
• Automation using workflow platforms, APIs, PowerShell, Python.
• Strong analytical and problem-solving skills with a security-first mindset.

🎁 Benefits

• Sporty is a remote-first company pursuing sustainability.
• 28 days paid annual leave.
• Core hours 10am-3pm in your local TZ; flexibility outside.
• Top-of-the-line equipment.
• Annual company retreats to connect with colleagues worldwide.