Identity & Access Management (IAM/PAM) Specialist

About the role

CCDS is looking for an Identity & Access Management (IAM/PAM) Specialist to work on-site in Riyadh, Saudi Arabia. This is a project-based engagement delivering managed cybersecurity services under a 13-month RFP term. The specialist operates and governs enterprise identity, access, authentication, identity governance and access (IGA), and privileged-access services across the client's environment.

Key responsibilities

• Manage joiner, mover and leaver identity lifecycle processes and automated account provisioning across connected systems.
• Review access requests, approvals, role assignments, segregation-of-duties conflicts and least-privilege controls.
• Operate SSO and MFA services and investigate failed, suspicious or anomalous authentication activity.
• Monitor identity synchronization, resolve provisioning failures and keep identity data consistent.
• Run access-certification campaigns, coordinate with business owners and escalate overdue reviews.
• Identify and remediate inactive, orphaned, excessive or high-risk accounts and entitlements.
• Govern privileged access requests, session monitoring, recordings, shared accounts and just-in-time access.
• Support audits, compliance evidence, IAM/PAM incident investigation, remediation tracking and periodic operational reporting.

Required profile

• Bachelor's degree in Computer Science, Information Security or a related field.
• At least 6 years of experience in IAM governance, engineering or operations.
• Strong stakeholder coordination and service ownership, careful handling of sensitive access data, and strong troubleshooting, reporting and documentation skills.
• Able to balance operational responsiveness with strict governance controls.

Required skills

• Hands-on experience with enterprise IAM, IGA and PAM platforms.
• Understanding of identity lifecycle, access-control models, SSO, MFA, RBAC, least privilege and segregation of duties.
• Experience integrating IAM solutions with enterprise applications and applying Zero Trust and modern authentication principles.
• Knowledge of Saudi regulatory requirements and international identity-security practices.
• Preferred: CIAM, CISSP, Microsoft Identity certification or equivalent IAM-related certification.