Identity Security Engineer

B2B Contract • Fully Remote • Europe‑based Candidates Only

Codertal is seeking an experienced Identity Security Engineer to support a major international organisation in the airline industry. This is a hands‑on engineering role within a mature Cyber Engineering & Architecture function, focused on strengthening identity security posture, privileged access governance, and lifecycle processes across complex enterprise environments.

You will work closely with cross‑functional Cyber, Technology and Application teams to implement secure‑by‑design identity patterns, automate identity lifecycle workflows, and continuously improve IAM/PAM controls.

Your Role

As an Identity Security Engineer, you will contribute to the governance, engineering and continuous improvement of identity security standards, privileged access controls, identity lifecycle processes, and posture monitoring. You will support the Senior Identity Security Engineer in delivering secure identity architectures, scalable automation, and strong operational governance across enterprise identity platforms.

Key Responsibilities

• Identity & privileged security governance across AD, Entra and IGA services.
• Implement and maintain identity lifecycle workflows (joiners/movers/leavers, access requests, access reviews) using SailPoint.
• Support privileged access platform implementation and develop PAM controls and governance processes.
• Engineer continuous improvements for IAM/PAM lifecycle processes, enabling scalable automation and self‑service.
• Deliver identity posture monitoring and ongoing improvements to identity security controls.
• Provide SME support for identity‑related security incidents, contributing to containment and remediation.
• Build identity metrics and dashboards for centralised oversight of control coverage, effectiveness and risks.
• Collaborate with application/platform teams to embed secure‑by‑design identity patterns (authentication, authorisation, RBAC, least privilege).
• Maintain documentation, blueprints and configuration management for identity security standards and platforms.
• Contribute to cross‑domain security architecture reviews.

Interested in remote work opportunities in Cyber Security? Discover Cyber Security Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.

• Partner with Cyber Defence to ensure appropriate identity telemetry is monitored.
• Support alignment with compliance requirements and regulations.
• Provide direction and oversight to third‑party providers supporting identity services.

• Initial Success Factors
• Improve consistency in identity security standards and operating procedures.
• Enhance execution quality and timeliness of identity lifecycle processes.
• Reduce identity‑related control gaps through proactive posture oversight and remediation.

Required Qualifications & Experience

• 10+ years industry experience, with 5+ years in identity management or identity security engineering.
• Hands‑on experience with Active Directory and/or Entra in enterprise environments.
• Experience designing and governing identity lifecycle & access lifecycle processes using an IGA platform (e.g., SailPoint).
• Experience implementing privileged access management controls and processes.
• Experience working with stakeholders to implement access governance and least‑privilege controls.
• Relevant certifications: Microsoft Identity/Security, CISSP, CISM, CIAM, CRISC, or similar.

• Essential Skills
• Strong understanding of IAM principles: zero trust, least privilege, RBAC, access reviews, segregation of duties, lifecycle governance.
• Ability to define secure identity architecture patterns and translate them into standards and blueprints.
• Ability to implement identity standards and controls consistently and document outcomes.
• Strong analytical and troubleshooting skills for identity and access issues.
• Excellent communication and collaboration across Cyber, Technology and Business teams.
• Engineering experience with tools such as SailPoint, CyberArk, BeyondTrust, MS Defender for Identity, CrowdStrike Identity, SilverFort.

• Desirable Skills
• Scripting/automation experience (PowerShell) for improving identity governance processes.
• Experience with identity threat detection and SOC integration.
• Experience with non‑human identity governance and modern authentication protocols.

• What We Offer
• Competitive B2B contract compensation
• Fully remote work across Europe
• Long‑term career growth opportunities
• Exposure to a highly mature cyber engineering environment in the aviation industry
• Collaboration with a passionate, senior cybersecurity team