Support and enhance the organization s cybersecurity posture by managing identity and access lifecycle, non-personal IDs (NPIDs), risk control frameworks, and DevOps security integration while driving process automation through Python-based tooling. Key Responsibilities
Identity & Access Management (IAM)
- Onboard applications and services into IAM platforms (SailPoint, CyberArk, Active Directory)
- Manage access provisioning, recertification, and deprovisioning workflows
- Enforce least-privilege and role-based access control (RBAC) policies
- Support PAM (Privileged Access Management) onboarding and credential vaulting
NPID Management
- Create, maintain, and retire Non-Personal IDs (service accounts, shared accounts, system IDs)
- Ensure NPIDs comply with organizational password policy, rotation schedules, and ownership accountability
- Conduct periodic reviews and attestations of NPID inventory
- Remediate orphaned or stale NPIDs flagged during audits
DevOps Security
- Support Embed security controls into CI/CD pipelines (Jenkins, Azure DevOps, GitHub Actions)
- Advise development teams on secrets management (HashiCorp Vault, Azure Key Vault)
- Support SAST/DAST/SCA tool integration (Veracode, Snyk, Checkmarx)
- Collaborate on secure code reviews and threat modeling for new services
Risk & Controls Management
- Own and track risk controls across assigned application portfolios
- Raise, manage, and remediate risk findings and exceptions
- Prepare risk reporting for audits, regulators, and senior management
Automation & Tooling (Python)
- Develop Python scripts to automate IAM workflows, NPID audits, and vulnerability reporting
- Build integrations with internal APIs, Confluence, ServiceNow, and Tableau
- Maintain and enhance automation pipelines for recurring security operations tasks
- Reduce manual effort through scheduled jobs, data extraction, and automated reporting
Required Skills
- IAM/PAM platforms: CyberArk, Active Directory, Azure AD/Entra ID
- Scripting: Python (pandas, requests, openpyxl, Selenium), PowerShell
- DevSecOps toolchain familiarity
- Understanding of NPID/service account governance
