For our locations in Sofia, Plovdiv, Varna or remote in Bulgaria, we’re looking for an IAM Support Engineer with experience in either IAM, Access Management (AM) or Privileged Access Management (PAM). You’ll provide 2nd/3rd-level support for enterprise identity platforms, handle daily operations, resolve incidents, and contribute to continuous improvement across customer environments.
Your Responsibilities:
- Operate and support IAM, AM or PAM platforms in complex enterprise setups.
- Troubleshoot and resolve provisioning, deprovisioning, credential vaulting, and platform issues.
- Monitor system health, connectors, workflows, and integrations; address issues proactively.
- IAM focus: Manage user lifecycle, directory services, authentication, and federation.
- AM focus: Manage access control policies, authentication flows, and integrations with technologies such as Ping Identity and ForgeRock.
- PAM focus: Onboard/rotate privileged accounts, manage vault policies, sessions, and JIT access.
- Analyze identity data, create reports, and support automation using databases and scripting.
- Maintain integrations with directories, HR systems, applications, ITSM, and SIEM tools.
- Implement changes, patches, and enhancements following change-management best practices.
- Collaborate with customer security and operations teams to optimize IAM, AM, PAM processes.
- Maintain documentation, runbooks, and knowledge articles.
Your Experience:
- Degree in Computer Science, Information Security, or equivalent experience.
- Hands-on experience in IAM, AM or PAM operations.
- Knowledge of AD, LDAP, SAML, SCIM, OAuth/OIDC, and related integrations.
- Strong troubleshooting skills; comfortable with logs, APIs, and relational databases.
- Scripting experience (PowerShell, Python) is a plus.
- Understanding of least-privilege, zero-trust, and compliance requirements.
- Strong analytical and communication skills.
- English fluency required; German will be considered as an advantage.
- Relevant IAM, AM or PAM certifications are a plus.
Preferred Platform Experience:
- IAM: SailPoint, One Identity, Omada, Saviynt
- AM: Ping Identity, Forgerock
- PAM: CyberArk, Delinea, BeyondTrust, One Identity PAM, HashiCorp Vault
- Cloud identity exposure (Azure AD/Entra, AWS, GCP) is beneficial.