IAM/PAM Resident Cybersecurity Engineer- Riyadh-KSA

Role Summary

We are seeking a Resident Cybersecurity Engineer to work on-site with the customer’s Cybersecurity team. The engineer will provide day-to-day technical support, maintain and improve the deployed solutions, troubleshoot issues, and coordinate with implementation partners and vendors when specialist support is needed.

The role requires hands-on experience with One Identity IAM, Safeguard PAM, Defender MFA, and miniOrange SSO, along with a strong understanding of Data Classification System (DCS), Data Loss Prevention (DLP), and other enterprise cybersecurity solutions.

Key Responsibilities

• Work closely with the customer’s Cybersecurity team to manage daily operations, incidents, service requests, and planned changes.
• Administer and troubleshoot One Identity IAM, Safeguard PAM, Defender MFA, and miniOrange SSO.
• Monitor integrations with Active Directory, applications, servers, network devices, and VPN platforms; investigate authentication and access issues.
• Support user provisioning, privileged access, MFA policies, SSO integrations, and access reviews.
• Support DCS and DLP operations, including policy monitoring, incident investigation, reporting, and coordination of policy changes.
• Perform health checks, review logs and alerts, and recommend corrective actions.
• Coordinate with product vendors and implementation partners to resolve complex issues and track them through closure.
• Maintain configuration records, operational procedures, incident reports, and knowledge transfer documentation.
• Support testing, upgrades, disaster recovery exercises, and the onboarding of additional applications or systems.
• Provide regular status updates and highlight risks, recurring issues, and improvement opportunities to the customer’s Cybersecurity team.

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
• At least 5 years of experience implementing or supporting enterprise cybersecurity solutions.
• Hands-on administration and troubleshooting experience with One Identity IAM, Safeguard PAM, and Defender MFA.
• Hands-on experience with miniOrange SSO and enterprise application integrations.
• Good working knowledge of DCS and DLP architecture, policies, incidents, and operational support.
• Strong understanding of Active Directory, LDAP, Windows and Linux, networking, certificates, and authentication protocols such as SAML, OAuth 2.0, and OpenID Connect.
• Experience working directly with customer technical and cybersecurity teams.
• Clear communication, documentation, and issue management skills.

Preferred Experience

• Fortra DCS/DLP, Aruba ClearPass NAC, Oracle Audit Vault and Database Firewall, or similar solutions.
• High availability, disaster recovery, and change management in enterprise environments.
• Relevant product or cybersecurity certifications.