Engineer

• Identity Anchoring: Own the Identity Provider (IDP/SSO) lifecycle using JumpCloud, ensuring 100% of corporate assets (GitHub, AWS, etc.) are accessible only via the Corporate IDP, coordinating with related units, including People team
• The "Kill Switch" provisioning: Implement and maintain programmatic offboarding to achieve a Mean Time to Revoke (MTTR) of <5 minutes across all systems, alerted from Slack channel maintained by People team.
• Access Orchestration: Transition from manual tickets to automated approval workflows and self-service access.
• Onboarding: Ensure naming convention uniformity, Lead the migration of all contributors to corporate-managed accounts, implementing automated blocking for non-corporate commits.
• Permission Management: Define technical roles and permissions (RBAC/ABAC) and maintain the User Access Matrix for all personnel and third-party vendors.
• Platform Integration: Move toward Identity Orchestration by implementing short-lived, automated credentials and MFA.
• Least Privilege: Maintain segregation of duties and Least Privilege principles all the time on all systems.
• Maintain and update and ensure the access matrix is current and agreed by relevant parties.
• Maintain the system / tools list across organizations on a regular basis.
• Maintain the payment method / period: Ensure no downtime on the app / system caused by failed payment.
• Keep record and maintain the policies of access of each system and ensure they are approved by relevant stakeholders regularly.
• During identified employee rotation, ensure access provisioning follows the new business unit / department accordingly immediately with appropriate approval from the stakeholders.
• Data Governance: Maintain and update the Data Classification across Ajaib group.
• Data Retention: Ensure data retention is applied and maintained across Ajaib group.
• Incident Management: Log and maintain documentation of reported and known incidents
• Post Incident Review: Log and maintain documentation of reported and known incidents

See all jobs on JobTailor

Identity & Access Management Engineer