Join Our Team at Marsh McLennan (MMC) in Cluj, Romania!
Marsh McLennan (MMC) has established its EMEA Technology Hub in Cluj, Romania, reflecting our commitment to innovation and excellence; this hub is central to our digital strategy, addressing emerging challenges and enhancing service delivery through advanced technology solutions that empower our clients and promote sustainable growth;
We are seeking a talented Identity & Access Management (IAM) System Engineer to join our dynamic team; if you are passionate about security, cloud integrations, and cutting-edge IAM solutions, we want to hear from you!
We will count on you to:
Implement and manage PAM systems and solutions using CyberArk, Delinea or Beyond Trust, integration into legacy and cloud identity systems for both human and non-human identities
Manage IAM systems and solutions, including Single Sign-On (SSO), Multi-Factor Authentication (MFA) and role-based access control (RBAC)
Configure and maintain PAM and IAM management tools
Work with the business to implement secret management, service account management, elevated account management meeting security policy
Work with security teams to define and enforce security policies and user access controls
Assist in the management of user and elevated lifecycle processes such as onboarding, offboarding, and role changes
Integrate PAM systems with various internal and third-party applications and services
Manage the backup and recovery, auditing and reporting on PAM system for security incidents and access violations
Ensure compliance with regulatory requirements and internal security policies related to identity and access management
Troubleshoot and resolve IAM-related issues, including access problems and authentication failures
Stay up to date with the latest PAM and IAM technologies, trends and security vulnerabilities
Develop and maintain documentation for PAM and IAM configurations, processes and procedures
Collaborate with security teams to identify and mitigate identity-related risks and vulnerabilities
What you need to have:
Extensive experience in design, development and implementation of PAM solutions based on CyberArk, Delines, Beyond Trust or Centrify
Experience in design, development, and implementation of Microsoft Active Directory (including DNS, AD Sites, GPO, Domain DFS, Trusts, Schema, Backup and Restore, PKI)
Experience in designing and implementing Directory Services with cloud services such as Entra ID, AWS Identity Centre, OKTA Workforce and CIAM
Experience designing and implementing SSO integrations using federation, SAML, OpenID, two-factor authentication and risk-based authentication
Provide advanced design and engineering functions to secure PAM, Directory Services, Identity and Access Management, Windows Server, automation, and scripting
Support projects in development with designs for PAM and IAM
Experience integrating new organizations into existing PAM and IAM solutions
Extensive and demonstrated experience in end-to-end deployment of OKTA WIC and CIC (CIAM) solutions, Entra ID including B2B and B2C
Experience configuring Okta and Entra ID to provide enterprise Single Sign-On services and enable Multi-Factor Authentication (MFA) platform features for internal and external applications
Develop and maintain enterprise-wide Identity runtime authorization solutions (Zero Trust)
Experience of least privilege access models and IDP granular control boundaries across cloud environments
Document Operational procedures and hand-off to the Identity Operations team
Stay up to date with current PAM and IAM threats and industry solutions
Develop and implement technical solutions leveraging modern authentication services
Perform business use case analysis to implement authentication and authorization solutions
Extensive knowledge and experience of Privileged Access Management best practices and procedures using software solutions such as CyberArk, Delinea, Beyond Trust
Comprehensive knowledge of Active Directory and Entra ID Backup and Recovery
Experience with Windows Operating systems registry, local policy, events and Windows Firewall
Experience with one or more scripting in languages including PowerShell, C++, Jave, Python, JavaScript or C#
Strong knowledge of PKI and Certificate Services, templates, and management
What makes you stand out:
Certifications in IAM, security, or cloud platforms;
Experience working in a global or multi-cloud environment;
Strong problem-solving skills and a proactive approach to security challenges;
Excellent communication skills and ability to collaborate across teams;
Why join our team:
We help you be your best through professional development opportunities, interesting work, and supportive leaders;
We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and have an impact for colleagues, clients, and communities;
Our scale enables us to provide a range of career opportunities, as well as benefits and rewards to enhance your well-being;
A yearly budget and the opportunity to build your flexible benefits package (up to 20% of your annual salary);
30+ days off (including legal days, birthday, public holiday replacements, and benefits options);
Performance bonus scheme;
Matching charity contributions, charity days off, and the Pay it Forward charity challenge;
Core benefits: Pension, Life and Medical Insurance, Meal Vouchers, Travel Insurance;
#MMCTech
