Security Engineer III (~Senior Identity Security Engineer)

Overview

Senior Identity Security Engineer (Security Engineer III) to contribute hands-on to Anaplan’s identity security function, including IGA administration, PAM build-out, and governance for non-human and AI agent identities.

What you'll do

• Administer and mature Anaplan’s Identity Governance and Administration (IGA) platform, currently SailPoint.
• Support identity lifecycle processes (joiner, mover, leaver), including connector configuration and role model building.
• Run access certification campaigns to support least-privilege access.
• Evaluate, select, and help implement Privileged Access Management (PAM) including discovery, vaulting, JIT access, session monitoring, and credential rotation.
• Develop NHI governance frameworks for service accounts, API keys, secrets, certificates, and OAuth tokens.
• Contribute identity security for AI agents and automated workflows, including scoping, lifecycle management, and least-privilege models.

What you'll need

• Hands-on experience administering an enterprise IGA platform, with strong preference for SailPoint (IdentityNow or IdentityIQ).
• Understanding of PAM concepts and technologies such as privileged account vaulting, session recording, JIT access, and credential rotation.
• Experience governing non-human identities at scale (service accounts, API keys, OAuth/OIDC tokens, certificates, secrets).
• Knowledge of identity protocols and standards including SAML 2.0, OAuth 2.0, OIDC, SCIM, LDAP, and Kerberos.
• Hands-on experience with cloud IAM platforms, particularly AWS IAM and/or Microsoft Entra ID and/or GCP IAM.
• Proficiency in scripting/programming languages used in identity automation (e.g., Python, PowerShell, Java/BeanShell).
• Familiarity with identity-relevant security frameworks and compliance standards (e.g., NIST SP 800-63, NIST CSF, ISO 27001, SOC 2).

Details

• Location: Gurugram, India.