IAM/PAM Operations Analyst

Introduction:

The IMPACT Operations team member will be a key for the IMPACT team, ensuring the day-to-day stability, efficiency, and compliance of identity and privileged access services. Reporting to the IMPACT Manager, you will be responsible for executing operational tasks that safeguard access to critical systems and data.This role provides a unique opportunity to work across both IAM and PAM domains, supporting access lifecycle processes, privileged account operations, and monitoring activities that are essential to the security of the organization. You will collaborate closely with IT, security, HR, and business stakeholders to deliver reliable, policy-driven access operations.

Key Responsibilities:

• Perform daily operational tasks for IAM and PAM platforms, including account provisioning, de-provisioning, password resets, and access changes.

• Onboard, manage, and monitor privileged accounts, ensuring proper use of vaulting, session recording, and access approval workflow

• Support access certification campaigns, segregation of duties (SoD) reviews, and audit-related requests.

• Monitor IAM/PAM tools for alerts and anomalies, escalating incidents as needed.

• Execute standard operating procedures for joiners, movers, and leavers (JML) across systems and applications.

• Manage certificate lifecycle operations (PKI, TLS/SSL, service account certificates), ensuring timely renewal, and compliance with security standards.

• Assist in troubleshooting user access issues, working closely with infrastructure and application teams.

• Contribute to process documentation, knowledge base articles, and operational runbooks.

• Provide input to engineers/architects on recurring issues, suggesting improvements for automation and efficiency.

Requirements:

• Hands-on experience with IAM tools and platforms (e.g., SailPoint, CyberArk, Okta, Azure AD).

• Solid understanding of user provisioning, access management, and password management processes.

• Knowledge of privileged account handling and operational best practices.

• Knowledge of privileged account handling and operational best practices.

• Ability to follow and improve operational workflows, ensuring adherence to security and compliance requirements.

• Strong problem-solving skills and ability to collaborate with technical and business teams.

• Good communication skills in English (B2 or higher).

Desirable: 

• Previous experience in IT operations, service desk, or identity/security operations.

• Familiarity with authentication concepts (MFA, SSO) and directory services (LDAP, Active Directory).

• Exposure to scripting (e.g., PowerShell, Python) for task automation.

• Knowledge of scripting languages (e.g., PowerShell) for IAM automation.

We offer: 

• Employment based on an employment contract

• Flexible working hours

• Fully remote work

• Attractive benefits package for employees: private medical care: Luxmed, participation in Multisport card cost, additional benefits adapted to your needs within the cafeteria system, employee insurance on favourable terms 

• Opportunity to develop in local structures of the KRUK Group

• Parking for bicycles and cars

• There is a possibility of employment under a B2B contract

• Possibility to use a company car for private purposes. 

We are dedicated to creating an inclusive recruitment process that upholds the principles of equal opportunity. Our focus is on candidates' competencies and their willingness to grow, regardless of gender, age, disability, religion, sexual orientation, background, or any other factors unrelated to their qualifications. We go the extra mile to ensure the recruitment process is accessible and thoughtfully tailored to accommodate individual needs.