Position: Senior DevOps Engineer
Company: Ciklum
Experience required: 5y
English level: upper

About the role:
As a Senior DevOps Engineer, become a part of a cross-functional development team working for the TUI.
You will be responsible for the delivery of new or improved functionalities and assisting with daily operational tasks, within IAM, on platforms such as Active Directory, Azure AD, AWS, GCP, etc. You are an active member of a self-driving team working together with your colleagues and peers, constantly looking to increase IAM security, improvements & automation with the aim that the IAM product can be received with just a simple click on the button.
You will be actively involved in the IAM programs that will deliver the IAM roadmap like SSO federation, Identity Governance, and Administration, Privileged Access Management, etc.

Responsibilities
Designing, implementing, integrating and managing Identity Directory Providers / Stores and identity services
Integrate and manage applications in the cloud federation
Identify, analyze, and resolve system design weaknesses. Troubleshoot and manage the resolution of issues related to identities, systems, access, accounts, authentication, authorization, entitlements, and permissions. Determine and recommend the most appropriate response to identified more complex problems, issues, and/or defects by assessing impact and prioritization
Ensure the maintenance and monitor IAM systems. Troubleshoot, support, and resolve system incidents, problems, and changes, as required
Implement and monitor the Key Performance Indicators for the Access Management Service
Design reusable strategies, decisions, service components, libraries, and frameworks to support enterprise-level IAM services
Provide level 2 and level 3 support for clients and coordinate as needed with the technology vendors (performing diagnosis on incidents, implementing standard changes to the infrastructure)
Produce IAM technical documentation such as IAM detailed design, configuration guides, etc.
Support on business development (bids) including defining the scope of work and interacting with clients and the vendors as required during the proposal development as a part of project and developer teams
Implementing technologies to centrally integrate identity systems across the organization
Streamlining and improving customer experiences
Implementing access controls to applications and maintaining and updating roles in the directory
Managing access and permissions where necessary and implementing automated solutions
Collaborating with key engineering stakeholders to help tackle challenges within the IAM space
Troubleshooting and managing issues related to identities, systems access accounts, authentication, authorization, entitlements, and permissions
Implementing and maintaining technologies to ensure audit and privacy compliance
Participate in the IAM strategy definition and evolution
Conduct IAM assessments and identify gaps between the AS-IS situation and the envisioned future state of the organization
Contribute to various long-term projects to consolidate the IAM tools and the overall security environment
Coach other members of the organization on the best practices that should be followed in identity and access management
Stay up-to-date on current IAM threats and industry solutions
Requirements
We know that sometimes, you can’t tick every box. We would still love to hear from you if you think you’re a good fit!

5+ years of experience
Proven deep knowledge of Microsoft Azure AD and related services like for example Enterprise Applications, Conditional Access, B2B/B2C accounts, Active Directory and Microsoft 365
Knowledge of engineering workflows
Comprehensive knowledge and experience with authentication standards and technologies
Extensive hands-on knowledge of identity and access management best practices, procedures, and software solutions
Extensive knowledge and experience with identity and access management technology, such as single sign-on (SSO), two-factor authentication, Conditional Access, privileged access management, etc. in Azure and AWS
Experience with Windows, Linux, scripting (Bash, Powershell, Visual Basic or Perl), LDAP, SQL, and web services
Experience working with O365 and AWS security capabilities (e.g. Guard Duty…)
Good interpersonal skills so that you can work well with and influence your information security, and IT operations colleagues from around the world
Problem-solving skills to identify creative and elegant technical solutions
Good communicator and able to work under pressure
Bachelor’s degree in IT, information security, computer science, or a related field
What's in it for you
Care: your mental and physical health is our priority. We ensure comprehensive company-paid medical insurance, Mental Health programs, as well as financial and legal consultations
Tailored education path: boost your skills and knowledge with our regular internal events (meetups, conferences, workshops), Udemy licence, language courses and company-paid certifications
Growth environment: share your experience and level up your expertise with a community of skilled professionals, locally and globally
Flexibility: choose how you want to work – a 100% remote or on-sight in our offices. Own your schedule – you are the one to decide when to start your working day. Just don’t miss your regular team stand-up
Opportunities: we value our specialists and always find the best options for them. Our Internal Mobility Program helps change a project if needed to help you grow, excel professionally, and fulfill your potential
Global impact: work on large-scale projects that redefine industries with international and fast-growing clients
Welcoming environment: feel empowered with a friendly team, open-door policy, informal atmosphere within the company, and regular team-building events