Security Engineer - Identity

Role overview

Security Engineer - Identity at Expleo

Responsibilities

• You will not have access to the client's operational systems or data and will not make live changes.
• Design access review approaches and analyse access review, joiner-mover-leaver and MFA allocation reporting released through the UK service boundary.
• Support the Senior Security Architect in evaluating PKI and secrets management tooling.
• Maintain PAM, identity and PKI diagrams, policy and configuration documentation.
• Support the growth of Expleo's Cybersecurity Practice through knowledge sharing and technical contribution.

Required qualifications

• Vendor PAM certification, e.g. CyberArk Defender or Sentry, BeyondTrust or Delinea (at least one required).

Employment details

• Define audit logging requirements for remote access, PAM and PKI in line with the logging design.
• Location: Chennai [India]

About the employer

• Expleo is a trusted partner for end-to-end, integrated engineering, quality services, and management consulting for digital transformation.
• The service is governed by Expleo in the UK, with a 24/7 UK Security Operations Centre delivered by a specialist partner and an Expleo consultancy team in India providing design, engineering and assurance expertise across the client's security tooling estate.

Additional role details

• We help businesses harness technological change to deliver innovation, improve resilience, and support the secure delivery of complex products, platforms, and systems.
• As part of the Expleo UK Cybersecurity Practice, you will join a managed Cyber Operations service for a major UK energy network operator that forms part of the UK's Critical National Infrastructure (CNI).
• As a Security Engineer | Identity , you will provide design, review, and analysis expertise across the client's privileged access management, identity and access management, multi-factor authentication, and PKI controls.
• This is a design, review and advisory role.
• You will work within Expleo's offshore consultancy team, outside the client's operational environment.
• Operational changes are implemented by UK-based, security-cleared personnel; your work provides the designs, analysis, recommendations and assurance that those changes depend on.
• You will work from information released to the team through Expleo's controlled UK service boundary.
• Responsibilities Provide subject matter expertise on privileged access management (PAM) architecture, configuration and policy, and recommend improvements.
• Assess PAM change requests for security risk and prepare change designs for implementation by UK-based personnel.
• Report on the status of PKI, keys and certificates; track expiries and produce renewal plans.
• Track PAM platform vendor support status and produce upgrade recommendations.
• Degree in computer science, cybersecurity or a related discipline, or equivalent professional experience.
• Microsoft SC-300, CompTIA Security+ or ISC2 SSCP would be advantageous.
• Essential Skills PAM platform expertise (e.g. CyberArk, BeyondTrust, Delinea).
• Active Directory, Entra ID, conditional access and MFA technologies.
• Enterprise PKI and certificate lifecycle management (e.g. Microsoft AD CS, Venafi, Keyfactor).
• Identity governance and access certification concepts.
• PowerShell scripting, reporting and data analysis.
• ITIL change processes and clear technical documentation.
• Experience 4-7 years in identity and access management or PAM engineering.
• Experience with PAM policy design, access reviews and certificate lifecycle management in enterprise environments.