Access Engineer & IAM Auditor

Design and establish a standardized access audit framework, including methodology, cadence, evidence collection, and reporting templates;

Define risk-based audit scope and sampling methodology appropriate for a large, complex, multi-system landscape;

Run regular (scheduled/periodic) and ad-hoc access audits across the environment, including privileged and administrative accounts;

Audit GCP IAM, LDAP, and PAM tools for stale accounts, excessive permissions, orphaned access, and misconfigurations;

Prepare clear, audit-ready reports and evidence packages suitable for internal review and external auditors;

Track remediation actions with system and application owners through to closure, escalating overdue items as needed;

Maintain audit documentation and process runbooks to ensure repeatability and continuity;

Continuously refine the audit methodology based on findings, tooling changes, and evolving compliance requirements.

2+ years in the position of Access Engineer/IAM Auditor or similar;

Experience designing and building an access audit process from scratch;

Hands-on experience with GCP/LDAP (roles, permissions, service accounts, org policies);

Hands-on experience with Privileged Access Management (PAM) tools and privileged/admin account audits;

Experience working across IGA tools (e.g., One Identity, Okta, Entra ID, Keycloak);

Familiarity with compliance frameworks such as ISO 27001, SOC 2, and NIST;

Ability to hold system and application owners accountable to remediation timelines without formal authority over their teams.