Identity & Access Management (IAM) Specialist

• Academic background in Telecommunications Engineering, Electrical Engineering, Informatics, or a similar area.
• More than 4 years of relevant experience in Identity & Access Management (IAM/IGA) solutions, namely Microsoft Entra ID (Azure AD), Okta, SailPoint IdentityIQ/IdentityNow, and PingFederate;
• Experience in the implementation, configuration, and operation of Privileged Access Management (PAM) solutions, such as CyberArk PAS, BeyondTrust Password Safe, or Delinea Secret Server;
• Solid knowledge of the main authentication, authorization, and federation protocols, including SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), WS-Federation, SCIM, LDAP, and RADIUS;
• Experience in managing identities and access in cloud environments, namely Microsoft Azure, AWS IAM, and Google Cloud IAM;
• Experience in automation and scripting, using PowerShell, Python, and API integrations for process optimization and identity management;
• Knowledge of security frameworks and standards, such as Zero Trust, NIST 800-63, ISO 27001, and CIS Controls;
• Ability to analyze risks, identify vulnerabilities, and assess impacts related to identity and access;
• Experience in stakeholder management and in following up on projects related to digital identity and security;
• We value certifications such as Microsoft SC-300: Identity and Access Administrator, Okta Certified Professional/Administrator, SailPoint IdentityNow or IdentityIQ, CyberArk Defender, Sentry, or Guardian, CompTIA Security+, as well as ADSelfService Plus and ADManager Plus (Administrator and Expert) certifications.
• Strong analytical and problem-solving skills, with critical thinking applied to complex environments.
• Excellent communication and interpersonal skills, essential in a consulting context with direct client contact.
• Autonomy, proactivity, and strong organization and time management skills.
• Team spirit, a collaborative mindset, and the ability to build relationships of trust with clients and colleagues.
• Fluency in Portuguese and English, both spoken and written.
• Availability to participate in international projects.

Do you want to join one of the largest professional services organizations in the market?

Then Deloitte is for you. Here, you will have the possibility to boost your career and strengthen your skills in our technological universe.

We are an international Tech Hub and we are looking for the best Cybersecurity specialists to join our centers of excellence and our community. At Deloitte, you will transform the world as we know it and develop unique and innovative solutions in the most varied and complex transformation projects, from Portugal to the world. We are strengthening our Cyber area and we are looking for experienced professionals who have a natural taste and aptitude for teamwork and working in a multi-project environment. You can discover all the roles you will perform, according to your profile, so that you can take a leap in your career!

Will you join us? We are waiting for you.

• Manage the access lifecycle: onboarding, access assignment, and access removal.
• Administer IAM and IGA platforms, such as Azure AD / Entra ID, Okta, SailPoint, and Ping Identity.
• Implement and maintain MFA (Multi-Factor Authentication), SSO (Single Sign-On), RBAC (Role-Based Access Control), ABAC (Attribute-Based Access Control) mechanisms and Zero Trust principles.
• Integrate IAM solutions with cloud services, APIs, and enterprise applications.
• Support PAM (Privileged Access Management) solutions, such as CyberArk, BeyondTrust, and Delinea.
• Perform periodic access reviews and support audit and compliance activities.
• Resolve authentication issues related to SAML, OAuth2, OIDC, and Kerberos.
• Ensure that identity governance policies are aligned with security frameworks.
• Governance
• • Implementation of access certification processes.
  • Segregation of Duties.
  • Access auditing and evidence management.
  • Compliance with standards and regulations (GDPR, NIS2, ISO 27001).
  • Management of identity-related risks.
• Access Administration
• • Creation and management of access profiles.
  • Definition of permission matrices.
  • Privileged account management.
  • Access monitoring and detection of anomalous behavior.
• Identity Architecture
• • Design of hybrid identity architectures.
  • Implementation of adaptive authentication policies.
  • Planning of identity modernization strategies.
  • Definition of security standards for identity services.

The IAM (Identity and Access Management) Specialist is responsible for ensuring secure, efficient, and compliant processes for identity lifecycle management, supporting authentication, authorization, and privileged access management initiatives.

• In a diverse work context that allows for continuous development and learning;
• Through a personalized career development plan (skills/technical and functional opportunities), suited to the moment, your needs, and your objectives;
• By participating in national and international projects, with relevant dimension and impact in this area of specialization;
• Unlimited access to the largest online learning platforms (Linkedin Learning and Udemy);
• Opportunity for training and certifications in the latest technologies, specifically in Cloud technologies.

• A culture of innovation and excellence that makes us leaders and trendsetters;
• A friendly environment of respect, trust, transparency, and informality;
• A lifelong network that keeps you connected to the best knowledge alongside leaders and specialists;
• An opportunity to be part of our communities (Tech, innovation, sports, and other interests) and to actively participate in social responsibility projects.