Identity Security Engineer

B2B Contract * Fully Remote * Europe-based Candidates Only Codertal is seeking an experienced Identity Security Engineer to support a major international organisation in the airline industry . This is a hands-on engineering role within a mature Cyber Engineering & Architecture function, focused on strengthening identity security posture, privileged access governance, and lifecycle processes across complex enterprise environments. You will work closely with cross-functional Cyber, Technology and Application teams to implement secure-by-design identity patterns, automate identity lifecycle workflows, and continuously improve IAM/PAM controls. Your Role As an Identity Security Engineer, you will contribute to the governance, engineering and continuous improvement of identity security standards, privileged access controls, identity lifecycle processes, and posture monitoring. You will support the Senior Identity Security Engineer in delivering secure identity architectures, scalable

Maintain documentation, blueprints and configuration management for identity security standards and platforms. - Contribute to cross-domain security architecture reviews . - Partner with Cyber Defence to ensure appropriate identity telemetry is monitored. - Support alignment with compliance requirements and regulations . - Provide direction and oversight to third-party providers supporting identity services. - Initial Success Factors - Improve consistency in identity security standards and operating procedures. - Enhance execution quality and timeliness of identity lifecycle processes. - Reduce identity-related control gaps through proactive posture oversight and remediation. Required Qualifications & Experience - 10+ years industry experience, with 5+ years in identity management or identity security engineering. - Hands-on experience with Active Directory and/or Entra in enterprise environments. - Experience designing and governing identity lifecycle & access lifecycle processes using an IGA platform (e.g., SailPoint). - Experience implementing privileged access management controls and processes. - Experience working with stakeholders to implement access governance and least-privilege controls. - Relevant certifications: Microsoft Identity/Security, CISSP, CISM, CIAM, CRISC , or similar. - Essential Skills - Strong understanding of IAM principles : zero trust, least privilege, RBAC, access reviews, segregation of duties, lifecycle governance. - Ability to define secure identity architecture patterns and translate them into standards and blueprints. - Ability to implement identity standards and controls consistently and document outcomes. - Strong analytical and troubleshooting skills for identity and access issues. - Excellent communication and collaboration across Cyber, Technology and Business teams. - Engineering experience with tools such as SailPoint, CyberArk, BeyondTrust, MS Defender for Identity, CrowdStrike Identity, SilverFort . - Desirable Skills - Scripting/automation experience (PowerShell) for improving identity governance processes. - Experience with identity threat detection and SOC integration. - Experience with non-human identity governance and modern authentication protocols. - What We Offer - Competitive B2B contract compensation - Fully remote work across Europe - Long-term career growth opportunities - Exposure to a highly mature cyber engineering environment in the aviation industry - Collaboration with a passionate, senior cybersecurity team