Engineering Lead Analyst
Via agency · Cavendish Professionals
Cybersecurity specialist
Systems analystSystem administratorFlexibleFull-timeBudapest
We are seeking a senior-level Engineering Lead Analyst to join our client, an in-house technology consultancy of a global consulting firm, driving enterprise-scale Identity and Access Management (IAM) modernization. In this role, you will take technical ownership of designing, automating, and deploying mission-critical IAM systems and Policy-Based Access Control (PBAC) architectures across large-scale, distributed environments. You will act as the core subject matter expert, guiding engineering standards, risk mitigation frameworks, and long-term security roadmaps.
Tasks
- Serving as the technical subject matter expert for IAM systems and processes, driving the architecture, implementation, and long-term technology domain roadmap.
- Designing, implementing, and maintaining enterprise PBAC solutions (e.g., PlainID, Axiomatics) at scale for large user populations and complex access scenarios.
- Developing and deploying automated workflows for user provisioning, de-provisioning, and granular access control management.
- Scripting end-to-end automation solutions using Python or PowerShell to streamline identity workflows and eliminate manual interventions.
- Collaborating with cross-functional technical teams and security stakeholders to define system enhancements, conduct root-cause analyses, and ensure strict compliance with firm-mandated controls.
- Leading regular security audits and penetration testing initiatives to identify vulnerabilities, mitigate risks, and safeguard operational resilience.
- Mentoring team members, conducting code reviews, and delivering technical training on IAM governance and protocols.
Requirements
- 5 years of specialized experience in Identity and Access Management (IAM), ideally within financial services or large, complex global environments.
- Proven hands-on track record in PBAC principles and implementations with industry-leading platforms (PlainID, Axiomatics, or equivalent).
- Strong technical background in scripting and automation utilizing Python, PowerShell, or related languages.
- Deep expertise in directory services (Active Directory, LDAP) and modern identity providers (PlainID, Okta, Azure AD).
- Solid familiarity with enterprise security and authentication protocols: SAML, OAuth, and OpenID Connect.
- Consultant mindset: exceptional analytical problem-solving skills, ability to manage through ambiguity under pressure, and comfort influencing technical decisions across cross-functional matrix teams.
- 5 years of commercial IAM engineering and delivery experience.
- Demonstrable expertise in Policy-Based Access Control (PBAC) design and deployment at scale.
- Strong hands-on automation and scripting capabilities (Python / PowerShell).
- In-depth knowledge of directory services (AD, LDAP), IDPs (Okta, Azure AD), and federation protocols (SAML, OAuth, OIDC).
- Fluent English for daily international collaboration.