Identity and Access Management Specialist (REMOTE WORK)

Randstad Digital Talent Services, a specialized division of Randstad dedicated to recruiting high-caliber IT and technology professionals, is partnering with a premier IT consulting and system integration firm to hire an

IAM Security Specialist – Access Governance & RBAC (REMOTE)

Role Overview

Working 100% remotely within an enterprise-scale, multicultural environment, the IAM Security Specialist will join a strategic international program for a Tier-1 Banking & Insurance group.

This is not an IT helpdesk, service desk, or administrative data-entry role.

It is a specialized technical governance position bridging Identity Governance & Administration (IGA), access security frameworks (RBAC/ABAC, Least Privilege, SoD), and target system onboarding. You will lead the technical analysis, role modeling, and entitlement lifecycle for critical enterprise assets alongside global cybersecurity and application engineering teams.

Key Responsibilities

• Access Architecture & Role Engineering: design, define, and maintain robust authorization models (RBAC/ABAC matrices, least privilege baseline, separation of duties rules);
• Entitlement Onboarding & Provisioning Workflows: lead the technical mapping, role mining, and onboarding of permissions and entitlements across heterogeneous enterprise target systems (Active Directory, Microsoft Entra ID, SAP, DBs, Cloud workloads);
• Stakeholder & Technical Mediation: act as the technical translator between Application Owners, Business Stakeholders, Software Engineering, and Global Cyber Security teams to translate access logic into system policies;
• Access Review & Lifecycle Management: Drive regular entitlement reviews, identity reconciliation processes, and privileged access alignment to mitigate privilege creep;
• Documentation & Standards: Author and maintain technical architectures, authorization blueprints, and standard operating procedures (SOPs) for enterprise IAM workflows.

Requirements & Qualifications

Must-Have:

• Demonstrated experience in Identity & Access Management (IAM) and/or Identity Governance & Administration (IGA) (profiles without dedicated IAM/identity experience will not be considered);
• Strong command of access security principles: in-depth working knowledge of RBAC, ABAC, Least Privilege, and Separation of Duties (SoD);
• Directory & System Architecture Knowledge: practical understanding of Microsoft Active Directory, Microsoft Entra ID (Azure AD), LDAP, and how identity attributes govern resource access;
• Basic Technical & Data Literacy: ability to inspect access models and data structures using basic SQL queries, REST API/JSON payloads, or identity protocol fundamentals (SAML, OAuth, OIDC, SCIM);
• Enterprise Process Acumen: solid experience handling change requests and incident lifecycles via enterprise ticketing and collaboration platforms (ServiceNow, Jira, Confluence);
• Language: Fluent professional English (C1 minimum, written and spoken) for daily technical standups and international stakeholder engagement.

Nice-to-Have (Strong Plus):

• Hands-on familiarity with enterprise IGA/PAM solutions (e.g., SailPoint IdentityIQ/IdentityNow, Saviynt, CyberArk, One Identity);
• Prior project experience within highly regulated environments (Banking, Financial Services, Insurance, Fintech);
• Relevant industry certifications (e.g., CompTIA Security+, SC-300, SailPoint Certified Engineer, or general IAM/Cybersecurity credentials).

Compensation & Benefits

• Work Arrangement: 100% Full Remote (maximum organizational flexibility);
• Employment Type: Full-time, permanent contract under CCNL Commercio (13 monthly installments);
• Salary Range (RAL): Commensurate with demonstrated technical proficiency: Junior Specialist: Up to €30,000; Mid-level Specialist: Up to €38,000; Senior Specialist: Up to €48,000
• Professional Growth: Direct exposure to a high-complexity international banking environment with concrete career advancement paths in Cyber Security and Identity Governance.

"This announcement is open to candidates of all genders (pursuant to Italian Law 903/77 and 125/91) and individuals of all ages and nationalities (Legislative Decree 215/03 and 216/03). Please submit your resume with authorization for the processing of personal data (GDPR EU 2016/679)."