Title:  Identity & Access Management (IAM) Specialist

Do you want to join one of the largest professional services organizations in the market?

Then Deloitte is the place for you. Here, you will have the opportunity to accelerate your career and strengthen your skills within our technology ecosystem.

We are an international Tech Hub and are looking for the best Cybersecurity specialists to join our Centers of Excellence and our community. At Deloitte, you will help transform the world as we know it and develop unique, innovative solutions across a wide range of complex transformation projects, from Portugal to the world. We are expanding our Cyber practice and are looking for experienced professionals who thrive in team-oriented and multi-project environments. Depending on your profile, you will have the opportunity to contribute across a variety of functions and take your career to the next level.

Are you ready to join us? We're waiting for you.

About the Role

The IAM Specialist (Identity and Access Management) is responsible for ensuring secure, efficient, and compliant identity lifecycle management processes, supporting authentication, authorization, and privileged access management initiatives.

Your day-to-day responsibilities

• Manage the access lifecycle, including onboarding, access provisioning, modification, and deprovisioning.
• Administer IAM and IGA platforms such as Azure AD / Entra ID, Okta, SailPoint, and Ping Identity.
• Implement and maintain MFA (Multi-Factor Authentication), SSO (Single Sign-On), RBAC (Role-Based Access Control), ABAC (Attribute-Based Access Control), and Zero Trust security principles.
• Integrate IAM solutions with cloud services, APIs, and enterprise applications.
• Support PAM (Privileged Access Management) solutions such as CyberArk, BeyondTrust, and Delinea.
• Conduct periodic access reviews and support audit and compliance activities.
• Troubleshoot authentication issues related to SAML, OAuth2, OIDC, and Kerberos.
• Ensure identity governance policies are aligned with security frameworks and organizational standards.

Governance

• Implementation of access certification processes.
• Segregation of Duties (SoD).
• Access audits and evidence management.
• Compliance with regulations and standards (GDPR, NIS2, ISO 27001).
• Identity-related risk management.

Access Administration

• Creation and management of access profiles.
• Definition and maintenance of permission matrices.
• Privileged account management.
• Access monitoring and detection of anomalous behavior.

Identity Architecture

• Design of hybrid identity architectures.
• Implementation of adaptive authentication policies.
• Planning and execution of identity modernization strategies.
• Definition of security standards for identity services.

Are you the one we're looking for?

• Academic background in Telecommunications Engineering, Electrical Engineering, Computer Science, Information Technology, or a related field.
• More than 4 years of relevant experience with Identity & Access Management (IAM/IGA) solutions, including Microsoft Entra ID (Azure AD), Okta, SailPoint IdentityIQ/IdentityNow, and PingFederate.
• Experience implementing, configuring, and operating Privileged Access Management (PAM) solutions such as CyberArk PAS, BeyondTrust Password Safe, or Delinea Secret Server.
• Strong knowledge of authentication, authorization, and federation protocols, including SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), WS-Federation, SCIM, LDAP, and RADIUS.
• Experience managing identities and access within cloud environments, including Microsoft Azure, AWS IAM, and Google Cloud IAM.
• Experience in automation and scripting using PowerShell, Python, and API integrations to streamline identity processes and operations.
• Knowledge of security frameworks and standards such as Zero Trust, NIST 800-63, ISO 27001, and CIS Controls.
• Ability to assess risks, identify vulnerabilities, and evaluate identity and access-related impacts.
• Experience managing stakeholders and supporting projects related to digital identity and cybersecurity.
• Relevant certifications are highly valued, including:
  • Microsoft SC-300: Identity and Access Administrator
  • Okta Certified Professional / Administrator
  • SailPoint IdentityNow or IdentityIQ
  • CyberArk Defender, Sentry, or Guardian
  • CompTIA Security+
  • ADSelfService Plus and ADManager Plus certifications (Administrator and Expert)
• Strong analytical and problem-solving skills, with the ability to apply critical thinking in complex environments.
• Excellent communication and interpersonal skills, essential in a consulting environment with direct client interaction.
• Self-driven, proactive, highly organized, and effective in time management.
• Strong team spirit, collaborative mindset, and the ability to build trusted relationships with clients and colleagues.
• Fluency in Portuguese and English, both written and spoken.
• Availability to participate in international projects.

Build a career tailored to you

• Work in a diverse environment that fosters continuous learning and professional development.
• Benefit from a personalized career development plan aligned with your aspirations, skills, and goals.
• Participate in national and international projects with significant scale and impact.
• Enjoy unlimited access to leading online learning platforms such as LinkedIn Learning and Udemy.
• Access training programs and certifications in the latest technologies, particularly in Cloud technologies.

Experience a culture of togetherness

• Join a culture of innovation and excellence that positions us as leaders and trendsetters.
• Work in a friendly environment built on respect, trust, transparency, and collaboration.
• Become part of a lifelong network connected to industry leaders and subject matter experts.
• Engage in our communities focused on technology, innovation, sports, and other interests, while actively contributing to social responsibility initiatives.

About Deloitte

At Deloitte, you will never work alone. You will have the opportunity to join transformative projects and be part of a team that inspires you to develop innovative solutions in a dynamic and collaborative environment. You'll be empowered to perform at your best while benefiting from our wellbeing and flexibility initiatives.

We are more than 5,500 professionals in Portugal, with over 2,600 working in technology-related areas, across offices and Digital Studios in Lisbon, Porto, Braga, Viseu, Coimbra, and Faro, as well as technology hubs in Braga.

Our teams in Portugal also have a strong international presence, reflecting our global leadership in low-code/no-code solutions, telecommunications network engineering, organizational transformation platforms (ServiceNow and Apptio), and financial services technologies (Finastra, TIA, and Guidewire).

If you are interested in developing your skills in technology domains such as software engineering, cloud, systems integration, data analytics & data science, cyber risk, telecommunications network engineering, or UX design, and would like to work with technologies including AWS, Google, Oracle, Salesforce, SAP, MuleSoft, Feedzai, and SAS, among others, then you are in the right place.

Learn more at: https://www.deloitte.com/pt/careers

Keywords: Deloitte; Consulting; Technology
#LI-HYBRID #LI-CA1 #TECHDTT #Experienced