Identity & PAM Security Engineer

📋 Description Manage privileged access controls, including PIM, JIT access, and approvals. Define admin access processes for high-risk roles, privileged sessions, break-glass. Lead access reviews, track remediation, ensure least-privilege rights. Manage lifecycle of service and machine accounts: ownership, rotation, monitoring. Configure and monitor conditional access policies, MFA, and identity risk. Design automation for identity workflows, approvals, and reporting. 🎯 Requirements 4+ years of IAM, Cloud Security, Infrastructure Security, or Security Eng. Hands-on with Microsoft Entra ID and Google Cloud IAM. Strong knowledge of least privilege, RBAC, MFA, conditional access, PAM. Experience managing service accounts, machine identities, secrets, API keys, rotation. Automation using workflow platforms, APIs, PowerShell, Python. Strong analytical and problem-solving skills with a security-first mindset. 🎁 Benefits Sporty is a remote-first company pursuing sustainability. 28 days paid annual leave. Core hours 10am-3pm in your local TZ; flexibility outside. Top-of-the-line equipment. Annual company retreats to connect with colleagues worldwide.