Security Engineer | Identity

Expleo is a trusted partner for end-to-end, integrated engineering, quality services, and management consulting for digital transformation. We help businesses harness technological change to deliver innovation, improve resilience, and support the secure delivery of complex products, platforms, and systems.

As part of the Expleo UK Cybersecurity Practice, you will join a managed Cyber Operations service for a major UK energy network operator that forms part of the UK's Critical National Infrastructure (CNI). The service is governed by Expleo in the UK, with a 24/7 UK Security Operations Centre delivered by a specialist partner and an Expleo consultancy team in India providing design, engineering and assurance expertise across the client's security tooling estate.

As a Security Engineer | Identity, you will provide design, review, and analysis expertise across the client's privileged access management, identity and access management, multi-factor authentication, and PKI controls.

This is a design, review and advisory role. You will work within Expleo's offshore consultancy team, outside the client's operational environment. You will not have access to the client's operational systems or data and will not make live changes. Operational changes are implemented by UK-based, security-cleared personnel; your work provides the designs, analysis, recommendations and assurance that those changes depend on. You will work from information released to the team through Expleo's controlled UK service boundary.

Responsibilities

• Provide subject matter expertise on privileged access management (PAM) architecture, configuration and policy, and recommend improvements.
• Assess PAM change requests for security risk and prepare change designs for implementation by UK-based personnel.
• Design access review approaches and analyse access review, joiner-mover-leaver and MFA allocation reporting released through the UK service boundary.
• Report on the status of PKI, keys and certificates; track expiries and produce renewal plans.
• Support the Senior Security Architect in evaluating PKI and secrets management tooling.
• Maintain PAM, identity and PKI diagrams, policy and configuration documentation.
• Define audit logging requirements for remote access, PAM and PKI in line with the logging design.
• Track PAM platform vendor support status and produce upgrade recommendations.
• Support the growth of Expleo's Cybersecurity Practice through knowledge sharing and technical contribution.

• Degree in computer science, cybersecurity or a related discipline, or equivalent professional experience.
• Vendor PAM certification, e.g. CyberArk Defender or Sentry, BeyondTrust or Delinea (at least one required).
• Microsoft SC-300, CompTIA Security+ or ISC2 SSCP would be advantageous.

Essential Skills

• PAM platform expertise (e.g. CyberArk, BeyondTrust, Delinea).
• Active Directory, Entra ID, conditional access and MFA technologies.
• Enterprise PKI and certificate lifecycle management (e.g. Microsoft AD CS, Venafi, Keyfactor).
• Identity governance and access certification concepts.
• PowerShell scripting, reporting and data analysis.
• ITIL change processes and clear technical documentation.

Desirable Skills and Experience

• Identity governance platforms (e.g. SailPoint, Saviynt).
• HSM concepts and secrets management tooling.
• Energy, utilities or other CNI sector experience.

Experience

• 4-7 years in identity and access management or PAM engineering.
• Experience with PAM policy design, access reviews and certificate lifecycle management in enterprise environments.

What do I need before I apply

• Have the right to work in India.
• Be based in, or willing to relocate to, Chennai.
• Be willing to complete Expleo enhanced pre-employment background screening (equivalent in standard to the UK Baseline Personnel Security Standard) and any additional vetting the client requires.
• Be able to work hours that overlap with the UK business day, with occasional out-of-hours advisory support during major incidents.
• Have excellent written and spoken English, suitable for engagement with senior UK stakeholders.
• Be comfortable working within a strict security boundary, with no access to the client's operational systems or data.

Benefits

• Collaborative working environment: we stand shoulder to shoulder with our clients and our peers through good times and challenges.
• We empower all passionate, technology-loving professionals to expand their skills and take part in inspiring projects.
• Expleo Academy enables you to acquire and develop the right skills by delivering a suite of accredited training courses.
• Competitive local company benefits [India HR to confirm the benefits package].
• Always working as one team, our people are not afraid to think big and challenge the status quo.

“We are an equal opportunities employer and welcome applications from all suitably qualified persons regardless of their race, sex, disability, religion/belief, sexual orientation or age.”

If you are an identity security engineer who enjoys designing strong, well-governed access controls, we encourage you to apply today.