Principal I – Identity & Access Management (IAM) Security Engineer Mexico City
On-siteMexico City, Mexico City, Mexico
Job Summary
Lead the design and implementation of enterprise IAM solutions, with a primary focus on Privileged Access Management (PAM). Architect and manage PAM capabilities, including secure vaulting of privileged credentials, automatic password rotation for human and non-human accounts, and credential checkout workflows. Develop, enforce, and promote adoption of IAM and PAM security policies while collaborating with IT, infrastructure, and security teams to integrate these solutions across the enterprise. Support security and risk assessments to identify and remediate IAM-related vulnerabilities, and provide technical leadership and mentorship to team members. Identify automation opportunities within IAM and PAM platforms to ensure operational excellence. Act as a subject matter expert providing strategic guidance on IAM architecture and emerging threats. Evaluate existing systems and perform regular maintenance to ensure reliability. This senior role supports a global pharmaceutical client in a highly regulated environment, requiring on-site presence in Insurgentes Sur, Mexico City.
Required Qualifications
- 8–10 years of total experience in Identity & Access Management, cybersecurity, or related engineering roles
- Strong hands-on experience with Privileged Access Management (PAM) solutions (3–4+ years)
- Advanced PowerShell scripting skills for automation and administration
- Deep expertise in Microsoft Active Directory environments
- Strong knowledge of Public Key Infrastructure (PKI), including MS-PKI, DigiCert PKI, AWS certificates, and Entra ID certificates
- Proven experience in IAM engineering and/or architecture roles
- Solid understanding of enterprise security controls, authentication, authorization, and compliance requirements
- Advanced English proficiency (written and spoken)
- On-site position located in Insurgentes Sur, Mexico City
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.