Reference code: JR125058
Richemont owns some of the world’s leading luxury goods Maisons, with particular strengths in jewellery, fine watches and premium accessories. Each Maison represents a proud tradition of style, quality and craftsmanship and Richemont seeks to preserve the heritage and identity of each of its Maisons. At the same time, we are committed to innovation and designing new products which are in keeping with our Maisons’ values, through a process of continuous creativity.
Skills:
- Strong understanding of IAM principles (authentication, authorization, RBAC, MFA, SSO).
- Experience with IAM tools and platforms (Okta, Azure AD, Saviynt, CyberArk).
- Knowledge of directory services (LDAP, Active Directory).
- Proficiency in CI/CD pipelines (Jenkins, GitLab CI).
- Infrastructure as Code (IaC) using Terraform or Ansible.
- Automation scripting (Python, PowerShell, Bash).
- Hands-on experience with cloud IAM services (AWS IAM, Azure AD, GCP IAM).
- Familiarity with Docker and Kubernetes for secure deployments.
- Understanding of security best practices for IAM and DevOps.
- Knowledge of compliance frameworks (GDPR, ISO 27001, SOX).
- Experience with REST APIs, OAuth 2.0, OpenID Connect.
- Integration of IAM solutions with DevOps workflows.
Soft Skills:
- Ability to work effectively in cross-functional teams, including security, development, and operations, fostering a culture of shared responsibility.
- Strong verbal and written communication skills to explain technical concepts clearly to both technical and non-technical stakeholders.
- Analytical mindset to troubleshoot complex IAM and automation issues, identify root causes, and implement sustainable solutions.
- Comfortable working in fast-paced environments with evolving technologies and priorities; ability to quickly learn new tools and frameworks.
- Precision in implementing security controls and automation scripts to avoid vulnerabilities and operational risks.
- Ability to anticipate potential issues, propose improvements, and drive automation initiatives without waiting for directives.
- Skilled at prioritizing tasks, managing multiple projects simultaneously, and meeting deadlines under pressure.
- Commitment to staying updated on IAM trends, DevOps practices, and emerging security technologies.
- Ability to build trust and maintain strong relationships with internal teams and external vendors.
Responsibilities:
- Design, develop and maintain infrastructure-as-code (IaC) using Terraform for IAM-related infrastructure critical components.
- Integrate automated deployment solutions linked to IAM processes, including user provisioning, de-provisioning, access certification, and role management and the automated deployment of them.
- Collaborate with IAM architects and engineers to identify automation opportunities and develop solutions that align with overall IAM Management strategy.
- Develop and maintain comprehensive documentation about the existing solution, infrastructure, processes and scripts.
- Troubleshoot and resolve issues related to deployments, scripts and workflows.
- Participate in code reviews and ensure adherence to coding standards and best practices, contributing on increasing our security posture.
- Stay up to date with the latest trends and technologies in IAM, security and AI.
- Contribute to the development of our IAM program.
- Work closely with other IT teams to integrate automation solutions with existing systems and processes.
- Participate in security audits and compliance activities.
Qualifications:
- Bachelor’s degree in Computer Science, Information Security, or a related field.
- 3 years of proven experience with Terraform/Ansible are required.
- Experience with Saviynt Identity Governance platform is highly desirable.
- Proven experience in automation development (Selenium).
- Solid understanding of IAM principles, concepts, and best practices, including user provisioning, access management and identity governance.
- Proficiency in scripting languages such as Bash, PowerShell, or JavaScript (Node.js).
- Experience working in serverless environments, including familiarity with tools such as ArgoCD and Kubernetes is highly desired.
- Demonstrated mastery of RESTful APIs and web services.
- A deep understanding and practical application of CI/CD pipelines and DevOps practices (Gitlab experience required).
- Deep expertise in Active Directory, Azure Entra ID and authentication and federation protocols (SAML, OAuth, OpenID Connect).
- Security-first mindset, familiarity with AI/ML concepts and their applications on automation scenarios.
- Excellent problem-solving and analytical skills.
- Strong communication and interpersonal skills.
- Ability to work independently and as part of a team.
Preferred Qualifications:
- Saviynt Certification is desired.
- DEVOPS Certification
- Experience with cloud-based IAM solutions.
- Relevant certifications (e.g., CISSP, CISM).
- Experience with cloud platforms such as AWS, Azure, or GCP.
Experience with AI-powered automation tools and platforms
