KPMG—IAM Technical Assistant Manager-MFT-KGS CH

Job description

Description: We are seeking an experienced IAM Technical Assistant Manager to join our Identity and Access Management team. This is a hands-on technical role focused on improving and automating IAM services through Infrastructure as Code, scripting, platform engineering, and technical governance. The successful candidate will help maintain and evolve IAM platforms, review Infrastructure as Code changes, improve automation capabilities, and support the delivery of scalable and secure identity services. They will work closely with architects, engineers, product owners, and operational teams to ensure IAM solutions are secure, maintainable, and aligned with KPMG security standards. The role will leverage Terraform, GitHub, GitHub Actions, PowerShell, Python, and modern DevOps practices to drive automation and continuous improvement across the IAM technology estate. Experience with identity governance, privileged access management, and enterprise identity platforms will be highly beneficial. Requirements: Prior Experience You must have: - 3+ years of experience within Identity and Access Management (IAM), Cyber Security Engineering, Platform Engineering, or a related technical discipline. - Strong hands-on experience with Terraform and Infrastructure as Code principles. - Strong experience using GitHub for source control, code review, branching strategies, pull request management, and collaborative development practices. - Hands-on experience designing, maintaining, and troubleshooting GitHub Actions workflows supporting CI/CD pipelines, automated testing, deployment, and Infrastructure as Code delivery. - Experience integrating Terraform deployments into GitHub Actions or equivalent automation platforms. - Experience developing automation solutions using PowerShell, Python, or similar scripting languages. - Understanding of CI/CD pipelines and modern software delivery practices. - Experience reviewing technical implementations and code changes to ensure quality, security, and maintainability. - Strong understanding of SSO, MFA, Federation, OAuth 2.0, OpenID Connect (OIDC), and SAML. - Understanding of identity lifecycle management, access governance, and privileged access management concepts. - Experience working with APIs, automation frameworks, and system integrations. - Ability to troubleshoot complex technical issues and drive improvements through structured problem solving. - Strong communication skills and ability to engage both technical and non-technical stakeholders. - Experience working in regulated or enterprise-scale environments. It would be advantageous if you have: - Experience with Identity Governance and Administration (IGA) platforms such as SailPoint. - Experience with Privileged Access Management (PAM) platforms such as CyberArk. - Experience with enterprise identity platforms such as Okta, Microsoft Entra ID, Ping Identity, ForgeRock, or similar technologies. - Experience implementing identity automation and self-service access solutions. - Knowledge of Microsoft Azure, AWS, or GCP. - Experience working within Agile and DevOps delivery models. - Industry certifications such as CISSP, CCSP, Security+, Terraform Associate, Microsoft Identity and Access Administrator, Azure, AWS, or equivalent. Key Competencies - IAM Engineering - Infrastructure as Code (Terraform) - GitHub & GitHub Actions - Automation & Scripting (PowerShell/Python) - Identity Governance - Privileged Access Management - CI/CD & DevOps Practices - Technical Design Review - Problem Solving & Continuous Improvement - Stakeholder Management - Security by Design - Technical Leadership & Mentoring Responsibilities: - Support the design, implementation, and operation of enterprise IAM services across cloud and on-premises environments. - Review Infrastructure as Code submissions to ensure solutions are secure, scalable, maintainable, and aligned with architectural standards. - Drive automation initiatives that improve operational efficiency, reduce manual effort, and strengthen security controls. - Develop and maintain Terraform modules, reusable deployment patterns, and engineering standards across IAM platforms. - Create and enhance automation solutions using PowerShell, Python, or similar scripting languages. - Maintain and improve GitHub repositories, branching standards, pull request governance, and GitHub Actions workflows. - Collaborate with engineering teams to integrate IAM capabilities into CI/CD pipelines and DevOps delivery processes. - Provide technical assurance and governance for IAM-related changes, deployments, and integrations. - Support application onboarding activities and identity integrations. - Review code, configuration, workflows, and automation implementations. - Troubleshoot complex IAM platform issues and identify opportunities for optimisation. - Work with architects and security teams to translate IAM strategy into practical technical solutions. - Contribute to technical standards, documentation, procedures, and best practices. - Support access governance, identity lifecycle management, and privileged access management initiatives. - Assist with the evaluation and adoption of new IAM technologies. - Support major incident resolution and root cause analysis. - Provide technical mentoring and guidance to team members and project stakeholders.