Digital Identity Consultant, IAM & PKI

DXC Technology

. Design highly available CyberArk vault clusters, SailPoint connector architecture, and Thales Root/Sub-CA hierarchy with M-of-N ceremonies .

Posted 11/9/2026full-timeCairo • EgyptSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and managing CyberArk vault clusters, SailPoint connector architecture, and HSM-backed PKI systems while ensuring compliance with zero-trust principles. Proven ability to lead privileged-access audits and key-ceremony operations, with a strong focus on automation and operational excellence.

Highest-signal resume keywords

CyberArk DesignSailPoint Lifecycle ManagementHSM-Backed PKI ExperiencePrivileged-Access AuditsAutomation with Python/PowerShell

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

IAMPAMPKIREST APIsTLSX.509SSHSAML/OIDCSCIMDevOps Pipelines

Soft Skills

CoachingLeadershipCommunication

Tools & Technologies

CyberArkSailPointThales LunaMPASSQRadarAnsibleGit

Certifications & Qualifications

CyberArk CDESailPoint IDNCISSPCCSPITIL v4ISO 27001 Lead Implementer

Industry Keywords

SAMANCAZero-Trust PrinciplesPrivileged-Access ManagementIdentity Governance

Tech Stack

Tools & technologies

AnsiblePythonVault

About the role

Key responsibilities & impact

Design highly available CyberArk vault clusters, SailPoint connector architecture, and Thales Root/Sub-CA hierarchy with M-of-N ceremonies
Define privileged-account onboarding standards, IGA birth-right roles, and PKI certificate profiles aligned to zero-trust principles
Serve as final escalation point for CPM failure, vault corruption, SailPoint provisioning errors, MPASS OTP outage, and HSM card set issues
Conduct packet/protocol traces and HSM log analysis; produce formal RCA and mitigation plans
Map vault session logs, SailPoint certification data, and CA event logs to SAMA evidence matrices
Present evidence to internal and external auditors
Lead quarterly privileged-access reviews and annual PKI key-ceremony documentation
Develop REST/CLI scripts to automate account onboarding, access review exports, certificate renewal, and SIEM log forwarding to QRadar
Create runbooks, lab environments, and knowledge articles
Coach two L2 IAM/PKI engineers and oversee their daily queue
Participate in vendor roadmap sessions and advise management on license and hardware scaling
Participate in on-call coverage for P1 escalations and PKI key ceremonies
Attend on-site data-centre operations during key activities

Requirements

What you’ll need

Bachelors in computer science, Information Security or related
7+ years dedicated IAM/PAM/PKI experience
3+ years on CyberArk (Safe design, CPM/PSM)
2+ years on SailPoint (cert campaigns, lifecycle manager)
Experience with HSM-backed PKI (Thales Luna / CipherTrust)
Experience with enterprise MFA (MPASS or equivalent)
Proven track-record leading key-ceremony operations and privileged-access audits for financial institutions under SAMA/NCA
Deep understanding of TLS, X.509, SSH, Kerberos, SAML/OIDC, SCIM, and REST
Experience automating with Python/PowerShell or REST APIs
CyberArk CDE, SailPoint IDN / IdentityIQ Engineer, Thales Luna CSP, CISSP or CCSP certifications listed as desired
ITIL v4, ISO 27001 Lead Implementer, or equivalent audit/ops framework listed as desired
Familiarity with DevOps pipelines (Git, Ansible) for access-control automation
Core hours Sun-Thu, 9×5, with participation in an on-call rota for P1 escalations and PKI key ceremonies
Must pass SAMA background screening and maintain strict confidentiality

Benefits

Comp & perks

In-person collaboration with flexibility to support wellbeing, productivity, individual work styles, and life circumstances
Inclusive work environment
Full-time employment