Identity and Access Management Technical Expert

Identity and Access Management Technical Expert Job Details | King Abdullah University of Science & Technology
Home
Professional Life at KAUST
Living at KAUST
Career Areas
Academic and Research Jobs
Innovation and Entrepreneurship Jobs
Administration and Support Services Jobs
Engineering and Facilities Management Jobs
The KAUST School Jobs
Elevate Program
Join our Talent Community
Identity and Access Management Technical Expert
Date: Nov 10, 2026
Location:
Saudi Arabia
Company:
King Abdullah University of Science & Technology
Position Summary
The IAM Technical Expert is a senior hands-on expert technical authority accountable for the architecture, detailed solution design, integrated technical implementation and orchestration of KAUST’s enterprise Identity and Access Management (IAM), Privileged Access Management (PAM), and Identity Governance and Administration (IGA) capabilities. The role leads secure identity integration across Microsoft Entra, Saviynt, a selected PAM technology, and enterprise, cloud, academic and research systems. It drives phased deployment, engineering quality, automation and operational readiness, establishing sustainable services with formally designated owners.
Major Responsibilities
Enterprise Identity Architecture & Technical Direction
• Own the end-to-end IAM, PAM and IGA target architecture, reference designs, implementation principles and phased technical roadmap aligned with KAUST security strategy and Zero Trust principles.
• Define trust boundaries, identity data flows, authoritative sources, integration patterns, identity stores and control ownership across on-premises, hybrid and multi-cloud environments.
• Act as design authority for cross-platform technical decisions, technical debt, interoperability, resilience and engineering standards; maintain current architecture diagrams and decision records.
• Design for complex identity populations including staff, faculty, students, researchers, visiting scholars, affiliates, contractors, service identities and external collaborators.
IAM: Authentication, Federation & Access Architecture
• Lead Microsoft Entra architecture and hands-on engineering for workforce identities, hybrid identity synchronization, single sign-on, federation, MFA, Conditional Access and identity protection.
• Define secure authentication and authorization patterns using SAML 2.0, OAuth 2.0, OpenID Connect, FIDO2/passkeys, SCIM, LDAP and API-based integrations as appropriate.
• Engineer application onboarding patterns, group and attribute-based access, delegated administration, break-glass access and recovery controls.
• Integrate identity services with enterprise applications, cloud platforms, collaboration tools, research platforms, laboratory systems and external federation ecosystems.
PAM: Privileged Access Architecture & Engineering
• Lead PAM platform evaluation, detailed design, implementation and integration, including privileged discovery, account and secret onboarding, secure credential vaulting and automated rotation.
• Engineer privileged session brokering, recording and monitoring; just-in-time/just-enough administration; approval workflows and privileged elevation for infrastructure and cloud.
• Address administrators, root/service accounts, local and domain privileged accounts, application credentials, machine identities, secrets, API keys and emergency access.
• Design PAM integrations with Entra, Saviynt, directories, infrastructure, cloud control planes, SIEM/SOC, ITSM and relevant DevOps/secrets tooling.
• Define PAM coverage, exception handling, platform hardening, resilience, controlled cutover and evidence that standing privilege and unmanaged secrets are reduced.
IGA: Identity Lifecycle, Governance & Access Controls
• Lead Saviynt IGA solution architecture, configuration, integration and rollout for identity aggregation, birthright access and joiner-mover-leaver automation.
• Design access requests, policy-based approval, entitlement catalogues, role models, access reviews/certifications, segregation-of-duties controls and exception processes.
• Integrate authoritative HR/student/affiliate data and application endpoints; define identity correlation, reconciliation, provisioning, deprovisioning and orphan-account remediation.
• Ensure consistent governance of privileged entitlements with PAM, including account ownership, approval, attestation, revocation and audit evidence.
• Partner with business and application owners to establish entitlement ownership, reviewer accountability and risk-based certification scope.
Integrated Platform Implementation & Orchestration
• Translate target architecture into low-level designs, interface contracts, configuration baselines, delivery backlogs, test plans and repeatable deployment patterns.
• Personally guide complex designs, prototypes, connector development and troubleshooting while directing work by internal engineers, application teams and implementation partners.
• Or

Apply directly at جامعة الملك عبدالله للعلوم والتقنية