IAM System Engineer @MMCTech [hybrid] Cluj Napoca

Company:

Description:

Join Our Team at Marsh McLennan (MMC) in Cluj, Romania!

Marsh McLennan (MMC) has established its EMEA Technology Hub in Cluj, Romania, reflecting our commitment to innovation and excellence; this hub is central to our digital strategy, addressing emerging challenges and enhancing service delivery through advanced technology solutions that empower our clients and promote sustainable growth;

We are seeking a talentedIdentity & Access Management (IAM) System Engineerto join our dynamic team; if you are passionate about security, cloud integrations, and cutting-edge IAM solutions, we want to hear from you!

We will count on you to:

• Design, implement, and manage IAM systems and solutions, including SSO, MFA, RBAC, and Privileged Access Management;

• Configure and maintain identity and access management tools such as Active Directory, Entra ID, OKTA, AWS Identity Centre, SailPoint, and Radiant Logic;

• Collaborate with security teams to define and enforce security policies and user access controls;

• Assist in user lifecycle management processes—onboarding, offboarding, and role changes;

• Integrate IAM systems with internal and third-party applications and services;

• Manage backup, recovery, auditing, and reporting for IAM systems to ensure security and compliance;

• Troubleshoot and resolve IAM-related issues, including access problems and authentication failures;

• Stay current with IAM technologies, trends, and security vulnerabilities;

• Develop and maintain documentation for IAM configurations, processes, and procedures;

• Work with security teams to identify and mitigate identity-related risks and vulnerabilities;

What you need to have:

• Extensive experience in designing, developing, and implementing Microsoft Active Directory, including DNS, GPO, Trusts, Schema, PKI, and backup/recovery;

• Proven expertise in Directory Services with cloud platforms such as Entra ID, AWS Identity Centre, OKTA Workforce, and CIAM;

• Strong background in SSO integrations using federation, SAML, OpenID, and risk-based authentication;

• Hands-on experience deploying OKTA WIC and CIC solutions, configuring enterprise SSO, and MFA;

• Knowledge of Privileged Access Management best practices, with experience using CyberArk, Delinea, or Beyond Trust;

• Proficiency in scripting languages such as PowerShell, Python, or JavaScript;

• Deep understanding of PKI, Certificate Services, and Windows OS security configurations;

• Experience with Zero Trust architecture and least privilege access models;

• Familiarity with Radiant Logic, SailPoint, Semperis DSP, and ADFR (nice to have);

• Basic understanding of Unix/Linux OS is a plus;

What makes you stand out:

• Certifications in IAM, security, or cloud platforms;

• Experience working in a global or multi-cloud environment;

• Strong problem-solving skills and a proactive approach to security challenges;

• Excellent communication skills and ability to collaborate across teams;

Why join our team:

• We help you be your best through professional development opportunities, interesting work, and supportive leaders;

• We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and have an impact for colleagues, clients, and communities;

• Our scale enables us to provide a range of career opportunities, as well as benefits and rewards to enhance your well-being;

• A yearly budget and the opportunity to build your flexible benefits package (up to 20% of your annual salary);

• 30+ days off (including legal days, birthday, public holiday replacements, and benefits options);

• Performance bonus scheme;

• Matching charity contributions, charity days off, and the Pay it Forward charity challenge;

• Core benefits: Pension, Life and Medical Insurance, Meal Vouchers, Travel Insurance;