Security Engineer - Identity

Expleo is a trusted partner for end-to-end, integrated engineering, quality services, and management consulting for digital transformation. We help businesses harness technological change to deliver innovation, improve resilience, and support the secure delivery of complex products, platforms, and systems.

As part of the Expleo UK Cybersecurity Practice, you will join a managed Cyber Operations service for a major UK energy network operator that forms part of the UK's Critical National Infrastructure (CNI). The service is governed by Expleo in the UK, with a 24/7 UK Security Operations Centre delivered by a specialist partner and an Expleo consultancy team in India providing design, engineering and assurance expertise across the client's security tooling estate.

As a Security Engineer | Identity, you will provide design, review, and analysis expertise across the client's privileged access management, identity and access management, multi-factor authentication, and PKI controls.

• →Provide subject matter expertise on privileged access management (PAM) architecture, configuration and policy, and recommend improvements.
• →Assess PAM change requests for security risk and prepare change designs for implementation by UK-based personnel.
• →Design access review approaches and analyse access review, joiner-mover-leaver and MFA allocation reporting released through the UK service boundary.
• →Report on the status of PKI, keys and certificates; track expiries and produce renewal plans.
• →Support the Senior Security Architect in evaluating PKI and secrets management tooling.
• →Maintain PAM, identity and PKI diagrams, policy and configuration documentation.
• →Define audit logging requirements for remote access, PAM and PKI in line with the logging design.
• →Track PAM platform vendor support status and produce upgrade recommendations.
• →Support the growth of Expleo's Cybersecurity Practice through knowledge sharing and technical contribution.

• Degree in computer science, cybersecurity or a related discipline, or equivalent professional experience.
• Vendor PAM certification, e.g. CyberArk Defender or Sentry, BeyondTrust or Delinea (at least one required).
• Microsoft SC-300, CompTIA Security+ or ISC2 SSCP would be advantageous.

• Identity governance platforms (e.g. SailPoint, Saviynt).
• HSM concepts and secrets management tooling.
• Energy, utilities or other CNI sector experience.

• PAM platform expertise (e.g. CyberArk, BeyondTrust, Delinea).
• Active Directory, Entra ID, conditional access and MFA technologies.
• Enterprise PKI and certificate lifecycle management (e.g. Microsoft AD CS, Venafi, Keyfactor).
• Identity governance and access certification concepts.
• PowerShell scripting, reporting and data analysis.
• ITIL change processes and clear technical documentation.

• 4-7 years in identity and access management or PAM engineering.
• Experience with PAM policy design, access reviews and certificate lifecycle management in enterprise environments.

• Have the right to work in India.
• Be based in, or willing to relocate to, Chennai.
• Be willing to complete Expleo enhanced pre-employment background screening (equivalent in standard to the UK Baseline Personnel Security Standard) and any additional vetting the client requires.
• Be able to work hours that overlap with the UK business day, with occasional out-of-hours advisory support during major incidents.
• Have excellent written and spoken English, suitable for engagement with senior UK stakeholders.
• Be comfortable working within a strict security boundary, with no access to the client's operational systems or data.