Associate Cybersecurity Engineer

As an Associate Cybersecurity Engineer in the IAM Team, you will play a pivotal role in Visa’s global Identity and Access Management (IAM) program—a cornerstone of our cybersecurity strategy. You will focus on implementing, managing, and automating IAM solutions covering the entire identity lifecycle: from provisioning and authentication to privileged access and governance, with a strong emphasis on leveraging AI-driven automation.

This position is ideal for professionals passionate about IAM domains (Identity Governance & Administration, Privileged Access Management, Authentication & Authorization, and Access Reviews/Certifications) and hands-on experience with leading IAM technologies.

Essential Functions:

IAM Operations & Technology Management

• Operate, administer, and optimize enterprise IAM solutions, including:

  • Identity Governance & Administration (IGA): SailPoint, ForgeRock, Microsoft Azure AD

  • Privileged Access Management (PAM): BeyondTrust, CyberArk, Password Safe, Enterprise Random Password Manager

  • Access Management & Federation: Okta, Azure AD, SAML, OIDC, OAuth

  • Directory Services: Active Directory, LDAP

• Manage robust onboarding and lifecycle management of identities (workforce, privileged, application, and non-human identities) across on-premises and cloud environments.

• Automate user provisioning, deprovisioning, and access certification processes using scripts, APIs, and AI-powered workflows.

IAM Governance, Risk & Compliance

• Automate and validate IAM controls, evidence collection, and access reviews to ensure compliance with regulatory standards (GDPR, SOX, PCI-DSS, HIPAA).

• Support audit activities by interpreting requests, compiling accurate access data, and driving remediation of IAM-related findings.

• Monitor and enforce least privilege and Zero Trust access principles across all systems.

Privileged Access Security

• Implement, manage, and maintain PAM solutions:

  • Secure vaulting of privileged credentials

  • Session management and recording

  • Automated password rotation and compliance reporting

• Optimize and automate patching, vulnerability remediation, and compliance of PAM infrastructure.

Access Governance & Analytics

• Develop and enhance AI/ML-driven analytics for access anomalies, role mining, and segregation of duties (SoD) analysis.

• Integrate Gen AI and automation to detect, respond, and mitigate identity-related risks and threats.

Incident Response & Change Management

• Triage and respond to IAM/PAM incidents (privilege misuse, access anomalies, identity compromise), ensuring rapid containment and recovery.

• Implement change management for IAM platforms, ensuring operational continuity and security integrity.

Continuous Improvement & Collaboration

• Drive continuous improvement by integrating best practices, automation, and innovative technologies into IAM workflows.

• Collaborate with application owners, infrastructure, security, and compliance teams to deliver scalable, secure, and user-friendly IAM solutions.

• Maintain documentation, runbooks, and knowledge base articles for operational excellence.

This is a hybrid position. Expectation of days in office will be confirmed by your hiring manager.