Group Senior Identity and Access Management Engineer at Lesaka Technologies

Description

• We are seeking a skilled and dedicated Identity Engineer to join our Group Tech team. The Identity Engineer will be responsible for designing, implementing, and maintaining identity and access management solutions to ensure the security and integrity of Lesaka's systems and data.
• This role requires a strong understanding of identity and access management principles, security best practices, and technical expertise in IAM technologies.

Responsibilities

• Design, build, and operate an end-to-end JML lifecycle process integrating Microsoft Entra ID with HR (Sage) and service management (Jira) systems.
• Execute Lesaka's IAM strategy in collaboration with management.
• Define policies, standards, and procedures related to identity management and access control.
• Ensure Lesaka’s fundamental identity and access management principles, such as segregation of duties and least privileged access control, is implemented across all business areas and products.
• Design and implement IAM solutions, including user provisioning, authentication, authorization, and identity lifecycle management.
• Ensure access controls align with security policies and compliance requirements including, but not limited to, ensuring SOX IT General Controls related to access management is effectively executed.
• Deploy and configure IAM technologies, such as Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Role-Based Access Control (RBAC).
• Integrate IAM solutions with enterprise applications and systems.
• Monitor IAM systems for security threats and vulnerabilities.
• Participate in security audits and assessments, addressing findings and ensuring compliance with industry standards and regulations.
• Develop and maintain identity governance processes, including access certification, role management, and entitlement reviews.
• Implement workflows and automation for identity provisioning and deprovisioning.
• Investigate and resolve IAM-related issues and incidents.
• Provide support for end-users and assist in troubleshooting access problems.
• Maintain comprehensive documentation of IAM configurations, policies, and procedures.
• Generate reports on IAM activities, access requests, and security incidents.
• Collaborate with cross-functional teams, including IT, compliance, and application owners, to ensure IAM requirements are met.
• Provide training and guidance to employees and teams on IAM best practices.
• Stay current with IAM industry trends, emerging technologies, and security threats.
• Identify opportunities for process improvement and automation within the IAM environment.

Qualifications

• 5-7 years of experience in identity and access management, with at least 2 years in a design/architecture capacity.
• Bachelor's degree in Information Security, Computer Science, or a related field (or equivalent work experience).
• SC-300 (Microsoft Identity and Access Administrator Associate) certification required.
• Demonstrated experience building identity lifecycle automation, not just operating existing solutions.
• Hands-on Microsoft Entra ID Governance experience, including access reviews, entitlement management, and lifecycle workflows.
• Scripting and automation capability with PowerShell and Microsoft Graph API.
• Strong technical knowledge of IAM technologies, such as Microsoft Active Directory, LDAP, SSO, and MFA.
• SOX-ITGC experience essential.
• Familiarity with security frameworks and compliance standards (e.g., NIST, ISO 27001).
• Experience with other IAM solutions such as Okta, CyberArk, SailPoint, or Ping Identity is a plus.
• Excellent problem-solving and analytical skills.
• Strong communication and interpersonal abilities.
• Relevant security certifications (e.g., CISSP, CISM, CompTIA Security+) are a plus.
• Strong knowledge in Azure Sentinel and Netwrix AD Auditor is advantageous.

Closing Date 20 May 2026