Identity & Access Management Operations Specialist

Job Description We are seeking a highly motivated **Identity & Access Management (IAM) Operations Specialist** to join our global Tier 2 IAM Operations team. This role supports a fast-paced, enterprise environment and is responsible for the operation, support, maintenance, and improvement of multiple identity and access management services across the organization. The ideal candidate is security-focused, self-motivated, collaborative, and experienced in managing technical work through to completion. You should be comfortable working across teams, gathering requirements, troubleshooting issues, and helping implement secure, compliant, and scalable IAM solutions. **Key Responsibilities:** * Provide day-to-day operational support for multiple IAM services, including: * PingFederate * PingAccess * Delinea Secret Server * Symantec VIP for multi-factor authentication * Microsoft Authenticator * SailPoint IdentityNow * Quest Password Manager * Hitachi Password Manager * Install security patches, perform version upgrades, support bug fixes, carry out performance tuning, and generate reporting for IAM products. * Coordinate and provide guidance during critical service outages and incidents. * Gather business and technical requirements to implement Single Sign-On (SSO) with third-party vendor applications. * Collaborate with application and infrastructure teams to identify privileged accounts and onboard them into Delinea Secret Server to reduce security risk. * Configure and support SailPoint IdentityNow access certifications, including periodic access reviews to meet audit and compliance requirements. * Support product migration analysis and execution for IAM services. * Evaluate services using monitoring tools and meet with clients to identify security gaps and recommend enhancements to prevent security breaches. * Establish and maintain periodic vulnerability scans for IAM services to mitigate security risks. * Plan and execute Disaster Recovery (DR) exercises to ensure minimal impact to IAM services during any disaster scenario. * Automate security-related functions not supported natively by products using Java, Linux scripting, PowerShell, and product APIs. * Work closely with security teams and stakeholders to gather requirements, validate feasibility, and plan implementation. * Continuously drive improvements in quality, value, and operational effectiveness. * Apply least-privileged access principles in all operational activities. **Required Qualifications, Skills, and Experience:** * Minimum education: * MSc degree, BSc degree, or equivalent relevant experience in Computer Science, Computer Engineering, or a related field. * Required experience: * 3+ years of experience supporting large-scale enterprise IAM environments and related services. * Experience supporting real-time events and providing moderated services in an operational environment. * Ability to quickly acquire new skills and adapt in a diverse environment. * Fluent in English, both verbal and written. **Technical Requirements:** * Experience with Microsoft Windows Server infrastructure * Experience with Red Hat Linux infrastructure * Advanced knowledge of large network environments, including F5 load balancer concepts **Desired Competencies:** * Strong communication and documentation skills * Proven compliance and audit support experience * Excellent problem-solving and troubleshooting abilities * Strong collaboration skills and ability to work effectively in global teams * Security mindset with attention to detail * Ability to manage priorities in a dynamic environment **Why Join Us?** This is an opportunity to play a key role in securing enterprise identity services in a global organization. You will work with modern IAM technologies, collaborate with highly skilled teams, and contribute to the security, compliance, and resilience of critical business systems. **Required Skills:** Availability Management, Change Controls, Incident Management, Management System Development, Problem Management, Quality Assurance (QA), Service Delivery, SLA Management, Software Configurations, Software Development Life Cycle (SDLC), Testing **Preferred Skills:** Current Employees apply [HERE](https://wd5.myworkday.com/msd/d/task/1422$6687.htmld) Current Contingent Workers apply [HERE](https://wd5.myworkday.com/msd/d/task/1422$4020.htmld) **Search Firm Representatives Please Read Carefully**  Merck & Co., Inc., Rahway, NJ, USA, also known as Merck Sharp & Dohme LLC, Rahway, NJ, USA, does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for this position will be deemed the sole property of our company.  No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails.  **Employee Status:** Regular **Relocation:** No relocation **VISA Sponsorship:** No **Travel Requirements:** No Travel Required **Flexible Work Arrangements:** Hybrid **Shift:** Not Indicated **Valid Driving License:** No **Hazardous Material(s):** n/a **Job Posting End Date:** 08/31/2026 **\*A job posting is effective until 11:59:59PM on the day BEFORE the listed job posting end date. Please ensure you apply to a job posting no later than the day BEFORE the job posting end date.**