Lesaka is a leading South African financial technology company. We deliver financial services to consumers (B2C) and merchants (B2B) in Southern Africa through our proprietary banking and payment technologies. We offer banking, lending and insurance products to consumers and cash management solutions, bill payment technologies, value-added services, business funding and card acquiring solutions to formal and informal retail merchants.

Description

We are seeking a skilled and dedicated Identity Engineer to join our Group Tech team. The Identity Engineer will be responsible for designing, implementing, and maintaining identity and access management solutions to ensure the security and integrity of Lesaka's systems and data. This role requires a strong understanding of identity and access management principles, security best practices, and technical expertise in IAM technologies.

Responsibilities

• Execute Lesaka's IAM strategy in collaboration with management.

• Define policies, standards, and procedures related to identity management and access control.

• Ensure Lesaka’s fundamental identity and access management principles, such as segregation of duties and least privileged access control, is implemented across all business areas and products.

• Design and implement IAM solutions, including user provisioning, authentication, authorization, and identity lifecycle management.

• Ensure access controls align with security policies and compliance requirements including, but not limited to, ensuring SOX IT General Controls related to access management is effectively executed.

• Deploy and configure IAM technologies, such as Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Role-Based Access Control (RBAC).

• Integrate IAM solutions with enterprise applications and systems.

• Monitor IAM systems for security threats and vulnerabilities.

• Participate in security audits and assessments, addressing findings and ensuring compliance with industry standards and regulations.

• Develop and maintain identity governance processes, including access certification, role management, and entitlement reviews.

• Implement workflows and automation for identity provisioning and deprovisioning.

• Investigate and resolve IAM-related issues and incidents.

• Provide support for end-users and assist in troubleshooting access problems.

• Maintain comprehensive documentation of IAM configurations, policies, and procedures.
  Generate reports on IAM activities, access requests, and security incidents.

• Collaborate with cross-functional teams, including IT, compliance, and application owners, to ensure IAM requirements are met.

• Provide training and guidance to employees and teams on IAM best practices.

• Stay current with IAM industry trends, emerging technologies, and security threats.

• Identify opportunities for process improvement and automation within the IAM environment.
  
  

Qualifications

• Bachelor's degree in Information Security, Computer Science, or a related field (or equivalent work experience).

• Microsoft EntraID Certification.

• Proven experience in identity and access management or a related security role.

• Strong technical knowledge of IAM technologies, such as Microsoft Active Directory, LDAP, SSO, and MFA.

• Familiarity with security frameworks and compliance standards (e.g., SOX-ITGC, NIST, ISO 27001).

• Experience with other IAM solutions such as Okta, CyberArk, SailPoint, or Ping Identity is a plus.

• Excellent problem-solving and analytical skills.

• Strong communication and interpersonal abilities.

• Relevant security certifications (e.g., CISSP, CISM, CompTIA Security+) are a plus.

• Strong knowledge in Azure Sentinel and Netwrix AD Auditor is advantageous.